, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 09:40:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:36 executing program 4: open(&(0x7f0000000340)='./file1\x00', 0x404c0, 0x0) setxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'security.', '[,\x83!{\x00'}, 0x0, 0x0, 0x0) 09:40:36 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3c9440, 0x95) [ 2489.456738][T15545] usb 2-1: USB disconnect, device number 68 [ 2489.485221][T23986] hub 2-1:0.0: activate --> -19 09:40:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 09:40:36 executing program 4: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x28000) 09:40:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x0) [ 2489.625135][ T9274] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2489.637663][T17658] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2489.715165][ T3324] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2489.765143][ T7623] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2489.865120][ T9274] usb 1-1: Using ep0 maxpacket: 16 [ 2489.885646][T17658] usb 6-1: Using ep0 maxpacket: 16 09:40:37 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2489.975309][ T3324] usb 3-1: Using ep0 maxpacket: 16 [ 2489.989986][ T9274] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2490.002796][ T9274] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2490.014854][T17658] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2490.027735][ T7623] usb 4-1: Using ep0 maxpacket: 16 [ 2490.032842][ T9274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2490.040858][T17658] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2490.051635][ T9274] usb 1-1: config 0 descriptor?? [ 2490.056875][T17658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2490.067355][T17658] usb 6-1: config 0 descriptor?? [ 2490.097451][ T9274] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2490.107274][ T3324] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2490.118592][T17658] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2490.125355][ T3324] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2490.139974][ T3324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2490.145301][ T7623] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2490.161224][ T7623] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2490.161415][ T3324] usb 3-1: config 0 descriptor?? [ 2490.170359][ T7623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2490.193127][ T7623] usb 4-1: config 0 descriptor?? [ 2490.237026][ T7623] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2490.237321][ T3324] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2490.285088][T17658] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2490.299519][ T7623] usb 1-1: USB disconnect, device number 87 [ 2490.310026][ T9274] usb 6-1: USB disconnect, device number 57 [ 2490.454489][T15545] usb 4-1: USB disconnect, device number 53 [ 2490.454641][ T3324] usb 3-1: USB disconnect, device number 43 [ 2490.525088][T17658] usb 2-1: Using ep0 maxpacket: 16 [ 2490.645242][T17658] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2490.660801][T17658] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2490.679261][T17658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2490.688691][T17658] usb 2-1: config 0 descriptor?? [ 2490.727012][T17658] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2490.855091][ T7623] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2490.875315][ T9274] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2490.927479][T23986] usb 2-1: USB disconnect, device number 69 [ 2491.035053][T15545] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2491.047901][ T3324] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2491.095002][ T7623] usb 1-1: Using ep0 maxpacket: 32 [ 2491.115199][ T9274] usb 6-1: Using ep0 maxpacket: 32 [ 2491.215028][ T7623] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2491.228077][ T7623] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2491.243002][ T9274] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2491.254039][ T7623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2491.268431][ T9274] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2491.278203][T15545] usb 4-1: Using ep0 maxpacket: 32 [ 2491.289689][ T9274] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2491.299084][ T7623] usb 1-1: config 0 descriptor?? [ 2491.313696][ T9274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2491.326297][ T9274] usb 6-1: config 0 descriptor?? [ 2491.326937][ T3324] usb 3-1: Using ep0 maxpacket: 32 [ 2491.339536][ T7623] hub 1-1:0.0: bad descriptor, ignoring hub [ 2491.350738][ T7623] hub: probe of 1-1:0.0 failed with error -5 [ 2491.365291][ T9274] hub 6-1:0.0: USB hub found [ 2491.371483][ T7623] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2491.404983][T15545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2491.416112][T15545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2491.427673][T15545] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2491.437085][T15545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2491.445900][T15545] usb 4-1: config 0 descriptor?? [ 2491.476451][ T3324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2491.485390][T15545] hub 4-1:0.0: USB hub found [ 2491.496731][ T3324] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2491.514506][ T3324] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2491.526602][ T3324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2491.536639][ T3324] usb 3-1: config 0 descriptor?? [ 2491.556851][T23986] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2491.576578][ T3324] hub 3-1:0.0: USB hub found [ 2491.584974][ T9274] hub 6-1:0.0: 1 port detected [ 2491.704960][T15545] hub 4-1:0.0: 1 port detected [ 2491.784947][ T3324] hub 3-1:0.0: 1 port detected [ 2491.824907][T23986] usb 2-1: Using ep0 maxpacket: 32 [ 2491.985104][T23986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2491.996265][T23986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2492.008908][T23986] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2492.018619][T23986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2492.028675][T23986] usb 2-1: config 0 descriptor?? [ 2492.075220][T23986] hub 2-1:0.0: USB hub found [ 2492.284934][T23986] hub 2-1:0.0: 1 port detected [ 2492.515374][ T7623] usb 6-1: USB disconnect, device number 58 [ 2492.534889][ T9274] hub 6-1:0.0: activate --> -19 [ 2492.595480][ T6154] usb 4-1: USB disconnect, device number 54 [ 2492.616125][T15545] hub 4-1:0.0: activate --> -19 [ 2492.664933][T15688] usb 1-1: USB disconnect, device number 88 [ 2492.665228][T15545] usb 3-1: USB disconnect, device number 44 [ 2492.684843][ T3324] hub 3-1:0.0: activate --> -19 09:40:40 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:40 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x0) 09:40:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:40 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101800, 0x1bc) 09:40:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x8050) 09:40:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4800) [ 2493.193598][T15688] usb 2-1: USB disconnect, device number 70 [ 2493.199620][ T6154] hub 2-1:0.0: activate --> -19 09:40:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20004000) 09:40:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x48}}, 0x0) 09:40:40 executing program 4: syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x40000) [ 2493.346099][T23986] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2493.353672][ T3324] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2493.484741][ T6154] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2493.514888][T17418] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2493.604727][ T3324] usb 1-1: Using ep0 maxpacket: 16 [ 2493.610051][T23986] usb 6-1: Using ep0 maxpacket: 16 09:40:40 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2493.734752][T23986] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2493.747611][ T3324] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2493.760401][ T6154] usb 3-1: Using ep0 maxpacket: 16 [ 2493.765676][ T3324] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2493.784686][T23986] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2493.794895][T17418] usb 4-1: Using ep0 maxpacket: 16 [ 2493.800007][ T3324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2493.808141][T23986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2493.817813][ T3324] usb 1-1: config 0 descriptor?? [ 2493.823129][T23986] usb 6-1: config 0 descriptor?? [ 2493.867421][T23986] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2493.876853][ T3324] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2493.914702][ T6154] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2493.927766][T17418] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2493.940602][ T6154] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2493.958262][T17418] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2493.970344][ T6154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2493.981170][T17418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2493.992549][ T6154] usb 3-1: config 0 descriptor?? [ 2494.004387][T17418] usb 4-1: config 0 descriptor?? [ 2494.009479][T15688] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2494.036821][ T6154] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2494.066324][ T6154] usb 6-1: USB disconnect, device number 59 [ 2494.078250][T15545] usb 1-1: USB disconnect, device number 89 [ 2494.080590][T17418] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2494.236388][T17418] usb 3-1: USB disconnect, device number 45 [ 2494.280586][T17658] usb 4-1: USB disconnect, device number 55 [ 2494.297870][T15688] usb 2-1: Using ep0 maxpacket: 16 [ 2494.434763][T15688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2494.447798][T15688] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2494.464455][T15688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2494.476870][T15688] usb 2-1: config 0 descriptor?? [ 2494.517027][T15688] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2494.644622][T15545] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2494.684683][ T6154] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2494.715988][T15688] usb 2-1: USB disconnect, device number 71 [ 2494.834609][T17658] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2494.844575][T17418] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2494.884578][T15545] usb 1-1: Using ep0 maxpacket: 32 [ 2494.934651][ T6154] usb 6-1: Using ep0 maxpacket: 32 [ 2495.004575][T15545] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2495.018236][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2495.030233][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.039434][T15545] usb 1-1: config 0 descriptor?? [ 2495.064599][ T6154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2495.075003][T15545] hub 1-1:0.0: bad descriptor, ignoring hub [ 2495.081553][ T6154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2495.081559][T17658] usb 4-1: Using ep0 maxpacket: 32 [ 2495.081714][T15545] hub: probe of 1-1:0.0 failed with error -5 [ 2495.104522][T17418] usb 3-1: Using ep0 maxpacket: 32 [ 2495.106764][T15545] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2495.122550][ T6154] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2495.142755][ T6154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.152598][ T6154] usb 6-1: config 0 descriptor?? [ 2495.194558][T17658] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2495.194896][ T6154] hub 6-1:0.0: USB hub found [ 2495.207301][T17658] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2495.210035][T15688] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2495.238290][T17658] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2495.249961][T17658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.259130][T17658] usb 4-1: config 0 descriptor?? [ 2495.270269][T17418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2495.281423][T17418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2495.295366][T17658] hub 4-1:0.0: USB hub found [ 2495.299193][T17418] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2495.318583][T17418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.330869][T17418] usb 3-1: config 0 descriptor?? [ 2495.395017][T17418] hub 3-1:0.0: USB hub found [ 2495.424552][ T6154] hub 6-1:0.0: 1 port detected [ 2495.484533][T15688] usb 2-1: Using ep0 maxpacket: 32 [ 2495.514526][T17658] hub 4-1:0.0: 1 port detected [ 2495.604524][T17418] hub 3-1:0.0: 1 port detected [ 2495.609332][T15688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2495.620308][T15688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2495.630248][T15688] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2495.640302][T15688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2495.650711][T15688] usb 2-1: config 0 descriptor?? [ 2495.724924][T15688] hub 2-1:0.0: USB hub found [ 2495.934536][T15688] hub 2-1:0.0: 1 port detected [ 2496.305020][ T9274] usb 6-1: USB disconnect, device number 60 [ 2496.324465][T23986] hub 6-1:0.0: activate --> -19 [ 2496.406020][T15545] usb 4-1: USB disconnect, device number 56 [ 2496.417820][ T6154] usb 1-1: USB disconnect, device number 90 [ 2496.426646][T17658] hub 4-1:0.0: activate --> -19 [ 2496.525939][T15688] usb 3-1: USB disconnect, device number 46 [ 2496.536096][T17418] hub 3-1:0.0: activate --> -19 09:40:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:43 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 09:40:43 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a000090400"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:43 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, 0x0, 0x0) [ 2496.814749][T15545] usb 2-1: USB disconnect, device number 72 [ 2496.824393][ T6154] hub 2-1:0.0: activate --> -19 09:40:44 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:44 executing program 4: sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x5b17eb7f800be75f) 09:40:44 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4004) 09:40:44 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x7, 0x4) 09:40:44 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff}) getpeername(r0, 0x0, 0x0) 09:40:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f00000000c0)=0x80) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) [ 2497.140028][ T6154] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2497.144349][ T7623] usb 6-1: new high-speed USB device number 61 using dummy_hcd 09:40:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2497.324302][T17658] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2497.331876][T15545] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2497.394296][ T7623] usb 6-1: Using ep0 maxpacket: 16 [ 2497.424270][ T6154] usb 1-1: Using ep0 maxpacket: 16 [ 2497.514545][ T7623] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2497.527409][ T7623] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2497.542138][ T7623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2497.555740][ T7623] usb 6-1: config 0 descriptor?? [ 2497.556067][ T6154] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2497.573991][T17658] usb 4-1: Using ep0 maxpacket: 16 [ 2497.576078][ T6154] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2497.584259][T15545] usb 3-1: Using ep0 maxpacket: 16 [ 2497.588516][ T6154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2497.596552][ T7623] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2497.610533][ T6154] usb 1-1: config 0 descriptor?? [ 2497.635793][T17418] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2497.666509][ T6154] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2497.694272][T17658] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2497.707206][T17658] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2497.722512][T17658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2497.733482][T15545] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2497.746510][T15545] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2497.755980][T17658] usb 4-1: config 0 descriptor?? [ 2497.763659][T15545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2497.777158][T15545] usb 3-1: config 0 descriptor?? [ 2497.797996][T17658] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2497.816145][T15545] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2497.825967][T15545] usb 6-1: USB disconnect, device number 61 [ 2497.867103][T17658] usb 1-1: USB disconnect, device number 91 [ 2497.894530][T17418] usb 2-1: Using ep0 maxpacket: 16 [ 2497.996126][ T6154] usb 4-1: USB disconnect, device number 57 [ 2498.017514][T15688] usb 3-1: USB disconnect, device number 47 [ 2498.054379][T17418] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2498.068959][T17418] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2498.084556][T17418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.093469][T17418] usb 2-1: config 0 descriptor?? [ 2498.146454][T17418] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2498.345476][T17418] usb 2-1: USB disconnect, device number 73 [ 2498.384213][T15545] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2498.424230][T17658] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2498.584188][ T6154] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2498.591852][T15688] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2498.624171][T15545] usb 6-1: Using ep0 maxpacket: 32 [ 2498.664162][T17658] usb 1-1: Using ep0 maxpacket: 32 [ 2498.744190][T15545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2498.755103][T15545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2498.771504][T15545] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2498.783672][T15545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.794865][T17658] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2498.807835][T17658] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2498.817183][T15545] usb 6-1: config 0 descriptor?? [ 2498.824674][T17658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.836522][T17658] usb 1-1: config 0 descriptor?? [ 2498.844137][T15688] usb 3-1: Using ep0 maxpacket: 32 [ 2498.849345][ T6154] usb 4-1: Using ep0 maxpacket: 32 [ 2498.854481][T15545] hub 6-1:0.0: USB hub found [ 2498.874459][T17658] hub 1-1:0.0: bad descriptor, ignoring hub [ 2498.880368][T17658] hub: probe of 1-1:0.0 failed with error -5 [ 2498.908515][T17658] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2498.924407][T17418] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2499.004160][T15688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2499.015202][ T6154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2499.026089][ T6154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2499.035912][T15688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2499.045665][ T6154] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2499.055386][T15688] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2499.065046][T15688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2499.073367][ T6154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2499.074146][T15545] hub 6-1:0.0: 1 port detected [ 2499.083702][T15688] usb 3-1: config 0 descriptor?? [ 2499.093470][ T6154] usb 4-1: config 0 descriptor?? [ 2499.136303][ T6154] hub 4-1:0.0: USB hub found [ 2499.141347][T15688] hub 3-1:0.0: USB hub found [ 2499.194106][T17418] usb 2-1: Using ep0 maxpacket: 32 [ 2499.354148][T15688] hub 3-1:0.0: 1 port detected [ 2499.358965][ T6154] hub 4-1:0.0: 1 port detected [ 2499.363824][T17418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2499.374782][T17418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2499.385310][T17418] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2499.394715][T17418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2499.407600][T17418] usb 2-1: config 0 descriptor?? [ 2499.456718][T17418] hub 2-1:0.0: USB hub found [ 2499.664138][T17418] hub 2-1:0.0: 1 port detected [ 2499.954600][ T7623] usb 6-1: USB disconnect, device number 62 [ 2499.974012][T15545] hub 6-1:0.0: activate --> -19 [ 2500.214021][T15545] usb 1-1: USB disconnect, device number 92 [ 2500.244357][T17418] usb 3-1: USB disconnect, device number 48 [ 2500.244455][T15545] usb 4-1: USB disconnect, device number 58 [ 2500.263980][ T6154] hub 3-1:0.0: activate --> -19 [ 2500.269696][T15688] hub 4-1:0.0: activate --> -19 09:40:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40080c4) 09:40:47 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x4000010) [ 2500.575862][T17418] usb 2-1: USB disconnect, device number 74 [ 2500.596463][T23986] hub 2-1:0.0: activate --> -19 09:40:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x44) 09:40:47 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:47 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/177) [ 2500.743918][T15545] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2500.777257][T17658] usb 6-1: new high-speed USB device number 63 using dummy_hcd 09:40:47 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MESH(r0, 0x0, 0x0) 09:40:47 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) 09:40:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x8810) [ 2501.003891][T15545] usb 1-1: Using ep0 maxpacket: 16 [ 2501.024278][T17658] usb 6-1: Using ep0 maxpacket: 16 09:40:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2501.053929][T23986] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2501.063948][ T6154] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2501.124325][T15545] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2501.137488][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2501.147915][T17658] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2501.160843][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2501.168915][T17658] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2501.178317][T17658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2501.186669][T15545] usb 1-1: config 0 descriptor?? [ 2501.193611][T17658] usb 6-1: config 0 descriptor?? [ 2501.226250][T15545] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2501.246182][T17658] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2501.313881][ T6154] usb 3-1: Using ep0 maxpacket: 16 [ 2501.319051][T23986] usb 4-1: Using ep0 maxpacket: 16 [ 2501.363877][ T9981] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2501.425892][T17658] usb 1-1: USB disconnect, device number 93 [ 2501.445276][T17418] usb 6-1: USB disconnect, device number 63 [ 2501.455116][T23986] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2501.469599][ T6154] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2501.482569][ T6154] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2501.491899][T23986] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2501.503863][ T6154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2501.512128][T23986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2501.521819][ T6154] usb 3-1: config 0 descriptor?? [ 2501.528892][T23986] usb 4-1: config 0 descriptor?? [ 2501.585921][ T6154] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2501.595465][T23986] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2501.605418][ T9981] usb 2-1: Using ep0 maxpacket: 16 [ 2501.723844][ T9981] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2501.736733][ T9981] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2501.745831][ T9981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2501.755766][ T9981] usb 2-1: config 0 descriptor?? [ 2501.785675][ T9274] usb 4-1: USB disconnect, device number 59 [ 2501.791961][T15545] usb 3-1: USB disconnect, device number 49 [ 2501.800930][ T9981] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2501.983780][T17658] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2502.005802][T23986] usb 2-1: USB disconnect, device number 75 [ 2502.015064][T17418] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2502.233757][T17658] usb 1-1: Using ep0 maxpacket: 32 [ 2502.283736][T17418] usb 6-1: Using ep0 maxpacket: 32 [ 2502.354151][T17658] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2502.368136][T15545] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2502.375709][ T9274] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2502.383541][T17658] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2502.392629][T17658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2502.404829][T17658] usb 1-1: config 0 descriptor?? [ 2502.405224][T17418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2502.410436][T17418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2502.440064][T17418] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2502.451833][T17418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2502.454106][T17658] hub 1-1:0.0: bad descriptor, ignoring hub [ 2502.466304][T17658] hub: probe of 1-1:0.0 failed with error -5 [ 2502.468096][T17418] usb 6-1: config 0 descriptor?? [ 2502.474617][T17658] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2502.544134][T17418] hub 6-1:0.0: USB hub found [ 2502.613720][ T9274] usb 4-1: Using ep0 maxpacket: 32 [ 2502.626468][T15545] usb 3-1: Using ep0 maxpacket: 32 [ 2502.630158][T23986] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2502.733728][ T9274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2502.744822][T15545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2502.753714][T17418] hub 6-1:0.0: 1 port detected [ 2502.755884][ T9274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2502.770801][T15545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2502.781513][ T9274] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2502.790753][T15545] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2502.799943][ T9274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2502.807965][T15545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2502.816925][T15545] usb 3-1: config 0 descriptor?? [ 2502.822352][ T9274] usb 4-1: config 0 descriptor?? [ 2502.854079][T15545] hub 3-1:0.0: USB hub found [ 2502.870928][ T9274] hub 4-1:0.0: USB hub found [ 2502.885425][T23986] usb 2-1: Using ep0 maxpacket: 32 [ 2503.024073][T23986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2503.034987][T23986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2503.044801][T23986] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2503.055393][T23986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2503.065355][T23986] usb 2-1: config 0 descriptor?? [ 2503.081142][T15545] hub 3-1:0.0: 1 port detected [ 2503.085976][ T9274] hub 4-1:0.0: 1 port detected [ 2503.114214][T23986] hub 2-1:0.0: USB hub found [ 2503.323688][T23986] hub 2-1:0.0: 1 port detected [ 2503.654021][ T6154] usb 6-1: USB disconnect, device number 64 [ 2503.673617][T15688] hub 6-1:0.0: activate --> -19 [ 2503.783676][T17658] usb 1-1: USB disconnect, device number 94 [ 2503.954032][T23986] usb 3-1: USB disconnect, device number 50 [ 2503.974545][ T9274] hub 3-1:0.0: activate --> -19 [ 2503.979743][T17658] usb 4-1: USB disconnect, device number 60 [ 2503.995023][T15545] hub 4-1:0.0: activate --> -19 09:40:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x24040000) 09:40:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24044800) [ 2504.213911][T17418] usb 2-1: USB disconnect, device number 76 [ 2504.231236][ T6154] hub 2-1:0.0: activate --> -19 09:40:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x20040400) 09:40:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40000) [ 2504.453528][T15688] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 2504.463575][T17658] usb 1-1: new high-speed USB device number 95 using dummy_hcd 09:40:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000010) 09:40:51 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, 0x0, 0x0) 09:40:51 executing program 4: pipe(&(0x7f0000000540)={0xffffffffffffffff}) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 09:40:51 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2504.713471][T17658] usb 1-1: Using ep0 maxpacket: 16 [ 2504.713831][T15688] usb 6-1: Using ep0 maxpacket: 16 [ 2504.793504][T15545] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2504.806882][T23986] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2504.843532][T17658] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2504.856484][T17658] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2504.863487][T15688] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2504.874830][T17658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2504.880146][T15688] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2504.897233][T15688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2504.897448][T17658] usb 1-1: config 0 descriptor?? [ 2504.912361][T15688] usb 6-1: config 0 descriptor?? [ 2504.955593][T17658] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2504.956718][T15688] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2505.033451][T15545] usb 4-1: Using ep0 maxpacket: 16 [ 2505.053505][T17418] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2505.103468][T23986] usb 3-1: Using ep0 maxpacket: 16 [ 2505.153861][T15545] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2505.166702][T15545] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2505.170081][ T6154] usb 1-1: USB disconnect, device number 95 [ 2505.185893][T15688] usb 6-1: USB disconnect, device number 65 [ 2505.207078][T15545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2505.222257][T15545] usb 4-1: config 0 descriptor?? [ 2505.233467][T23986] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2505.250531][T23986] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2505.259668][T23986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2505.265444][T15545] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2505.273755][T23986] usb 3-1: config 0 descriptor?? [ 2505.315797][T23986] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2505.323559][T17418] usb 2-1: Using ep0 maxpacket: 16 [ 2505.463462][T17418] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2505.465421][ T9274] usb 4-1: USB disconnect, device number 61 [ 2505.478351][T17418] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2505.499027][T17418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2505.511054][T17418] usb 2-1: config 0 descriptor?? [ 2505.519617][T23986] usb 3-1: USB disconnect, device number 51 [ 2505.575399][T17418] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2505.785524][T17658] usb 2-1: USB disconnect, device number 77 [ 2505.795781][ T6154] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2505.803369][T15688] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 2506.053352][ T9274] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2506.063322][T15688] usb 6-1: Using ep0 maxpacket: 32 [ 2506.073322][ T6154] usb 1-1: Using ep0 maxpacket: 32 [ 2506.113391][T23986] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2506.193504][T15688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2506.204481][T15688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2506.220744][ T6154] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2506.233534][T15688] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2506.242731][T15688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2506.260711][ T6154] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2506.272715][ T6154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2506.284554][T15688] usb 6-1: config 0 descriptor?? [ 2506.290626][ T6154] usb 1-1: config 0 descriptor?? [ 2506.294611][ T9274] usb 4-1: Using ep0 maxpacket: 32 [ 2506.333698][T15688] hub 6-1:0.0: USB hub found [ 2506.353779][ T6154] hub 1-1:0.0: bad descriptor, ignoring hub [ 2506.355128][T17658] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2506.359836][ T6154] hub: probe of 1-1:0.0 failed with error -5 [ 2506.386329][ T6154] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2506.394547][T23986] usb 3-1: Using ep0 maxpacket: 32 [ 2506.413466][ T9274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2506.424495][ T9274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2506.440713][ T9274] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2506.453035][ T9274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2506.462615][ T9274] usb 4-1: config 0 descriptor?? [ 2506.503625][ T9274] hub 4-1:0.0: USB hub found [ 2506.523909][T23986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2506.535259][T23986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2506.551151][T15688] hub 6-1:0.0: 1 port detected [ 2506.555985][T23986] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2506.573951][T23986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2506.584724][T23986] usb 3-1: config 0 descriptor?? [ 2506.603282][T17658] usb 2-1: Using ep0 maxpacket: 32 [ 2506.643580][T23986] hub 3-1:0.0: USB hub found [ 2506.723338][ T9274] hub 4-1:0.0: 1 port detected [ 2506.728361][T17658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2506.740323][T17658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2506.759122][T17658] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2506.769457][T17658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2506.778295][T17658] usb 2-1: config 0 descriptor?? [ 2506.823663][T17658] hub 2-1:0.0: USB hub found [ 2506.853258][T23986] hub 3-1:0.0: 1 port detected [ 2507.043249][T17658] hub 2-1:0.0: 1 port detected [ 2507.414964][T17418] usb 6-1: USB disconnect, device number 66 [ 2507.426077][T15688] hub 6-1:0.0: activate --> -19 [ 2507.604457][ T9981] usb 4-1: USB disconnect, device number 62 [ 2507.623165][ T9274] hub 4-1:0.0: activate --> -19 [ 2507.713196][ T6154] usb 1-1: USB disconnect, device number 96 [ 2507.733539][ T6154] usb 3-1: USB disconnect, device number 52 [ 2507.746246][T23986] hub 3-1:0.0: activate --> -19 09:40:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:55 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 09:40:55 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a00009040000"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x2004c000) [ 2507.933555][T23986] usb 2-1: USB disconnect, device number 78 [ 2507.953118][T17658] hub 2-1:0.0: activate --> -19 09:40:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x400c0) 09:40:55 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000000) 09:40:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4000800) [ 2508.233141][T17418] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2508.253077][ T6154] usb 1-1: new high-speed USB device number 97 using dummy_hcd 09:40:55 executing program 4: timer_create(0x2, &(0x7f0000000380)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000003c0)) 09:40:55 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 09:40:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2508.503074][ T6154] usb 1-1: Using ep0 maxpacket: 16 [ 2508.508342][T17418] usb 6-1: Using ep0 maxpacket: 16 [ 2508.543759][T19210] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2508.553120][ T9981] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2508.673588][T17418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2508.686398][ T6154] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2508.699242][T17418] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2508.716948][ T6154] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2508.723043][T17658] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2508.733062][T17418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2508.741826][ T6154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2508.758590][T17418] usb 6-1: config 0 descriptor?? [ 2508.769571][ T6154] usb 1-1: config 0 descriptor?? [ 2508.794592][ T9981] usb 3-1: Using ep0 maxpacket: 16 [ 2508.815638][ T6154] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2508.824852][T17418] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2508.832852][T19210] usb 4-1: Using ep0 maxpacket: 16 [ 2508.913062][ T9981] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2508.926009][ T9981] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2508.935301][ T9981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2508.945495][ T9981] usb 3-1: config 0 descriptor?? [ 2508.973020][T17658] usb 2-1: Using ep0 maxpacket: 16 [ 2508.993051][T19210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2508.995332][ T9981] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2509.008118][T19210] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2509.025253][T19210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2509.041686][ T9981] usb 6-1: USB disconnect, device number 67 [ 2509.055840][T19210] usb 4-1: config 0 descriptor?? [ 2509.060182][ T9274] usb 1-1: USB disconnect, device number 97 [ 2509.093178][T17658] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2509.106070][T17658] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2509.121524][T17658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2509.125216][T19210] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2509.139689][T17658] usb 2-1: config 0 descriptor?? [ 2509.195191][T17658] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2509.211565][T17658] usb 3-1: USB disconnect, device number 53 [ 2509.340993][ T6154] usb 4-1: USB disconnect, device number 63 [ 2509.394505][ T7623] usb 2-1: USB disconnect, device number 79 [ 2509.583025][ T9274] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2509.603256][ T9981] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 2509.772967][T17658] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2509.822995][ T9274] usb 1-1: Using ep0 maxpacket: 32 [ 2509.843273][ T9981] usb 6-1: Using ep0 maxpacket: 32 [ 2509.872958][T17418] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2509.903091][ T6154] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2509.943468][ T9274] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2509.956658][ T9274] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2509.968459][ T9981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2509.979676][ T9274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2509.987892][ T9981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2509.997992][ T9981] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2510.007410][ T9274] usb 1-1: config 0 descriptor?? [ 2510.012656][ T9981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2510.024228][T17658] usb 3-1: Using ep0 maxpacket: 32 [ 2510.029822][ T9981] usb 6-1: config 0 descriptor?? [ 2510.043273][ T9274] hub 1-1:0.0: bad descriptor, ignoring hub [ 2510.049194][ T9274] hub: probe of 1-1:0.0 failed with error -5 [ 2510.066041][ T9274] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2510.073788][ T9981] hub 6-1:0.0: USB hub found [ 2510.142907][T17658] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2510.153856][T17658] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2510.162865][T17418] usb 2-1: Using ep0 maxpacket: 32 [ 2510.163695][T17658] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2510.178381][T17658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2510.183921][ T6154] usb 4-1: Using ep0 maxpacket: 32 [ 2510.194662][T17658] usb 3-1: config 0 descriptor?? [ 2510.233164][T17658] hub 3-1:0.0: USB hub found [ 2510.292907][ T9981] hub 6-1:0.0: 1 port detected [ 2510.312922][T17418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2510.323926][T17418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2510.335133][ T6154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2510.346238][T17418] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2510.357171][ T6154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2510.370326][T17418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2510.378563][ T6154] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2510.390913][T17418] usb 2-1: config 0 descriptor?? [ 2510.396511][ T6154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2510.409082][ T6154] usb 4-1: config 0 descriptor?? [ 2510.452905][T17658] hub 3-1:0.0: 1 port detected [ 2510.454634][T17418] hub 2-1:0.0: USB hub found [ 2510.483200][ T6154] hub 4-1:0.0: USB hub found [ 2510.662864][T17418] hub 2-1:0.0: 1 port detected [ 2510.692864][ T6154] hub 4-1:0.0: 1 port detected [ 2511.183289][ T6154] usb 6-1: USB disconnect, device number 68 [ 2511.202826][ T9274] hub 6-1:0.0: activate --> -19 [ 2511.343138][ T9274] usb 3-1: USB disconnect, device number 54 [ 2511.362786][T17658] hub 3-1:0.0: activate --> -19 [ 2511.375960][T19210] usb 1-1: USB disconnect, device number 98 [ 2511.533185][ T9981] usb 2-1: USB disconnect, device number 80 [ 2511.564342][T17418] hub 2-1:0.0: activate --> -19 09:40:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:58 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/zero\x00', 0x10000, 0x0) 09:40:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2511.643095][ T9274] usb 4-1: USB disconnect, device number 64 [ 2511.656103][T15688] hub 4-1:0.0: activate --> -19 09:40:58 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x121200, 0x0) 09:40:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0}}, 0x8804) [ 2511.982701][T26196] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2511.982709][T17418] usb 6-1: new high-speed USB device number 69 using dummy_hcd 09:40:59 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc0) 09:40:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:40:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x50) 09:40:59 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x90) [ 2512.162672][T15688] usb 3-1: new high-speed USB device number 55 using dummy_hcd 09:40:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x48000) [ 2512.232659][T26196] usb 1-1: Using ep0 maxpacket: 16 [ 2512.234910][T17418] usb 6-1: Using ep0 maxpacket: 16 [ 2512.352722][T26196] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2512.365584][T26196] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2512.381232][T26196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2512.392695][T17418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2512.398103][T26196] usb 1-1: config 0 descriptor?? [ 2512.406823][T15688] usb 3-1: Using ep0 maxpacket: 16 [ 2512.422419][T17418] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2512.434530][T17418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2512.445919][T26196] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2512.453290][T17658] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2512.457788][T17418] usb 6-1: config 0 descriptor?? [ 2512.492835][T19210] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2512.515626][T17418] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2512.562640][T15688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2512.575550][T15688] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2512.584661][T15688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2512.595985][T15688] usb 3-1: config 0 descriptor?? [ 2512.644677][T15688] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2512.655737][T15688] usb 1-1: USB disconnect, device number 99 [ 2512.702628][T17658] usb 2-1: Using ep0 maxpacket: 16 [ 2512.716304][T17418] usb 6-1: USB disconnect, device number 69 [ 2512.742603][T19210] usb 4-1: Using ep0 maxpacket: 16 [ 2512.822622][T17658] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2512.835476][T17658] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2512.847787][T17658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2512.866507][ T9981] usb 3-1: USB disconnect, device number 55 [ 2512.874034][T17658] usb 2-1: config 0 descriptor?? [ 2512.894870][T19210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2512.907774][T19210] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2512.914787][T17658] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2512.931710][T19210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2512.942237][T19210] usb 4-1: config 0 descriptor?? [ 2512.994497][T19210] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2513.114101][T17658] usb 2-1: USB disconnect, device number 81 [ 2513.204705][T19210] usb 4-1: USB disconnect, device number 65 [ 2513.252559][T15688] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2513.312542][T17418] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2513.422549][ T9981] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2513.492561][T15688] usb 1-1: Using ep0 maxpacket: 32 [ 2513.582521][T17418] usb 6-1: Using ep0 maxpacket: 32 [ 2513.622684][T15688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2513.633787][T15688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2513.649572][T15688] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2513.661682][T15688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2513.662528][ T9981] usb 3-1: Using ep0 maxpacket: 32 [ 2513.675858][T17658] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2513.679887][T15688] usb 1-1: config 0 descriptor?? [ 2513.722901][T17418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2513.733882][T17418] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2513.750331][T15688] hub 1-1:0.0: USB hub found [ 2513.755042][T17418] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2513.773415][T19210] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2513.783280][T17418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2513.793030][T17418] usb 6-1: config 0 descriptor?? [ 2513.802751][ T9981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2513.815571][ T9981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2513.825608][ T9981] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2513.836171][ T9981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2513.842878][T17418] hub 6-1:0.0: USB hub found [ 2513.849300][ T9981] usb 3-1: config 0 descriptor?? [ 2513.892834][ T9981] hub 3-1:0.0: USB hub found [ 2513.933472][T17658] usb 2-1: Using ep0 maxpacket: 32 [ 2514.012441][T19210] usb 4-1: Using ep0 maxpacket: 32 [ 2514.052601][T17658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2514.052705][T17418] hub 6-1:0.0: 1 port detected [ 2514.064870][T17658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2514.068314][T15688] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2514.078180][T17658] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2514.096872][T17658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.107082][T15688] usbhid 1-1:0.0: can't add hid device: -22 [ 2514.107740][T17658] usb 2-1: config 0 descriptor?? [ 2514.117508][T15688] usbhid: probe of 1-1:0.0 failed with error -22 [ 2514.120440][ T9981] hub 3-1:0.0: 1 port detected [ 2514.152513][T19210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2514.166697][T15688] usb 1-1: USB disconnect, device number 100 [ 2514.172791][T17658] hub 2-1:0.0: USB hub found [ 2514.174910][T19210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2514.207554][T19210] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2514.219959][T19210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2514.228898][T19210] usb 4-1: config 0 descriptor?? [ 2514.282754][T19210] hub 4-1:0.0: USB hub found [ 2514.392498][T17658] hub 2-1:0.0: 1 port detected [ 2514.492512][T19210] hub 4-1:0.0: 1 port detected [ 2514.932881][T26196] usb 6-1: USB disconnect, device number 70 [ 2514.949799][T17418] hub 6-1:0.0: activate --> -19 [ 2515.042774][ T9981] usb 3-1: USB disconnect, device number 56 [ 2515.062358][ T9274] hub 3-1:0.0: activate --> -19 [ 2515.322879][T19210] usb 2-1: USB disconnect, device number 82 [ 2515.343431][T17658] hub 2-1:0.0: activate --> -19 09:41:02 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x80) 09:41:02 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) [ 2515.432666][ T6154] usb 4-1: USB disconnect, device number 66 [ 2515.458103][T17418] hub 4-1:0.0: activate --> -19 09:41:02 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40044) [ 2515.752294][ T9981] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2515.762257][T17658] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2515.849345][T19210] usb 3-1: new high-speed USB device number 57 using dummy_hcd 09:41:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:03 executing program 4: 09:41:03 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:03 executing program 4: [ 2516.002266][T17658] usb 6-1: Using ep0 maxpacket: 16 [ 2516.022264][ T9981] usb 1-1: Using ep0 maxpacket: 16 09:41:03 executing program 4: [ 2516.102408][T19210] usb 3-1: Using ep0 maxpacket: 16 [ 2516.122553][T17658] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2516.142525][ T9981] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 09:41:03 executing program 4: [ 2516.167336][ T9981] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2516.185623][T17658] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2516.212484][ T9981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.222372][T17658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.232429][T19210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2516.245574][T17658] usb 6-1: config 0 descriptor?? [ 2516.250888][ T9981] usb 1-1: config 0 descriptor?? [ 2516.269851][T19210] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2516.286617][T17658] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2516.292204][T17418] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2516.303850][ T9981] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2516.314734][T19210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.326046][ T6154] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2516.356015][T19210] usb 3-1: config 0 descriptor?? [ 2516.415586][T19210] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2516.484834][T19210] usb 6-1: USB disconnect, device number 71 [ 2516.506949][ T9981] usb 1-1: USB disconnect, device number 101 [ 2516.562219][T17418] usb 2-1: Using ep0 maxpacket: 16 [ 2516.592358][ T6154] usb 4-1: Using ep0 maxpacket: 16 [ 2516.616355][T15688] usb 3-1: USB disconnect, device number 57 [ 2516.712465][T17418] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2516.732344][ T6154] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2516.752147][T17418] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2516.761179][T17418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.772477][ T6154] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2516.781689][ T6154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2516.812845][T17418] usb 2-1: config 0 descriptor?? [ 2516.819458][ T6154] usb 4-1: config 0 descriptor?? [ 2516.875937][T17418] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2516.885465][ T6154] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2517.062125][ T9981] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2517.073555][T19210] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 2517.081807][T17418] usb 2-1: USB disconnect, device number 83 [ 2517.092817][T26196] usb 4-1: USB disconnect, device number 67 [ 2517.212107][T15688] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2517.302094][ T9981] usb 1-1: Using ep0 maxpacket: 32 [ 2517.342195][T19210] usb 6-1: Using ep0 maxpacket: 32 [ 2517.422365][ T9981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2517.433374][ T9981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2517.443231][ T9981] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2517.452463][ T9981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2517.461037][ T9981] usb 1-1: config 0 descriptor?? [ 2517.472283][T15688] usb 3-1: Using ep0 maxpacket: 32 [ 2517.479390][T19210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2517.490297][T19210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2517.503407][ T9981] hub 1-1:0.0: USB hub found [ 2517.503550][T19210] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2517.530774][T19210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2517.544021][T19210] usb 6-1: config 0 descriptor?? [ 2517.583818][T19210] hub 6-1:0.0: USB hub found [ 2517.623657][T15688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2517.635587][T15688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2517.645472][T15688] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2517.652105][T26196] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2517.654650][T15688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2517.672645][T15688] usb 3-1: config 0 descriptor?? [ 2517.703257][T17418] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 2517.723727][T15688] hub 3-1:0.0: USB hub found [ 2517.802107][ T9981] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2517.802123][T19210] hub 6-1:0.0: 1 port detected [ 2517.814023][ T9981] usbhid 1-1:0.0: can't add hid device: -22 [ 2517.820709][ T9981] usbhid: probe of 1-1:0.0 failed with error -22 [ 2517.852445][ T9981] usb 1-1: USB disconnect, device number 102 [ 2517.902056][T26196] usb 4-1: Using ep0 maxpacket: 32 [ 2517.932101][T15688] hub 3-1:0.0: 1 port detected [ 2517.972042][T17418] usb 2-1: Using ep0 maxpacket: 32 [ 2518.022195][T26196] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2518.033141][T26196] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2518.045029][T26196] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2518.054184][T26196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2518.062894][T26196] usb 4-1: config 0 descriptor?? [ 2518.102355][T26196] hub 4-1:0.0: USB hub found [ 2518.119065][T17418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2518.129959][T17418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2518.146159][T17418] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2518.158399][T17418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2518.170183][T17418] usb 2-1: config 0 descriptor?? [ 2518.233335][T17418] hub 2-1:0.0: USB hub found [ 2518.321999][T26196] hub 4-1:0.0: 1 port detected [ 2518.442045][T17418] hub 2-1:0.0: 1 port detected [ 2518.722324][T23986] usb 6-1: USB disconnect, device number 72 [ 2518.738982][T19210] hub 6-1:0.0: activate --> -19 [ 2518.862669][ T9981] usb 3-1: USB disconnect, device number 58 [ 2518.875338][T15688] hub 3-1:0.0: activate --> -19 09:41:06 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:06 executing program 4: 09:41:06 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:06 executing program 4: [ 2519.254187][T15688] usb 4-1: USB disconnect, device number 68 [ 2519.271894][T26196] hub 4-1:0.0: activate --> -19 09:41:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:06 executing program 4: [ 2519.374070][T26196] usb 2-1: USB disconnect, device number 84 [ 2519.403066][T23986] hub 2-1:0.0: activate --> -19 [ 2519.521860][ T9981] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2519.551842][T17418] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2519.671836][ T9274] usb 3-1: new high-speed USB device number 59 using dummy_hcd 09:41:06 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:06 executing program 4: [ 2519.761841][ T9981] usb 1-1: Using ep0 maxpacket: 16 [ 2519.803160][T17418] usb 6-1: Using ep0 maxpacket: 16 09:41:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:07 executing program 4: 09:41:07 executing program 4: [ 2519.881927][ T9981] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2519.897032][ T9981] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2519.912622][ T9274] usb 3-1: Using ep0 maxpacket: 16 [ 2519.921011][ T9981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2519.941263][ T9981] usb 1-1: config 0 descriptor?? [ 2519.943529][T17418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2519.973794][T17418] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 09:41:07 executing program 4: [ 2519.988440][T17418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2519.994204][ T9981] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2520.014062][T17418] usb 6-1: config 0 descriptor?? [ 2520.034417][ T9274] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2520.047284][ T9274] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2520.058353][ T9274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2520.064012][T17418] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2520.067627][ T9274] usb 3-1: config 0 descriptor?? [ 2520.112010][T17658] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2520.125418][ T9274] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2520.181796][T15688] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2520.195298][ T9274] usb 1-1: USB disconnect, device number 103 [ 2520.268107][ T9981] usb 6-1: USB disconnect, device number 73 [ 2520.323884][T17418] usb 3-1: USB disconnect, device number 59 [ 2520.351802][T17658] usb 4-1: Using ep0 maxpacket: 16 [ 2520.451758][T15688] usb 2-1: Using ep0 maxpacket: 16 [ 2520.471775][T17658] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2520.484679][T17658] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2520.496604][T17658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2520.505557][T17658] usb 4-1: config 0 descriptor?? [ 2520.543724][T17658] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2520.581756][T15688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2520.594851][T15688] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2520.606803][T15688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2520.616562][T15688] usb 2-1: config 0 descriptor?? [ 2520.654095][T15688] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2520.743035][T15688] usb 4-1: USB disconnect, device number 69 [ 2520.754982][ T9274] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2520.831797][ T9981] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2520.863084][ T7623] usb 2-1: USB disconnect, device number 85 [ 2520.921717][T17418] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2521.001697][ T9274] usb 1-1: Using ep0 maxpacket: 32 [ 2521.071704][ T9981] usb 6-1: Using ep0 maxpacket: 32 [ 2521.121705][ T9274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2521.132723][ T9274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2521.142748][ T9274] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2521.152248][ T9274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2521.160717][ T9274] usb 1-1: config 0 descriptor?? [ 2521.182000][T17418] usb 3-1: Using ep0 maxpacket: 32 [ 2521.193137][ T9981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2521.204315][ T9274] hub 1-1:0.0: USB hub found [ 2521.208915][ T9981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2521.221879][ T9981] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2521.230888][ T9981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2521.239779][ T9981] usb 6-1: config 0 descriptor?? [ 2521.291933][ T9981] hub 6-1:0.0: USB hub found [ 2521.321914][T17418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2521.331669][ T7623] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2521.332817][T15688] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2521.348349][T17418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2521.358216][T17418] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2521.367360][T17418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2521.377154][T17418] usb 3-1: config 0 descriptor?? [ 2521.432069][T17418] hub 3-1:0.0: USB hub found [ 2521.501697][ T9274] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2521.511710][ T9981] hub 6-1:0.0: 1 port detected [ 2521.516735][ T9274] usbhid 1-1:0.0: can't add hid device: -22 [ 2521.523110][ T9274] usbhid: probe of 1-1:0.0 failed with error -22 [ 2521.553552][ T9274] usb 1-1: USB disconnect, device number 104 [ 2521.571649][ T7623] usb 2-1: Using ep0 maxpacket: 32 [ 2521.601629][T15688] usb 4-1: Using ep0 maxpacket: 32 [ 2521.651670][T17418] hub 3-1:0.0: 1 port detected [ 2521.691874][ T7623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2521.702873][ T7623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2521.712709][ T7623] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2521.722140][ T7623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2521.731709][T15688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2521.732170][ T7623] usb 2-1: config 0 descriptor?? [ 2521.742641][T15688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2521.758310][T15688] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2521.770108][T15688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2521.780046][T15688] usb 4-1: config 0 descriptor?? [ 2521.801963][ T7623] hub 2-1:0.0: USB hub found [ 2521.831911][T15688] hub 4-1:0.0: USB hub found [ 2522.021617][ T7623] hub 2-1:0.0: 1 port detected [ 2522.041616][T15688] hub 4-1:0.0: 1 port detected [ 2522.443949][ T6154] usb 6-1: USB disconnect, device number 74 [ 2522.463206][ T9981] hub 6-1:0.0: activate --> -19 [ 2522.592909][T23986] usb 3-1: USB disconnect, device number 60 [ 2522.611535][T17418] hub 3-1:0.0: activate --> -19 09:41:10 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:10 executing program 4: 09:41:10 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:10 executing program 4: [ 2522.957139][T26196] usb 2-1: USB disconnect, device number 86 [ 2522.978904][ T9981] hub 2-1:0.0: activate --> -19 [ 2522.991953][ T7623] usb 4-1: USB disconnect, device number 70 [ 2523.021576][T15688] hub 4-1:0.0: activate --> -19 09:41:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:10 executing program 4: [ 2523.271497][ T9981] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2523.284082][ T6154] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2523.401452][T15688] usb 3-1: new high-speed USB device number 61 using dummy_hcd 09:41:10 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:10 executing program 4: 09:41:10 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:10 executing program 4: 09:41:10 executing program 4: [ 2523.514451][ T9981] usb 1-1: Using ep0 maxpacket: 16 [ 2523.531442][ T6154] usb 6-1: Using ep0 maxpacket: 16 09:41:10 executing program 4: [ 2523.632940][ T9981] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2523.645865][ T9981] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2523.657349][ T9981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.663028][ T6154] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2523.666219][ T9981] usb 1-1: config 0 descriptor?? [ 2523.678259][T15688] usb 3-1: Using ep0 maxpacket: 16 [ 2523.694572][ T6154] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2523.705096][ T6154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.715801][ T6154] usb 6-1: config 0 descriptor?? [ 2523.725240][ T9981] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2523.754027][ T6154] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2523.781409][T23986] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2523.821436][T15688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2523.834437][T15688] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2523.849559][T15688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2523.861603][T15688] usb 3-1: config 0 descriptor?? [ 2523.881398][T17418] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2523.913568][T15688] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2523.935534][ T9981] usb 1-1: USB disconnect, device number 105 [ 2523.954771][T15688] usb 6-1: USB disconnect, device number 75 [ 2524.041408][T23986] usb 2-1: Using ep0 maxpacket: 16 [ 2524.113678][T26196] usb 3-1: USB disconnect, device number 61 [ 2524.131550][T17418] usb 4-1: Using ep0 maxpacket: 16 [ 2524.171500][T23986] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2524.184620][T23986] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2524.200366][T23986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2524.212526][T23986] usb 2-1: config 0 descriptor?? [ 2524.271422][T17418] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2524.286591][T23986] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2524.294877][T17418] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2524.311313][T17418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2524.321345][T17418] usb 4-1: config 0 descriptor?? [ 2524.363741][T17418] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2524.472998][T17418] usb 2-1: USB disconnect, device number 87 [ 2524.491389][ T9981] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2524.541313][T15688] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2524.564354][ T9274] usb 4-1: USB disconnect, device number 71 [ 2524.671350][T26196] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2524.731292][ T9981] usb 1-1: Using ep0 maxpacket: 32 [ 2524.811287][T15688] usb 6-1: Using ep0 maxpacket: 32 [ 2524.851309][ T9981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2524.862289][ T9981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2524.877944][ T9981] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2524.890248][ T9981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2524.903526][ T9981] usb 1-1: config 0 descriptor?? [ 2524.916931][T26196] usb 3-1: Using ep0 maxpacket: 32 [ 2524.941641][ T9981] hub 1-1:0.0: USB hub found [ 2524.951568][T15688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2524.968170][T15688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2524.981537][T15688] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2524.990608][T15688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2525.001534][T15688] usb 6-1: config 0 descriptor?? [ 2525.041294][T26196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2525.051642][T15688] hub 6-1:0.0: USB hub found [ 2525.054030][T26196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2525.071329][T17418] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2525.085083][T26196] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2525.097626][T26196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2525.109813][T26196] usb 3-1: config 0 descriptor?? [ 2525.121268][ T9274] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2525.151609][T26196] hub 3-1:0.0: USB hub found [ 2525.241314][ T9981] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2525.251137][ T9981] usbhid 1-1:0.0: can't add hid device: -22 [ 2525.269659][ T9981] usbhid: probe of 1-1:0.0 failed with error -22 [ 2525.271258][T15688] hub 6-1:0.0: 1 port detected [ 2525.351266][T17418] usb 2-1: Using ep0 maxpacket: 32 [ 2525.371250][T26196] hub 3-1:0.0: 1 port detected [ 2525.376178][ T9274] usb 4-1: Using ep0 maxpacket: 32 [ 2525.491498][T17418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2525.501224][ T9274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2525.502483][T17418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2525.521913][ T9274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2525.523905][T17418] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2525.534140][ T9274] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2525.551320][ T9274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2525.556271][T17418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2525.561600][ T9274] usb 4-1: config 0 descriptor?? [ 2525.578626][T17418] usb 2-1: config 0 descriptor?? [ 2525.621503][ T9274] hub 4-1:0.0: USB hub found [ 2525.637321][T17418] hub 2-1:0.0: USB hub found [ 2525.841204][ T9274] hub 4-1:0.0: 1 port detected [ 2525.841210][T17418] hub 2-1:0.0: 1 port detected [ 2526.211487][ T9981] usb 6-1: USB disconnect, device number 76 [ 2526.224292][T15688] hub 6-1:0.0: activate --> -19 [ 2526.291559][T17418] usb 3-1: USB disconnect, device number 62 [ 2526.312288][T26196] hub 3-1:0.0: activate --> -19 [ 2526.361281][T15688] usb 1-1: USB disconnect, device number 106 09:41:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:13 executing program 4: 09:41:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:13 executing program 4: [ 2526.771541][T19210] usb 4-1: USB disconnect, device number 72 [ 2526.791808][ T6154] usb 2-1: USB disconnect, device number 88 [ 2526.792671][T26196] hub 4-1:0.0: activate --> -19 09:41:13 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:13 executing program 4: [ 2526.821211][T15688] hub 2-1:0.0: activate --> -19 [ 2527.021038][T23986] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2527.051045][T17418] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2527.151093][T15688] usb 3-1: new high-speed USB device number 63 using dummy_hcd 09:41:14 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:14 executing program 4: 09:41:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:14 executing program 4: [ 2527.291187][T23986] usb 1-1: Using ep0 maxpacket: 16 09:41:14 executing program 4: [ 2527.330993][T17418] usb 6-1: Using ep0 maxpacket: 16 09:41:14 executing program 4: [ 2527.412703][T15688] usb 3-1: Using ep0 maxpacket: 16 [ 2527.424345][T23986] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2527.437353][T23986] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2527.453275][T23986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2527.464580][T17418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2527.480232][T17418] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2527.489538][T23986] usb 1-1: config 0 descriptor?? [ 2527.506513][T17418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2527.518472][T17418] usb 6-1: config 0 descriptor?? [ 2527.532669][T15688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2527.547690][T23986] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2527.555143][T15688] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2527.567239][T17418] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2527.577755][T15688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2527.590411][T15688] usb 3-1: config 0 descriptor?? [ 2527.602158][T26196] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2527.612004][ T9981] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2527.652877][T15688] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2527.747006][T15688] usb 1-1: USB disconnect, device number 107 [ 2527.772397][T23986] usb 6-1: USB disconnect, device number 77 [ 2527.852437][ T6154] usb 3-1: USB disconnect, device number 63 [ 2527.860986][T26196] usb 4-1: Using ep0 maxpacket: 16 [ 2527.867716][ T9981] usb 2-1: Using ep0 maxpacket: 16 [ 2527.991113][T26196] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2528.004043][ T9981] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2528.016949][ T9981] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2528.026051][T26196] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2528.035463][ T9981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2528.043499][T26196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2528.053446][ T9981] usb 2-1: config 0 descriptor?? [ 2528.059495][T26196] usb 4-1: config 0 descriptor?? [ 2528.093249][ T9981] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2528.113394][T26196] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2528.293806][T19210] usb 2-1: USB disconnect, device number 89 [ 2528.313571][T26196] usb 4-1: USB disconnect, device number 73 [ 2528.322525][T15688] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2528.360941][T23986] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2528.410925][ T6154] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2528.570883][T15688] usb 1-1: Using ep0 maxpacket: 32 [ 2528.611017][T23986] usb 6-1: Using ep0 maxpacket: 32 [ 2528.660851][ T6154] usb 3-1: Using ep0 maxpacket: 32 [ 2528.692791][T15688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2528.703695][T15688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2528.721239][T15688] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2528.730250][T15688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2528.745257][T15688] usb 1-1: config 0 descriptor?? [ 2528.761285][T23986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2528.772158][T23986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2528.789203][T15688] hub 1-1:0.0: USB hub found [ 2528.794023][T23986] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2528.803274][ T6154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2528.814537][ T6154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2528.824426][T23986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2528.832757][ T6154] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2528.842540][T23986] usb 6-1: config 0 descriptor?? [ 2528.860838][ T6154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2528.869607][ T6154] usb 3-1: config 0 descriptor?? [ 2528.881098][T23986] hub 6-1:0.0: USB hub found [ 2528.882400][T26196] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2528.885739][T19210] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2528.911634][ T6154] hub 3-1:0.0: USB hub found [ 2529.090923][T23986] hub 6-1:0.0: 1 port detected [ 2529.110829][T15688] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2529.125160][T15688] usbhid 1-1:0.0: can't add hid device: -22 [ 2529.132357][ T6154] hub 3-1:0.0: 1 port detected [ 2529.137392][T15688] usbhid: probe of 1-1:0.0 failed with error -22 [ 2529.143732][T26196] usb 4-1: Using ep0 maxpacket: 32 [ 2529.162573][T19210] usb 2-1: Using ep0 maxpacket: 32 [ 2529.260830][T26196] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2529.271764][T26196] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2529.287722][T26196] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2529.299930][T26196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.311130][T19210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2529.311415][T26196] usb 4-1: config 0 descriptor?? [ 2529.334142][T19210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2529.346070][T19210] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2529.357995][T19210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.367319][T19210] usb 2-1: config 0 descriptor?? [ 2529.371234][T26196] hub 4-1:0.0: USB hub found [ 2529.411257][T19210] hub 2-1:0.0: USB hub found [ 2529.590775][T26196] hub 4-1:0.0: 1 port detected [ 2529.630771][T19210] hub 2-1:0.0: 1 port detected [ 2530.051463][T17418] usb 6-1: USB disconnect, device number 78 [ 2530.057458][T23986] usb 3-1: USB disconnect, device number 64 [ 2530.063721][T15688] hub 3-1:0.0: activate --> -19 [ 2530.068579][ T6154] hub 6-1:0.0: activate --> -19 [ 2530.220735][T26196] usb 1-1: USB disconnect, device number 108 09:41:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:17 executing program 4: 09:41:17 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:17 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2530.521169][T23986] usb 4-1: USB disconnect, device number 74 [ 2530.540668][ T7623] hub 4-1:0.0: activate --> -19 09:41:17 executing program 4: [ 2530.591004][T17418] usb 2-1: USB disconnect, device number 90 [ 2530.608830][ T6154] hub 2-1:0.0: activate --> -19 09:41:17 executing program 4: [ 2530.880644][ T7623] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2530.894157][ T6154] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2530.901082][T26196] usb 3-1: new high-speed USB device number 65 using dummy_hcd 09:41:18 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:18 executing program 4: 09:41:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:18 executing program 4: 09:41:18 executing program 4: 09:41:18 executing program 4: [ 2531.120581][ T7623] usb 1-1: Using ep0 maxpacket: 16 [ 2531.140591][T26196] usb 3-1: Using ep0 maxpacket: 16 [ 2531.140652][ T6154] usb 6-1: Using ep0 maxpacket: 16 [ 2531.240709][ T7623] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2531.254327][ T7623] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2531.269054][T26196] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2531.281898][ T7623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2531.290046][T26196] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2531.290720][ T6154] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2531.312245][ T7623] usb 1-1: config 0 descriptor?? [ 2531.314474][T19210] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2531.331618][ T6154] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2531.332022][T26196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2531.342370][ T6154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2531.353041][ T7623] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2531.360155][ T6154] usb 6-1: config 0 descriptor?? [ 2531.389460][T26196] usb 3-1: config 0 descriptor?? [ 2531.402973][T17418] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2531.434414][ T6154] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2531.443178][T26196] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2531.552655][ T6154] usb 1-1: USB disconnect, device number 109 [ 2531.570528][T19210] usb 4-1: Using ep0 maxpacket: 16 [ 2531.634662][T23986] usb 6-1: USB disconnect, device number 79 [ 2531.646621][T15688] usb 3-1: USB disconnect, device number 65 [ 2531.680820][T17418] usb 2-1: Using ep0 maxpacket: 16 [ 2531.710679][T19210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2531.723625][T19210] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2531.738423][T19210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2531.751989][T19210] usb 4-1: config 0 descriptor?? [ 2531.794968][T19210] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2531.821671][T17418] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2531.834586][T17418] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2531.853153][T17418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2531.866491][T17418] usb 2-1: config 0 descriptor?? [ 2531.923092][T17418] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2531.992643][ T7623] usb 4-1: USB disconnect, device number 75 [ 2532.122245][T17418] usb 2-1: USB disconnect, device number 91 [ 2532.133982][ T6154] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2532.210564][T23986] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2532.250501][T15688] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2532.410440][ T6154] usb 1-1: Using ep0 maxpacket: 32 [ 2532.460661][T23986] usb 6-1: Using ep0 maxpacket: 32 [ 2532.490831][T15688] usb 3-1: Using ep0 maxpacket: 32 [ 2532.550442][ T7623] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2532.551410][ T6154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2532.569028][ T6154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2532.580238][ T6154] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2532.589680][ T6154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.599431][ T6154] usb 1-1: config 0 descriptor?? [ 2532.604580][T23986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2532.616198][T15688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2532.627246][T15688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2532.637173][T23986] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2532.648483][T15688] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2532.657678][T23986] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2532.667191][ T6154] hub 1-1:0.0: USB hub found [ 2532.671901][T23986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.680117][T15688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.691313][T15688] usb 3-1: config 0 descriptor?? [ 2532.696321][T23986] usb 6-1: config 0 descriptor?? [ 2532.710846][T17418] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2532.741151][T15688] hub 3-1:0.0: USB hub found [ 2532.746110][T23986] hub 6-1:0.0: USB hub found [ 2532.791587][ T7623] usb 4-1: Using ep0 maxpacket: 32 [ 2532.910625][ T7623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2532.921690][ T7623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2532.931560][ T7623] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2532.943960][ T7623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2532.953535][ T7623] usb 4-1: config 0 descriptor?? [ 2532.961364][T15688] hub 3-1:0.0: 1 port detected [ 2532.966195][T23986] hub 6-1:0.0: 1 port detected [ 2532.971022][ T6154] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2532.981726][T17418] usb 2-1: Using ep0 maxpacket: 32 [ 2532.987676][ T6154] usbhid 1-1:0.0: can't add hid device: -22 [ 2532.994957][ T6154] usbhid: probe of 1-1:0.0 failed with error -22 [ 2533.000839][ T7623] hub 4-1:0.0: USB hub found [ 2533.110390][T17418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2533.121407][T17418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2533.131269][T17418] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2533.142391][T17418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2533.151824][T17418] usb 2-1: config 0 descriptor?? [ 2533.202344][T17418] hub 2-1:0.0: USB hub found [ 2533.220392][ T7623] hub 4-1:0.0: 1 port detected [ 2533.410381][T17418] hub 2-1:0.0: 1 port detected [ 2533.870410][ T9981] hub 4-1:0.0: activate --> -90 [ 2533.900752][ T7623] usb 6-1: USB disconnect, device number 80 [ 2533.900815][T30428] usb 3-1: USB disconnect, device number 66 [ 2533.915218][ T6154] hub 3-1:0.0: activate --> -19 [ 2533.920071][T15688] hub 6-1:0.0: activate --> -19 [ 2534.080491][T15688] usb 1-1: USB disconnect, device number 110 09:41:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:21 executing program 4: 09:41:21 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2534.360766][T30428] usb 2-1: USB disconnect, device number 92 [ 2534.380583][ T6154] hub 2-1:0.0: activate --> -19 09:41:21 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:21 executing program 4: 09:41:21 executing program 4: [ 2534.740266][ T6154] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2534.747996][T15688] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2534.755614][T17418] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2535.010346][T15688] usb 3-1: Using ep0 maxpacket: 16 [ 2535.015497][ T6154] usb 1-1: Using ep0 maxpacket: 16 [ 2535.020629][T17418] usb 6-1: Using ep0 maxpacket: 16 09:41:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:22 executing program 4: 09:41:22 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:22 executing program 4: 09:41:22 executing program 4: 09:41:22 executing program 4: [ 2535.130810][T15688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2535.151504][T17418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2535.164700][ T6154] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2535.177632][T15688] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2535.197816][ T6154] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2535.208064][T17418] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2535.223177][T15688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2535.240157][ T6154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2535.248715][T17418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2535.258077][T15688] usb 3-1: config 0 descriptor?? [ 2535.270483][T17418] usb 6-1: config 0 descriptor?? [ 2535.275837][ T6154] usb 1-1: config 0 descriptor?? [ 2535.304005][T15688] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2535.332370][T17418] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2535.351924][ T6154] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2535.410204][T30428] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2535.418091][T15691] usb 4-1: reset high-speed USB device number 76 using dummy_hcd [ 2535.503413][ T9981] usb 3-1: USB disconnect, device number 67 [ 2535.531217][ T7623] usb 6-1: USB disconnect, device number 81 [ 2535.543118][ T6154] usb 1-1: USB disconnect, device number 111 [ 2535.670105][T15691] usb 4-1: Using ep0 maxpacket: 16 [ 2535.675271][T30428] usb 2-1: Using ep0 maxpacket: 16 [ 2535.720377][T15691] usb 4-1: device firmware changed [ 2535.725608][T15691] usb 4-1: USB disconnect, device number 76 [ 2535.820190][T30428] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2535.833067][T30428] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2535.842206][T30428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2535.853447][T30428] usb 2-1: config 0 descriptor?? [ 2535.902234][T30428] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2536.000062][ T7623] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 2536.060054][ T9981] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2536.100062][T15691] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2536.103287][T26196] usb 2-1: USB disconnect, device number 93 [ 2536.131546][ T6154] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2536.240045][ T7623] usb 6-1: Using ep0 maxpacket: 32 [ 2536.300051][ T9981] usb 3-1: Using ep0 maxpacket: 32 [ 2536.360035][T15691] usb 4-1: Using ep0 maxpacket: 16 [ 2536.360082][ T7623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2536.383100][ T7623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2536.390131][ T6154] usb 1-1: Using ep0 maxpacket: 32 [ 2536.399661][ T7623] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2536.411137][ T7623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2536.421051][ T9981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2536.432352][ T7623] usb 6-1: config 0 descriptor?? [ 2536.437411][ T9981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2536.447325][ T9981] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2536.457329][ T9981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2536.467342][ T9981] usb 3-1: config 0 descriptor?? [ 2536.472868][ T7623] hub 6-1:0.0: USB hub found [ 2536.510536][T15691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2536.523373][T15691] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2536.538766][ T6154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2536.540339][ T9981] hub 3-1:0.0: USB hub found [ 2536.551223][T15691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2536.570037][ T6154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2536.580684][ T6154] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2536.590241][T15691] usb 4-1: config 0 descriptor?? [ 2536.599018][ T6154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2536.611694][ T6154] usb 1-1: config 0 descriptor?? [ 2536.633827][T15691] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2536.650454][ T6154] hub 1-1:0.0: USB hub found [ 2536.679996][T26196] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2536.694034][ T7623] hub 6-1:0.0: 1 port detected [ 2536.769990][ T9981] hub 3-1:0.0: 1 port detected [ 2536.833084][T15691] usb 4-1: USB disconnect, device number 77 [ 2536.919979][T26196] usb 2-1: Using ep0 maxpacket: 32 [ 2536.990023][ T6154] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2537.001717][ T6154] usbhid 1-1:0.0: can't add hid device: -22 [ 2537.008099][ T6154] usbhid: probe of 1-1:0.0 failed with error -22 [ 2537.039984][T26196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2537.050977][T26196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2537.066778][T26196] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2537.078807][T26196] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2537.090411][T26196] usb 2-1: config 0 descriptor?? [ 2537.131158][T26196] hub 2-1:0.0: USB hub found [ 2537.349958][T26196] hub 2-1:0.0: 1 port detected [ 2537.419917][T15691] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2537.419957][ T9981] hub 3-1:0.0: activate --> -90 [ 2537.627903][ T9981] usb 6-1: USB disconnect, device number 82 [ 2537.633895][ T7623] hub 6-1:0.0: activate --> -19 [ 2537.669917][T15691] usb 4-1: Using ep0 maxpacket: 32 [ 2537.809916][T15691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2537.821006][T15691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2537.836809][T15691] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2537.848566][T15691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2537.862332][T15691] usb 4-1: config 0 descriptor?? [ 2537.912115][T15691] hub 4-1:0.0: USB hub found [ 2538.001316][ T7623] hub 2-1:0.0: activate --> -90 09:41:25 executing program 4: 09:41:25 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:25 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2538.090089][ T9981] usb 1-1: USB disconnect, device number 112 [ 2538.179876][T15691] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 2538.215332][T15691] usbhid 4-1:0.0: can't add hid device: -22 [ 2538.228988][T15691] usbhid: probe of 4-1:0.0 failed with error -22 [ 2538.429853][T15688] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2538.437770][T15691] usb 4-1: reset high-speed USB device number 78 using dummy_hcd 09:41:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:25 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:25 executing program 4: 09:41:25 executing program 4: 09:41:25 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10013, r0, 0x8000000) [ 2538.719754][T15688] usb 1-1: Using ep0 maxpacket: 16 [ 2538.725026][T15691] usb 4-1: Using ep0 maxpacket: 16 [ 2538.771436][T15691] usb 4-1: device firmware changed [ 2538.776609][T15691] usb 4-1: USB disconnect, device number 78 [ 2538.869773][T15688] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2538.882644][T15688] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2538.894755][T15688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2538.900650][ T7623] usb 3-1: reset high-speed USB device number 68 using dummy_hcd [ 2538.914066][T15688] usb 1-1: config 0 descriptor?? [ 2538.931127][ T9981] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2538.953464][T15688] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2539.139728][T15691] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2539.149878][ T7623] usb 3-1: Using ep0 maxpacket: 16 [ 2539.158576][T15688] usb 1-1: USB disconnect, device number 113 [ 2539.170321][ T9981] usb 6-1: Using ep0 maxpacket: 16 09:41:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:26 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "1a"}]}}, &(0x7f00000011c0)=""/201, 0x2a, 0xc9, 0x1}, 0x20) [ 2539.189992][ T7623] usb 3-1: device firmware changed [ 2539.195236][ T7623] usb 3-1: USB disconnect, device number 68 09:41:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8971, &(0x7f0000000300)={'gre0\x00', 0x0}) 09:41:26 executing program 4: perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:41:26 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x16, 0x0, 0x0) [ 2539.291142][ T9981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2539.313025][ T9981] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2539.328975][ T9981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2539.342332][ T9981] usb 6-1: config 0 descriptor?? [ 2539.382138][ T9981] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2539.400738][T15691] usb 4-1: Using ep0 maxpacket: 16 [ 2539.509862][T30428] usb 2-1: reset high-speed USB device number 94 using dummy_hcd [ 2539.521173][T15691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2539.538928][T15691] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2539.550070][T15691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2539.558890][T15691] usb 4-1: config 0 descriptor?? [ 2539.559724][ T7623] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2539.582079][T17658] usb 6-1: USB disconnect, device number 83 [ 2539.611875][T15691] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2539.759704][T15688] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2539.779656][T30428] usb 2-1: Using ep0 maxpacket: 16 [ 2539.809649][ T7623] usb 3-1: Using ep0 maxpacket: 16 [ 2539.816980][ T9981] usb 4-1: USB disconnect, device number 79 [ 2539.831671][T30428] usb 2-1: device firmware changed [ 2539.837509][T30428] usb 2-1: USB disconnect, device number 94 [ 2539.929669][ T7623] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2539.942601][ T7623] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2539.957949][ T7623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2539.970800][ T7623] usb 3-1: config 0 descriptor?? [ 2539.999683][T15688] usb 1-1: Using ep0 maxpacket: 32 [ 2540.012195][ T7623] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2540.050899][T17658] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2540.139675][T15688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2540.150661][T15688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2540.160571][T15688] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2540.170340][T15688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2540.180088][T15688] usb 1-1: config 0 descriptor?? [ 2540.211762][ T9274] usb 3-1: USB disconnect, device number 69 [ 2540.222519][T15688] hub 1-1:0.0: USB hub found [ 2540.227134][T30428] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2540.289598][T17658] usb 6-1: Using ep0 maxpacket: 32 [ 2540.389602][ T9981] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 2540.409873][T17658] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2540.420865][T17658] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2540.437399][T17658] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2540.449390][T17658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2540.461187][T17658] usb 6-1: config 0 descriptor?? [ 2540.480295][T30428] usb 2-1: Using ep0 maxpacket: 16 [ 2540.500841][T17658] hub 6-1:0.0: USB hub found [ 2540.522163][T15688] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2540.532070][T15688] usbhid 1-1:0.0: can't add hid device: -22 [ 2540.537991][T15688] usbhid: probe of 1-1:0.0 failed with error -22 [ 2540.629593][ T9981] usb 4-1: Using ep0 maxpacket: 32 [ 2540.639611][T30428] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2540.652437][T30428] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2540.661478][T30428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2540.671636][T30428] usb 2-1: config 0 descriptor?? [ 2540.689569][T15691] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2540.711565][T30428] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2540.719588][T17658] hub 6-1:0.0: 1 port detected [ 2540.752912][ T9981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2540.763954][ T9981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2540.775531][ T9981] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2540.784613][ T9981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2540.794758][ T9981] usb 4-1: config 0 descriptor?? [ 2540.839926][ T9981] hub 4-1:0.0: USB hub found [ 2540.911787][ T9274] usb 2-1: USB disconnect, device number 95 [ 2540.929534][T15691] usb 3-1: Using ep0 maxpacket: 32 [ 2541.059548][ T9981] hub 4-1:0.0: 1 port detected [ 2541.060510][T15691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2541.075303][T15691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2541.089132][T15691] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2541.098239][T15691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2541.108549][T15691] usb 3-1: config 0 descriptor?? [ 2541.159959][T15691] hub 3-1:0.0: USB hub found [ 2541.369494][T17658] hub 6-1:0.0: activate --> -90 [ 2541.381205][T15691] hub 3-1:0.0: 1 port detected 09:41:28 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2541.469517][ T9274] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2541.709559][T17658] hub 4-1:0.0: activate --> -90 [ 2541.714512][ T9274] usb 2-1: Using ep0 maxpacket: 32 [ 2541.779558][ T6154] usb 1-1: reset high-speed USB device number 114 using dummy_hcd [ 2541.840614][ T9274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2541.851734][ T9274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2541.866561][ T9274] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2541.877208][ T9274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2541.888574][ T9274] usb 2-1: config 0 descriptor?? [ 2541.939965][ T9274] hub 2-1:0.0: USB hub found [ 2542.049438][T30428] hub 3-1:0.0: activate --> -90 [ 2542.054344][ T6154] usb 1-1: Using ep0 maxpacket: 16 [ 2542.099761][ T6154] usb 1-1: device firmware changed [ 2542.105114][ T6154] usb 1-1: USB disconnect, device number 114 [ 2542.159416][ T9274] hub 2-1:0.0: 1 port detected [ 2542.459479][ T6154] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2542.699409][T17658] usb 6-1: USB disconnect, device number 84 [ 2542.749384][ T6154] usb 1-1: Using ep0 maxpacket: 16 [ 2542.809372][T17658] hub 2-1:0.0: activate --> -90 09:41:30 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001800)='./cgroup.net/syz1\x00', 0x200002, 0x0) [ 2542.889384][ T6154] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2542.902460][ T6154] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2542.916627][ T6154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2542.928679][ T6154] usb 1-1: config 0 descriptor?? [ 2542.981268][ T6154] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2543.049463][T26196] usb 4-1: USB disconnect, device number 80 [ 2543.181808][T26196] usb 1-1: USB disconnect, device number 115 09:41:30 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:30 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:30 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:30 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f, r1}) 09:41:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x3c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_LABELS_MASK={0x4}]}, 0x3c}}, 0x0) [ 2543.519484][T17658] usb 3-1: reset high-speed USB device number 70 using dummy_hcd [ 2543.549339][ T9274] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2543.559286][ T6154] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 2543.739231][T26196] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2543.759521][T17658] usb 3-1: Using ep0 maxpacket: 16 [ 2543.789278][ T9274] usb 6-1: Using ep0 maxpacket: 16 [ 2543.799502][T17658] usb 3-1: device firmware changed [ 2543.814009][T17658] usb 3-1: USB disconnect, device number 70 [ 2543.819197][ T6154] usb 4-1: Using ep0 maxpacket: 16 [ 2543.909246][ T9274] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2543.923376][ T9274] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2543.940866][ T9274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2543.953244][ T9274] usb 6-1: config 0 descriptor?? [ 2543.964226][ T6154] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2543.977490][ T6154] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2543.989570][ T6154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2543.991861][ T9274] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2544.005261][T26196] usb 1-1: Using ep0 maxpacket: 32 09:41:31 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x19, 0x0, 0x0, 0x8b}, 0x40) [ 2544.005687][ T6154] usb 4-1: config 0 descriptor?? 09:41:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8931, &(0x7f0000000300)={'gre0\x00', 0x0}) 09:41:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8922, &(0x7f0000000300)={'gre0\x00', 0x0}) [ 2544.061003][ T6154] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 09:41:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000006180)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0, 0x2}, {&(0x7f00000006c0)=""/222, 0xde}], 0x3}}], 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 2544.131113][T26196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2544.142130][T26196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2544.160180][T26196] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2544.172271][T17658] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2544.179910][T26196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.188586][T26196] usb 1-1: config 0 descriptor?? [ 2544.198385][ T6154] usb 6-1: USB disconnect, device number 85 [ 2544.249588][T26196] hub 1-1:0.0: USB hub found [ 2544.268088][T15688] usb 4-1: USB disconnect, device number 81 [ 2544.359279][ T9274] usb 2-1: reset high-speed USB device number 96 using dummy_hcd [ 2544.419132][T17658] usb 3-1: Using ep0 maxpacket: 16 [ 2544.539321][T17658] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2544.552179][T26196] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2544.560098][T17658] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2544.582509][T26196] usbhid 1-1:0.0: can't add hid device: -22 [ 2544.588415][T26196] usbhid: probe of 1-1:0.0 failed with error -22 [ 2544.599168][T17658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2544.609617][ T9274] usb 2-1: Using ep0 maxpacket: 16 [ 2544.617021][T17658] usb 3-1: config 0 descriptor?? [ 2544.649275][ T9274] usb 2-1: device firmware changed [ 2544.654461][ T9274] usb 2-1: USB disconnect, device number 96 [ 2544.662200][T17658] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2544.789130][ T6154] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2544.862161][T26196] usb 3-1: USB disconnect, device number 71 [ 2544.879386][T15688] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 2545.029122][ T9274] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2545.039157][ T6154] usb 6-1: Using ep0 maxpacket: 32 [ 2545.139232][T15688] usb 4-1: Using ep0 maxpacket: 32 [ 2545.159218][ T6154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2545.170145][ T6154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2545.183060][ T6154] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2545.192130][ T6154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2545.202436][ T6154] usb 6-1: config 0 descriptor?? [ 2545.239452][ T6154] hub 6-1:0.0: USB hub found [ 2545.260659][T15688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2545.269088][ T9274] usb 2-1: Using ep0 maxpacket: 16 [ 2545.271642][T15688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2545.286918][T15688] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2545.296221][T15688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2545.305576][T15688] usb 4-1: config 0 descriptor?? [ 2545.359410][T15688] hub 4-1:0.0: USB hub found [ 2545.389063][ T9274] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2545.401869][ T9274] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2545.417607][ T9274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2545.428275][T26196] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2545.436473][ T9274] usb 2-1: config 0 descriptor?? [ 2545.450338][ T6154] hub 6-1:0.0: 1 port detected 09:41:32 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:32 executing program 4: syz_open_dev$loop(&(0x7f0000003680)='/dev/loop#\x00', 0x0, 0x181281) [ 2545.491127][ T9274] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2545.569039][T15688] hub 4-1:0.0: 1 port detected [ 2545.669006][T26196] usb 3-1: Using ep0 maxpacket: 32 [ 2545.690898][ T7623] usb 2-1: USB disconnect, device number 97 [ 2545.789293][T26196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2545.800672][ T9274] usb 1-1: reset high-speed USB device number 116 using dummy_hcd [ 2545.808501][T26196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2545.829727][T26196] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2545.838836][T26196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2545.848580][T26196] usb 3-1: config 0 descriptor?? [ 2545.899425][T26196] hub 3-1:0.0: USB hub found [ 2546.038991][ T9274] usb 1-1: Using ep0 maxpacket: 16 [ 2546.079441][ T9274] usb 1-1: device firmware changed [ 2546.084691][ T9274] usb 1-1: USB disconnect, device number 116 [ 2546.109038][ T6154] hub 6-1:0.0: activate --> -90 [ 2546.125679][T26196] hub 3-1:0.0: 1 port detected [ 2546.249005][ T7623] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2546.439094][T30428] hub 4-1:0.0: activate --> -90 [ 2546.448953][ T9274] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2546.489342][ T7623] usb 2-1: Using ep0 maxpacket: 32 [ 2546.608973][ T7623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2546.619940][ T7623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2546.632518][ T7623] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2546.642878][ T7623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2546.648915][T30428] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2546.653146][ T7623] usb 2-1: config 0 descriptor?? [ 2546.681974][T26196] usb 4-1: USB disconnect, device number 82 [ 2546.691263][ T9274] usb 1-1: Using ep0 maxpacket: 16 [ 2546.709036][T30428] usb 4-1: Failed to suspend device, error -71 [ 2546.711193][ T7623] hub 2-1:0.0: USB hub found [ 2546.768929][T17658] hub 3-1:0.0: activate --> -90 [ 2546.808915][ T9274] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2546.821924][ T9274] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2546.833988][ T9274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2546.842845][ T9274] usb 1-1: config 0 descriptor?? [ 2546.880892][ T9274] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2546.918906][ T7623] hub 2-1:0.0: 1 port detected [ 2547.080999][ T9274] usb 1-1: USB disconnect, device number 117 [ 2547.438941][T17658] usb 6-1: USB disconnect, device number 86 [ 2547.568828][T17658] hub 2-1:0.0: activate --> -90 [ 2547.638933][ T9274] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2547.878865][ T9274] usb 1-1: Using ep0 maxpacket: 32 09:41:35 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:35 executing program 4: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 09:41:35 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2548.000501][ T9274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2548.022893][ T9274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 09:41:35 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) [ 2548.046539][ T9274] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2548.059930][ T9274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2548.074839][ T9274] usb 1-1: config 0 descriptor?? [ 2548.119117][ T9274] hub 1-1:0.0: USB hub found [ 2548.258910][T30428] usb 3-1: reset high-speed USB device number 72 using dummy_hcd [ 2548.338882][ T9274] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2548.348746][ T7623] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2548.356479][T17658] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2548.370184][ T9274] usbhid 1-1:0.0: can't add hid device: -22 [ 2548.376098][ T9274] usbhid: probe of 1-1:0.0 failed with error -22 [ 2548.508738][T30428] usb 3-1: Using ep0 maxpacket: 16 [ 2548.548749][T30428] usb 3-1: device firmware changed [ 2548.554224][T30428] usb 3-1: USB disconnect, device number 72 [ 2548.590557][ T7623] usb 4-1: Using ep0 maxpacket: 16 [ 2548.618739][T17658] usb 6-1: Using ep0 maxpacket: 16 [ 2548.708750][ T7623] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2548.721600][ T7623] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2548.737150][ T7623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:41:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:35 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@private1, @private0, @mcast2}) [ 2548.748208][T17658] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2548.761545][T17658] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2548.770957][ T7623] usb 4-1: config 0 descriptor?? [ 2548.799010][T17658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 09:41:35 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000003680)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x4c02, &(0x7f00000036c0)) 09:41:35 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f00000000c0)={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) [ 2548.816657][ T7623] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2548.849095][T17658] usb 6-1: config 0 descriptor?? 09:41:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x4) ioctl$sock_inet6_SIOCADDRT(r0, 0x8901, &(0x7f00000000c0)={@ipv4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}}) [ 2548.890798][T17658] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2548.929176][T30428] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2549.020460][ T6154] usb 4-1: USB disconnect, device number 83 [ 2549.068878][T15688] usb 2-1: reset high-speed USB device number 98 using dummy_hcd [ 2549.092652][ T7623] usb 6-1: USB disconnect, device number 87 [ 2549.178660][T30428] usb 3-1: Using ep0 maxpacket: 16 [ 2549.308697][T30428] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2549.321618][T30428] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2549.336704][T30428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2549.347915][T15688] usb 2-1: Using ep0 maxpacket: 16 [ 2549.353835][T30428] usb 3-1: config 0 descriptor?? [ 2549.389898][T15688] usb 2-1: device firmware changed [ 2549.395239][T15688] usb 2-1: USB disconnect, device number 98 [ 2549.411808][T30428] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 09:41:36 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:36 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="8d84", 0x2, 0x20000010, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) [ 2549.613799][ T9274] usb 3-1: USB disconnect, device number 73 [ 2549.628609][ T6154] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2549.648590][ T7623] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2549.778623][T15688] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2549.828668][T30428] usb 1-1: reset high-speed USB device number 118 using dummy_hcd [ 2549.888551][ T6154] usb 4-1: Using ep0 maxpacket: 32 [ 2549.888556][ T7623] usb 6-1: Using ep0 maxpacket: 32 [ 2550.008596][ T7623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2550.019660][ T7623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2550.028695][T15688] usb 2-1: Using ep0 maxpacket: 16 [ 2550.029457][ T7623] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2550.034816][ T6154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2550.043831][ T7623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2550.064843][ T7623] usb 6-1: config 0 descriptor?? [ 2550.078387][ T6154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2550.088846][T30428] usb 1-1: Using ep0 maxpacket: 16 [ 2550.094468][ T6154] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2550.103846][ T6154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2550.115567][ T6154] usb 4-1: config 0 descriptor?? [ 2550.120898][ T7623] hub 6-1:0.0: USB hub found [ 2550.138992][T30428] usb 1-1: device firmware changed [ 2550.146027][T30428] usb 1-1: USB disconnect, device number 118 [ 2550.168604][T15688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2550.169062][ T9274] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2550.181794][ T6154] hub 4-1:0.0: USB hub found [ 2550.213220][T15688] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2550.223770][T15688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2550.234005][T15688] usb 2-1: config 0 descriptor?? [ 2550.281978][T15688] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2550.328524][ T7623] hub 6-1:0.0: 1 port detected [ 2550.398544][ T6154] hub 4-1:0.0: 1 port detected [ 2550.438562][ T9274] usb 3-1: Using ep0 maxpacket: 32 [ 2550.482122][T15688] usb 2-1: USB disconnect, device number 99 [ 2550.558544][ T9274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2550.569528][ T9274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2550.578480][T30428] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2550.588496][ T9274] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2550.597511][ T9274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2550.608300][ T9274] usb 3-1: config 0 descriptor?? [ 2550.658884][ T9274] hub 3-1:0.0: USB hub found [ 2550.818467][T30428] usb 1-1: Using ep0 maxpacket: 16 [ 2550.878500][ T9274] hub 3-1:0.0: 1 port detected [ 2550.948522][T30428] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2550.961342][T30428] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2550.973573][T30428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2550.978651][ T7623] hub 6-1:0.0: activate --> -90 [ 2550.989929][T30428] usb 1-1: config 0 descriptor?? [ 2551.029975][T30428] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2551.068518][T15688] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2551.230772][T15545] usb 1-1: USB disconnect, device number 119 [ 2551.278477][ T6154] hub 4-1:0.0: activate --> -90 [ 2551.308593][T15688] usb 2-1: Using ep0 maxpacket: 32 [ 2551.439862][T15688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2551.450801][T15688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2551.466755][T15688] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2551.478992][T15688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2551.494088][T15691] usb 4-1: USB disconnect, device number 84 [ 2551.500020][ T6154] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2551.507215][T15688] usb 2-1: config 0 descriptor?? [ 2551.578748][T15688] hub 2-1:0.0: USB hub found [ 2551.748458][ T9274] hub 3-1:0.0: activate --> -90 [ 2551.788413][T15545] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 2551.808378][T15688] hub 2-1:0.0: 1 port detected [ 2551.950504][ T6154] usb 3-1: USB disconnect, device number 74 [ 2551.968426][ T9274] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2552.028428][T15545] usb 1-1: Using ep0 maxpacket: 32 [ 2552.148371][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2552.160913][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2552.177100][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2552.195762][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2552.205295][T15545] usb 1-1: config 0 descriptor?? [ 2552.258655][T15545] hub 1-1:0.0: USB hub found [ 2552.338392][T26196] usb 6-1: USB disconnect, device number 88 09:41:39 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0xb00, 0x8b}, 0x40) 09:41:39 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8929, &(0x7f0000000300)={'gre0\x00', 0x0}) [ 2552.478303][T15545] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2552.507025][T15545] usbhid 1-1:0.0: can't add hid device: -22 [ 2552.520584][T15545] usbhid: probe of 1-1:0.0 failed with error -22 [ 2552.678288][T15688] hub 2-1:0.0: activate --> -90 [ 2552.748275][ T6154] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2552.798280][T15691] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2552.808246][T26196] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2552.878573][T30428] usb 2-1: USB disconnect, device number 100 [ 2552.888326][T15688] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2553.018229][ T6154] usb 6-1: Using ep0 maxpacket: 16 [ 2553.048216][T26196] usb 3-1: Using ep0 maxpacket: 16 [ 2553.068370][T15691] usb 4-1: Using ep0 maxpacket: 16 [ 2553.168247][T26196] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2553.178241][ T6154] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2553.182793][T26196] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2553.194200][ T6154] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2553.214897][ T6154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2553.220570][T26196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2553.231726][ T6154] usb 6-1: config 0 descriptor?? [ 2553.233551][T26196] usb 3-1: config 0 descriptor?? [ 2553.239356][T15691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2553.265721][T15691] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2553.276603][ T6154] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2553.280337][T26196] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2553.293390][T15691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2553.312810][T15691] usb 4-1: config 0 descriptor?? 09:41:40 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:40 executing program 4: shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) [ 2553.360353][T15691] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 09:41:40 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self\x00', 0x10080, 0x0) 09:41:40 executing program 4: 09:41:40 executing program 4: [ 2553.477541][T26196] usb 6-1: USB disconnect, device number 89 [ 2553.491446][T15691] usb 3-1: USB disconnect, device number 75 [ 2553.559945][ T9274] usb 4-1: USB disconnect, device number 85 09:41:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:40 executing program 4: [ 2553.698160][ T6154] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2553.958111][ T6154] usb 2-1: Using ep0 maxpacket: 16 [ 2553.958408][T15545] usb 1-1: reset high-speed USB device number 120 using dummy_hcd [ 2554.048156][T26196] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2554.055764][ T9274] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2554.078146][T15691] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2554.098268][ T6154] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2554.111413][ T6154] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2554.128102][ T6154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2554.137127][ T6154] usb 2-1: config 0 descriptor?? [ 2554.190093][ T6154] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2554.218114][T15545] usb 1-1: Using ep0 maxpacket: 16 [ 2554.258267][T15545] usb 1-1: device firmware changed [ 2554.263442][T15545] usb 1-1: USB disconnect, device number 120 [ 2554.298110][T26196] usb 6-1: Using ep0 maxpacket: 32 [ 2554.303301][ T9274] usb 4-1: Using ep0 maxpacket: 32 [ 2554.328130][T15691] usb 3-1: Using ep0 maxpacket: 32 [ 2554.389459][T17658] usb 2-1: USB disconnect, device number 101 [ 2554.418265][T26196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2554.429471][ T9274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2554.440459][ T9274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2554.450287][T26196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2554.459188][T15691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2554.461964][ T9274] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2554.479706][T15691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2554.481845][T26196] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2554.493675][T15691] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2554.512861][T15691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2554.521809][ T9274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2554.531676][T15691] usb 3-1: config 0 descriptor?? [ 2554.532564][T26196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2554.559780][ T9274] usb 4-1: config 0 descriptor?? [ 2554.567103][T26196] usb 6-1: config 0 descriptor?? [ 2554.581995][T15691] hub 3-1:0.0: USB hub found [ 2554.598352][ T9274] hub 4-1:0.0: USB hub found [ 2554.608440][T26196] hub 6-1:0.0: USB hub found [ 2554.648071][T15545] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2554.808042][T15691] hub 3-1:0.0: 1 port detected [ 2554.824904][ T9274] hub 4-1:0.0: 1 port detected [ 2554.829755][T26196] hub 6-1:0.0: 1 port detected [ 2554.888047][T15545] usb 1-1: Using ep0 maxpacket: 16 [ 2554.948104][T17658] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2555.008067][T15545] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2555.021269][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2555.033615][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2555.042508][T15545] usb 1-1: config 0 descriptor?? [ 2555.081500][T15545] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2555.187991][T17658] usb 2-1: Using ep0 maxpacket: 32 [ 2555.280432][T26196] usb 1-1: USB disconnect, device number 121 [ 2555.308279][T17658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2555.319312][T17658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2555.335028][T17658] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2555.347105][T17658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2555.358965][T17658] usb 2-1: config 0 descriptor?? [ 2555.398329][T17658] hub 2-1:0.0: USB hub found [ 2555.617967][T17658] hub 2-1:0.0: 1 port detected [ 2555.677979][ T9274] hub 4-1:0.0: activate --> -90 [ 2555.697994][ T7623] hub 6-1:0.0: activate --> -90 [ 2555.711052][T15691] hub 3-1:0.0: activate --> -90 [ 2555.838088][T26196] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2555.878505][ T6154] usb 4-1: USB disconnect, device number 86 [ 2555.897943][ T9274] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2555.898540][T30428] usb 6-1: USB disconnect, device number 90 [ 2555.913632][T17418] usb 3-1: USB disconnect, device number 76 [ 2555.920057][T15691] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2555.920319][ T7623] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2556.077916][T26196] usb 1-1: Using ep0 maxpacket: 32 [ 2556.198149][T26196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2556.209059][T26196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2556.221992][T26196] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2556.231084][T26196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2556.242428][T26196] usb 1-1: config 0 descriptor?? [ 2556.278284][T26196] hub 1-1:0.0: USB hub found 09:41:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:43 executing program 4: 09:41:43 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:43 executing program 4: [ 2556.487868][T17658] hub 2-1:0.0: activate --> -90 [ 2556.499555][T26196] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2556.525732][T26196] usbhid 1-1:0.0: can't add hid device: -22 [ 2556.542958][T26196] usbhid: probe of 1-1:0.0 failed with error -22 [ 2556.688168][ T7623] usb 2-1: USB disconnect, device number 102 [ 2556.707956][T17658] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2556.727889][T30428] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2556.735534][T17418] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2556.758151][ T6154] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2556.997805][T30428] usb 4-1: Using ep0 maxpacket: 16 [ 2557.003049][T17418] usb 6-1: Using ep0 maxpacket: 16 [ 2557.017944][ T6154] usb 3-1: Using ep0 maxpacket: 16 [ 2557.127824][T30428] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2557.140812][T30428] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2557.156561][T17418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 09:41:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:44 executing program 4: [ 2557.169658][ T6154] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2557.182469][T30428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2557.190564][ T6154] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2557.202068][T17418] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2557.211466][ T6154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2557.220428][T30428] usb 4-1: config 0 descriptor?? 09:41:44 executing program 4: [ 2557.226842][T17418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2557.250622][ T6154] usb 3-1: config 0 descriptor?? [ 2557.257368][T17418] usb 6-1: config 0 descriptor?? [ 2557.264493][T30428] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 09:41:44 executing program 4: [ 2557.290460][ T6154] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 09:41:44 executing program 4: [ 2557.350276][T17418] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2557.464987][ T7623] usb 4-1: USB disconnect, device number 87 [ 2557.489028][T17658] usb 3-1: USB disconnect, device number 77 [ 2557.549145][T26196] usb 6-1: USB disconnect, device number 91 [ 2557.587743][ T6154] usb 2-1: new high-speed USB device number 103 using dummy_hcd 09:41:44 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:44 executing program 4: [ 2557.837717][ T6154] usb 2-1: Using ep0 maxpacket: 16 [ 2557.987865][T15691] usb 1-1: reset high-speed USB device number 122 using dummy_hcd [ 2557.995766][T17418] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2558.006532][ T6154] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2558.017689][T26196] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2558.021103][ T6154] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2558.026943][ T7623] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2558.036458][ T6154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.056204][ T6154] usb 2-1: config 0 descriptor?? [ 2558.109845][ T6154] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2558.257664][T15691] usb 1-1: Using ep0 maxpacket: 16 [ 2558.257720][T26196] usb 6-1: Using ep0 maxpacket: 32 [ 2558.262813][T17418] usb 3-1: Using ep0 maxpacket: 32 [ 2558.288970][ T7623] usb 4-1: Using ep0 maxpacket: 32 [ 2558.317718][T15691] usb 1-1: device firmware changed [ 2558.322155][T17658] usb 2-1: USB disconnect, device number 103 [ 2558.323095][T15691] usb 1-1: USB disconnect, device number 122 [ 2558.387693][T26196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2558.398668][T26196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2558.411374][ T7623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2558.418540][T17418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2558.422434][T26196] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2558.442453][T17418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2558.442667][ T7623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2558.453793][T17418] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2558.476714][T17418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.478439][T26196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.488193][T17418] usb 3-1: config 0 descriptor?? [ 2558.497635][ T7623] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2558.506643][ T7623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2558.530579][T26196] usb 6-1: config 0 descriptor?? [ 2558.538974][T17418] hub 3-1:0.0: USB hub found [ 2558.559425][ T7623] usb 4-1: config 0 descriptor?? [ 2558.568044][T26196] hub 6-1:0.0: USB hub found [ 2558.597984][ T7623] hub 4-1:0.0: USB hub found [ 2558.697704][T15691] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2558.767656][T17418] hub 3-1:0.0: 1 port detected [ 2558.787632][T26196] hub 6-1:0.0: 1 port detected [ 2558.817635][ T7623] hub 4-1:0.0: 1 port detected [ 2558.887613][T17658] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2558.947589][T15691] usb 1-1: Using ep0 maxpacket: 16 [ 2559.067957][T15691] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2559.082761][T15691] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2559.098206][T15691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2559.107093][T15691] usb 1-1: config 0 descriptor?? [ 2559.127575][T17658] usb 2-1: Using ep0 maxpacket: 32 [ 2559.159842][T15691] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2559.247731][T17658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2559.259530][T17658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2559.275308][T17658] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2559.287461][T17658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2559.299060][T17658] usb 2-1: config 0 descriptor?? [ 2559.339401][T17658] hub 2-1:0.0: USB hub found [ 2559.359946][T15691] usb 1-1: USB disconnect, device number 123 [ 2559.557551][T17658] hub 2-1:0.0: 1 port detected [ 2559.617545][T17418] hub 3-1:0.0: activate --> -90 [ 2559.657535][T26196] hub 6-1:0.0: activate --> -90 [ 2559.687573][ T7623] hub 4-1:0.0: activate --> -90 [ 2559.819005][ T6154] usb 3-1: USB disconnect, device number 78 [ 2559.847508][T17418] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2559.859111][ T9274] usb 6-1: USB disconnect, device number 92 [ 2559.880520][T26196] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2559.894539][T17418] usb 4-1: USB disconnect, device number 88 [ 2559.913737][ T7623] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2559.949300][T15691] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2560.197489][T15691] usb 1-1: Using ep0 maxpacket: 32 09:41:47 executing program 4: 09:41:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2560.347790][T15691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2560.358999][T15691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2560.378639][T15691] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 09:41:47 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:47 executing program 4: 09:41:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2560.392530][T15691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2560.410438][T15691] usb 1-1: config 0 descriptor?? [ 2560.428083][T17658] hub 2-1:0.0: activate --> -90 [ 2560.459600][T15691] hub 1-1:0.0: USB hub found [ 2560.617414][ T9274] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2560.630981][ T6154] usb 2-1: USB disconnect, device number 104 [ 2560.647474][T17658] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2560.677439][T15691] hub 1-1:0.0: 1 port detected [ 2560.727404][ T7623] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2560.727489][T17418] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2560.857435][ T9274] usb 3-1: Using ep0 maxpacket: 16 [ 2560.967380][ T7623] usb 4-1: Using ep0 maxpacket: 16 [ 2560.980568][ T9274] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2560.993441][ T9274] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2560.997387][T17418] usb 6-1: Using ep0 maxpacket: 16 [ 2561.004401][ T9274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2561.020216][ T9274] usb 3-1: config 0 descriptor?? [ 2561.059601][ T9274] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 09:41:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:48 executing program 4: [ 2561.097403][ T7623] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2561.110275][ T7623] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2561.122140][ T7623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2561.131901][ T7623] usb 4-1: config 0 descriptor?? [ 2561.147083][T17418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2561.169209][ T7623] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2561.178030][T15691] usb 1-1: USB disconnect, device number 124 [ 2561.196062][T17418] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 09:41:48 executing program 4: 09:41:48 executing program 4: [ 2561.220757][T17418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2561.248276][T17418] usb 6-1: config 0 descriptor?? [ 2561.263887][ T7623] usb 3-1: USB disconnect, device number 79 09:41:48 executing program 4: [ 2561.309608][T17418] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2561.368878][ T9274] usb 4-1: USB disconnect, device number 89 [ 2561.509986][T17658] usb 6-1: USB disconnect, device number 93 [ 2561.547329][T15688] usb 2-1: new high-speed USB device number 105 using dummy_hcd 09:41:48 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:48 executing program 4: 09:41:48 executing program 4: [ 2561.817283][T15688] usb 2-1: Using ep0 maxpacket: 16 [ 2561.830155][ T7623] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2561.837725][ T9274] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2561.957282][T26196] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2561.967498][T15688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2561.980499][T15688] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2561.992308][T15688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.002354][T15688] usb 2-1: config 0 descriptor?? [ 2562.049396][T15688] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2562.067324][T17658] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2562.078614][ T9274] usb 4-1: Using ep0 maxpacket: 32 [ 2562.083950][ T7623] usb 3-1: Using ep0 maxpacket: 32 [ 2562.197491][ T9274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2562.208481][ T7623] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2562.219398][T26196] usb 1-1: Using ep0 maxpacket: 16 [ 2562.224564][ T9274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2562.234294][ T7623] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2562.246997][ T9274] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2562.258814][ T7623] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2562.259224][T15688] usb 2-1: USB disconnect, device number 105 [ 2562.269455][ T9274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.284008][ T7623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.307229][T17658] usb 6-1: Using ep0 maxpacket: 32 [ 2562.313428][ T7623] usb 3-1: config 0 descriptor?? [ 2562.321950][ T9274] usb 4-1: config 0 descriptor?? [ 2562.338729][T26196] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2562.353413][T26196] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2562.366487][ T9274] hub 4-1:0.0: USB hub found [ 2562.373096][ T7623] hub 3-1:0.0: USB hub found [ 2562.378000][T26196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.397607][T26196] usb 1-1: config 0 descriptor?? [ 2562.427461][T17658] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2562.441687][T26196] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2562.452959][T17658] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2562.467347][T17658] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2562.476832][T17658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2562.485844][T17658] usb 6-1: config 0 descriptor?? [ 2562.537637][T17658] hub 6-1:0.0: USB hub found [ 2562.577256][ T7623] hub 3-1:0.0: 1 port detected [ 2562.582071][ T9274] hub 4-1:0.0: 1 port detected [ 2562.642295][T15545] usb 1-1: USB disconnect, device number 125 [ 2562.757242][T17658] hub 6-1:0.0: 1 port detected [ 2562.867226][T15688] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2563.137155][T15688] usb 2-1: Using ep0 maxpacket: 32 [ 2563.197816][T15545] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2563.277183][T15688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2563.289378][T15688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2563.302273][T15688] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2563.311386][T15688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2563.321435][T15688] usb 2-1: config 0 descriptor?? [ 2563.357508][T15688] hub 2-1:0.0: USB hub found [ 2563.437190][T15545] usb 1-1: Using ep0 maxpacket: 32 [ 2563.450388][T26196] hub 3-1:0.0: activate --> -90 [ 2563.455354][ T9274] hub 4-1:0.0: activate --> -90 [ 2563.557123][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2563.568328][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2563.584302][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2563.587134][T15688] hub 2-1:0.0: 1 port detected [ 2563.599885][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2563.616228][T15545] usb 1-1: config 0 descriptor?? [ 2563.627118][T17658] hub 6-1:0.0: activate --> -90 [ 2563.648839][T17418] usb 4-1: USB disconnect, device number 90 [ 2563.661712][T15545] hub 1-1:0.0: USB hub found [ 2563.670036][ T9274] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2563.677335][ T9274] usb 3-1: USB disconnect, device number 80 [ 2563.688403][T26196] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2563.827594][T26196] usb 6-1: USB disconnect, device number 94 [ 2563.847075][T17658] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2563.877099][T15545] hub 1-1:0.0: 1 port detected 09:41:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:51 executing program 4: 09:41:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2564.357571][T15545] usb 1-1: USB disconnect, device number 126 [ 2564.457070][ T6154] hub 2-1:0.0: activate --> -90 [ 2564.477003][T17658] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2564.497179][T26196] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2564.617022][T15688] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2564.662367][T17418] usb 2-1: USB disconnect, device number 106 [ 2564.687008][ T6154] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2564.718182][T17658] usb 4-1: Using ep0 maxpacket: 16 [ 2564.737213][T26196] usb 3-1: Using ep0 maxpacket: 16 [ 2564.837224][T17658] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2564.856972][T26196] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2564.869761][T17658] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2564.877003][T15688] usb 6-1: Using ep0 maxpacket: 16 [ 2564.879274][T26196] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2564.895838][T17658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2564.906815][T26196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2564.915274][T17658] usb 4-1: config 0 descriptor?? [ 2564.928434][T26196] usb 3-1: config 0 descriptor?? [ 2564.958900][T17658] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2564.970443][T26196] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2565.037104][T15688] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2565.050101][T15688] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2565.062324][T15688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2565.073489][T15688] usb 6-1: config 0 descriptor?? [ 2565.139114][T15688] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2565.158339][T15688] usb 4-1: USB disconnect, device number 91 09:41:52 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:52 executing program 4: 09:41:52 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:52 executing program 4: [ 2565.179396][T17418] usb 3-1: USB disconnect, device number 81 09:41:52 executing program 4: 09:41:52 executing program 4: 09:41:52 executing program 4: 09:41:52 executing program 4: [ 2565.348365][T17658] usb 6-1: USB disconnect, device number 95 [ 2565.476929][ T6154] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2565.486901][T26196] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2565.726896][T26196] usb 1-1: Using ep0 maxpacket: 16 [ 2565.738405][T15688] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2565.767101][ T6154] usb 2-1: Using ep0 maxpacket: 16 [ 2565.776905][T17418] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2565.816897][T17658] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2565.847312][T26196] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2565.861059][T26196] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2565.876560][T26196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2565.889340][T26196] usb 1-1: config 0 descriptor?? [ 2565.908553][ T6154] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2565.921451][ T6154] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2565.928855][T26196] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2565.932815][ T6154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2565.948505][ T6154] usb 2-1: config 0 descriptor?? [ 2565.986921][T15688] usb 4-1: Using ep0 maxpacket: 32 [ 2566.000450][ T6154] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2566.046878][T17418] usb 3-1: Using ep0 maxpacket: 32 [ 2566.066940][T17658] usb 6-1: Using ep0 maxpacket: 32 [ 2566.116988][T15688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2566.128475][T15688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2566.130340][T15545] usb 1-1: USB disconnect, device number 127 [ 2566.138851][T15688] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2566.161068][T15688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2566.177591][T15688] usb 4-1: config 0 descriptor?? [ 2566.187993][T17658] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2566.197419][T17418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2566.201152][T17658] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2566.220440][T17418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2566.223339][T17658] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2566.230774][T15688] hub 4-1:0.0: USB hub found [ 2566.251329][T17658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2566.264157][T17418] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2566.276892][T17658] usb 6-1: config 0 descriptor?? [ 2566.284987][T17418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2566.309211][T17418] usb 3-1: config 0 descriptor?? [ 2566.322012][ T6154] usb 2-1: USB disconnect, device number 107 [ 2566.327245][T17658] hub 6-1:0.0: USB hub found [ 2566.367214][T17418] hub 3-1:0.0: USB hub found [ 2566.446857][T15688] hub 4-1:0.0: 1 port detected [ 2566.546860][T17658] hub 6-1:0.0: 1 port detected [ 2566.576840][T17418] hub 3-1:0.0: 1 port detected [ 2566.696841][T15545] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2566.796996][ T6154] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2566.936786][T15545] usb 1-1: Using ep0 maxpacket: 32 [ 2567.056723][ T6154] usb 2-1: Using ep0 maxpacket: 32 [ 2567.056785][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2567.073472][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2567.085520][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2567.095165][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2567.105510][T15545] usb 1-1: config 0 descriptor?? [ 2567.147068][T15545] hub 1-1:0.0: USB hub found [ 2567.176961][ T6154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2567.188116][ T6154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2567.200231][ T6154] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2567.209316][ T6154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2567.218283][ T6154] usb 2-1: config 0 descriptor?? [ 2567.278955][ T6154] hub 2-1:0.0: USB hub found [ 2567.316799][T15688] hub 4-1:0.0: activate --> -90 [ 2567.366763][T15545] hub 1-1:0.0: 1 port detected [ 2567.416794][T17658] hub 6-1:0.0: activate --> -90 [ 2567.466798][T17418] hub 3-1:0.0: activate --> -90 [ 2567.486732][ T6154] hub 2-1:0.0: 1 port detected [ 2567.517293][T26196] usb 4-1: USB disconnect, device number 92 [ 2567.546760][T15688] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2567.617273][ T9274] usb 6-1: USB disconnect, device number 96 [ 2567.636660][T17658] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2567.668347][T15688] usb 3-1: USB disconnect, device number 82 [ 2567.686723][T17418] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2567.848418][T15545] usb 1-1: USB disconnect, device number 2 09:41:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:55 executing program 4: 09:41:55 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:41:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2568.346645][ T6154] hub 2-1:0.0: activate --> -90 [ 2568.476582][T15688] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2568.484331][T17418] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2568.491944][T15691] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2568.549023][T30428] usb 2-1: USB disconnect, device number 108 [ 2568.576793][ T6154] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2568.736593][T15688] usb 4-1: Using ep0 maxpacket: 16 [ 2568.746630][T15691] usb 3-1: Using ep0 maxpacket: 16 [ 2568.746654][T17418] usb 6-1: Using ep0 maxpacket: 16 [ 2568.886760][T15691] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2568.900350][T17418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2568.913528][T15688] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2568.926967][T17418] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2568.936107][T17418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2568.957277][T15688] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2568.966335][T15688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2568.976119][T15691] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2568.985184][T15691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2568.995365][T17418] usb 6-1: config 0 descriptor?? [ 2569.003659][T15691] usb 3-1: config 0 descriptor?? [ 2569.009200][T15688] usb 4-1: config 0 descriptor?? 09:41:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:56 executing program 4: 09:41:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:41:56 executing program 4: [ 2569.060147][T15688] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2569.071494][T17418] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2569.081232][T15691] usbhid 3-1:0.0: couldn't find an input interrupt endpoint 09:41:56 executing program 4: 09:41:56 executing program 4: 09:41:56 executing program 4: r0 = socket(0x2, 0x3, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 09:41:56 executing program 4: syz_genetlink_get_family_id$ipvs(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, 0x0, &(0x7f0000000080)) [ 2569.258377][ T7623] usb 4-1: USB disconnect, device number 93 [ 2569.264358][T26196] usb 6-1: USB disconnect, device number 97 [ 2569.273130][T17658] usb 3-1: USB disconnect, device number 83 [ 2569.376523][ T9274] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 2569.384204][T15545] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2569.626564][T15545] usb 2-1: Using ep0 maxpacket: 16 [ 2569.631834][ T9274] usb 1-1: Using ep0 maxpacket: 16 [ 2569.746568][T15545] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2569.760412][ T9274] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2569.773774][T15545] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2569.792957][ T9274] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2569.805515][T15545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2569.817380][ T9274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2569.830951][T15545] usb 2-1: config 0 descriptor?? [ 2569.836817][T17658] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2569.845252][T26196] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2569.853428][ T7623] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2569.864088][ T9274] usb 1-1: config 0 descriptor?? [ 2569.908625][T15545] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2569.926452][ T9274] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2570.076437][T17658] usb 3-1: Using ep0 maxpacket: 32 [ 2570.108204][T17418] usb 2-1: USB disconnect, device number 109 [ 2570.119995][ T7623] usb 4-1: Using ep0 maxpacket: 32 [ 2570.122051][T15688] usb 1-1: USB disconnect, device number 3 [ 2570.125270][T26196] usb 6-1: Using ep0 maxpacket: 32 [ 2570.196459][T17658] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2570.207725][T17658] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2570.224118][T17658] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2570.236153][T17658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2570.247455][ T7623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2570.258623][T26196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2570.270274][ T7623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2570.280469][T17658] usb 3-1: config 0 descriptor?? [ 2570.288536][T26196] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2570.298323][ T7623] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2570.307619][T26196] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2570.328356][ T7623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2570.337883][T17658] hub 3-1:0.0: USB hub found [ 2570.343292][T26196] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2570.360717][ T7623] usb 4-1: config 0 descriptor?? [ 2570.366456][T26196] usb 6-1: config 0 descriptor?? [ 2570.396935][ T7623] hub 4-1:0.0: USB hub found [ 2570.413084][T26196] hub 6-1:0.0: USB hub found [ 2570.556450][T17658] hub 3-1:0.0: 1 port detected [ 2570.616445][ T7623] hub 4-1:0.0: 1 port detected [ 2570.621281][T26196] hub 6-1:0.0: 1 port detected [ 2570.696457][T17418] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2570.716576][T15688] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 2570.946361][T17418] usb 2-1: Using ep0 maxpacket: 32 [ 2570.976815][T15688] usb 1-1: Using ep0 maxpacket: 32 [ 2571.106480][T17418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2571.117903][T17418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2571.134193][T15688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2571.145236][T17418] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2571.160489][T15688] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2571.173468][T17418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2571.185217][T15688] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2571.198237][T15688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2571.207267][T17418] usb 2-1: config 0 descriptor?? [ 2571.221918][T15688] usb 1-1: config 0 descriptor?? [ 2571.246592][T17418] hub 2-1:0.0: USB hub found [ 2571.276956][T15688] hub 1-1:0.0: USB hub found [ 2571.426355][T26196] hub 3-1:0.0: activate --> -90 [ 2571.466321][T17418] hub 2-1:0.0: 1 port detected [ 2571.486317][ T7623] hub 6-1:0.0: activate --> -90 [ 2571.486323][T15688] hub 1-1:0.0: 1 port detected [ 2571.496161][T17658] hub 4-1:0.0: activate --> -90 [ 2571.627209][T15545] usb 3-1: USB disconnect, device number 84 [ 2571.646301][T26196] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2571.687382][T26196] usb 4-1: USB disconnect, device number 94 [ 2571.688593][ T6154] usb 6-1: USB disconnect, device number 98 [ 2571.696335][ T7623] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2571.705960][T17658] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2572.037052][T15688] usb 1-1: USB disconnect, device number 4 09:41:59 executing program 4: r0 = socket(0x2, 0x3, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 09:41:59 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:41:59 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:41:59 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2572.346250][T17418] hub 2-1:0.0: activate --> -90 [ 2572.446230][T15691] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2572.486248][ T6154] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2572.516173][T15545] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2572.549096][T30428] usb 2-1: USB disconnect, device number 110 [ 2572.567551][T17418] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2572.706187][T15691] usb 3-1: Using ep0 maxpacket: 16 [ 2572.726199][ T6154] usb 4-1: Using ep0 maxpacket: 16 [ 2572.756178][T15545] usb 6-1: Using ep0 maxpacket: 16 [ 2572.846447][T15691] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2572.860054][T15691] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2572.869571][ T6154] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2572.876831][T15545] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2572.882539][T15691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2572.903941][ T6154] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2572.911418][T15545] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2572.913230][ T6154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2572.931239][T15545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2572.931954][T15691] usb 3-1: config 0 descriptor?? [ 2572.946251][ T6154] usb 4-1: config 0 descriptor?? [ 2572.964324][T15545] usb 6-1: config 0 descriptor?? [ 2572.978479][T15691] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2572.989018][ T6154] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 09:42:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:42:00 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) select(0x40, &(0x7f0000000100), 0x0, &(0x7f00000001c0)={0x9}, &(0x7f0000000240)) 09:42:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2573.018033][T15545] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 09:42:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6}, @RTA_METRICS={0x4}, @RTA_MULTIPATH={0xc, 0x9, {0x9}}]}, 0x34}}, 0x0) 09:42:00 executing program 4: r0 = mq_open(&(0x7f0000000000)='[\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000180)=""/136, 0x88, 0x0, &(0x7f0000000080)) 09:42:00 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x410201, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 09:42:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x20008000) [ 2573.178358][T30428] usb 3-1: USB disconnect, device number 85 [ 2573.195455][T15545] usb 4-1: USB disconnect, device number 95 09:42:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x0) 09:42:00 executing program 4: r0 = socket(0x2, 0x3, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xfcc2, &(0x7f0000000100)={0x0}}, 0x0) [ 2573.219738][T15688] usb 6-1: USB disconnect, device number 99 [ 2573.275169][T32101] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 2573.366121][ T6154] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 2573.366198][T15691] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2573.616056][T15691] usb 2-1: Using ep0 maxpacket: 16 [ 2573.621472][ T6154] usb 1-1: Using ep0 maxpacket: 16 [ 2573.746091][T15691] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2573.756024][T15545] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2573.759007][ T6154] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2573.779688][T30428] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2573.787731][T15691] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2573.797009][T15688] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2573.806189][ T6154] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2573.815209][ T6154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2573.823338][T15691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2573.833635][T15691] usb 2-1: config 0 descriptor?? [ 2573.840712][ T6154] usb 1-1: config 0 descriptor?? [ 2573.878222][T15691] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2573.888565][ T6154] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2574.026054][T30428] usb 3-1: Using ep0 maxpacket: 32 [ 2574.026098][T15545] usb 4-1: Using ep0 maxpacket: 32 [ 2574.066118][T15688] usb 6-1: Using ep0 maxpacket: 32 [ 2574.077676][T17658] usb 2-1: USB disconnect, device number 111 [ 2574.081329][T15691] usb 1-1: USB disconnect, device number 5 [ 2574.146055][T30428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2574.157305][T30428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2574.170700][T30428] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2574.178045][T15545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2574.180063][T30428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2574.199731][T15545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2574.199988][T15688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2574.218317][T15545] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2574.222461][T15688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2574.237196][T15545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2574.241422][T30428] usb 3-1: config 0 descriptor?? [ 2574.257325][T15688] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2574.266691][T15688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2574.271164][T15545] usb 4-1: config 0 descriptor?? [ 2574.285835][T15688] usb 6-1: config 0 descriptor?? [ 2574.296273][T30428] hub 3-1:0.0: USB hub found [ 2574.346537][T15688] hub 6-1:0.0: USB hub found [ 2574.346586][T15545] hub 4-1:0.0: USB hub found [ 2574.515978][T30428] hub 3-1:0.0: 1 port detected [ 2574.555988][T15545] hub 4-1:0.0: 1 port detected [ 2574.566016][T15688] hub 6-1:0.0: 1 port detected [ 2574.665987][T15691] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 2574.675964][T17658] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2574.905965][T15691] usb 1-1: Using ep0 maxpacket: 32 [ 2574.946305][T17658] usb 2-1: Using ep0 maxpacket: 32 [ 2575.026264][T15691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2575.037317][T15691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2575.049996][T15691] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2575.059415][T15691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2575.070523][T15691] usb 1-1: config 0 descriptor?? [ 2575.076128][T17658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2575.087090][T17658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2575.099071][T17658] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2575.108355][T17658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2575.119947][T17658] usb 2-1: config 0 descriptor?? [ 2575.126982][T15691] hub 1-1:0.0: USB hub found [ 2575.176303][T17658] hub 2-1:0.0: USB hub found [ 2575.345898][T15691] hub 1-1:0.0: 1 port detected [ 2575.386004][T15688] hub 3-1:0.0: activate --> -90 [ 2575.405880][T17658] hub 2-1:0.0: 1 port detected [ 2575.415899][T15545] hub 4-1:0.0: activate --> -90 [ 2575.435924][T30428] hub 6-1:0.0: activate --> -90 [ 2575.587375][ T7623] usb 3-1: USB disconnect, device number 86 [ 2575.605876][T15688] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2575.621028][T17418] usb 4-1: USB disconnect, device number 96 [ 2575.635917][T15545] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2575.647615][T15545] usb 6-1: USB disconnect, device number 100 [ 2575.655813][T30428] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2575.866549][T15691] usb 1-1: USB disconnect, device number 6 09:42:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:42:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:42:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 2576.245814][T15545] hub 2-1:0.0: activate --> -90 [ 2576.375789][T15691] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2576.415761][T30428] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2576.447855][ T7623] usb 2-1: USB disconnect, device number 112 [ 2576.465743][T17418] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2576.465759][T15545] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2576.615715][T15691] usb 3-1: Using ep0 maxpacket: 16 [ 2576.655766][T30428] usb 4-1: Using ep0 maxpacket: 16 [ 2576.705732][T17418] usb 6-1: Using ep0 maxpacket: 16 [ 2576.737171][T15691] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2576.750383][T15691] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2576.759898][T15691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2576.769864][T15691] usb 3-1: config 0 descriptor?? [ 2576.775964][T30428] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2576.789513][T30428] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2576.808613][T15691] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2576.816219][T30428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2576.825894][T17418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2576.839350][T30428] usb 4-1: config 0 descriptor?? [ 2576.844837][T17418] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2576.854342][T17418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2576.865899][T17418] usb 6-1: config 0 descriptor?? [ 2576.877730][T30428] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 09:42:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:42:04 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, 0x0) unshare(0x2000400) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) signalfd(r0, &(0x7f0000000440), 0x8) 09:42:04 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2576.907608][T17418] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2577.007868][T17418] usb 3-1: USB disconnect, device number 87 [ 2577.077168][T30428] usb 4-1: USB disconnect, device number 97 [ 2577.107055][T15691] usb 6-1: USB disconnect, device number 101 [ 2577.245768][T15545] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 2577.253573][ T7623] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2577.505668][ T7623] usb 2-1: Using ep0 maxpacket: 16 [ 2577.525827][T15545] usb 1-1: Using ep0 maxpacket: 16 [ 2577.565617][T17418] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2577.575622][ T6154] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2577.635640][T30428] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2577.636286][ T7623] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2577.656939][T15545] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2577.670433][ T7623] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2577.679802][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2577.688988][ T7623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2577.697129][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2577.705748][ T7623] usb 2-1: config 0 descriptor?? [ 2577.713139][T15545] usb 1-1: config 0 descriptor?? 09:42:04 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x0, 0x0) unshare(0x2000400) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) signalfd(r0, &(0x7f0000000440), 0x8) [ 2577.748054][ T7623] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2577.767413][T15545] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2577.805607][T17418] usb 3-1: Using ep0 maxpacket: 32 [ 2577.819208][ T6154] usb 6-1: Using ep0 maxpacket: 32 [ 2577.875626][T30428] usb 4-1: Using ep0 maxpacket: 32 [ 2577.925771][T17418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2577.937853][ T6154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2577.948164][T15545] usb 2-1: USB disconnect, device number 113 [ 2577.950671][T17418] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2577.971195][ T6154] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2577.980102][ T7623] usb 1-1: USB disconnect, device number 7 [ 2578.003561][T17418] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2578.013164][T30428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2578.024226][ T6154] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2578.033987][T30428] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2578.044141][T17418] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.052476][ T6154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.061394][T30428] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2578.071056][T17418] usb 3-1: config 0 descriptor?? [ 2578.077700][T30428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.086173][ T6154] usb 6-1: config 0 descriptor?? [ 2578.105391][T30428] usb 4-1: config 0 descriptor?? [ 2578.115952][T17418] hub 3-1:0.0: USB hub found [ 2578.127298][ T6154] hub 6-1:0.0: USB hub found [ 2578.146016][T30428] hub 4-1:0.0: USB hub found [ 2578.335596][T17418] hub 3-1:0.0: 1 port detected [ 2578.348549][ T6154] hub 6-1:0.0: 1 port detected [ 2578.365633][T30428] hub 4-1:0.0: 1 port detected [ 2578.505873][T15545] usb 2-1: new high-speed USB device number 114 using dummy_hcd 09:42:05 executing program 4: r0 = socket(0x2, 0x3, 0x1) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) [ 2578.575564][ T7623] usb 1-1: new high-speed USB device number 8 using dummy_hcd 09:42:05 executing program 4: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0x2710}) 09:42:05 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) 09:42:05 executing program 4: syz_open_dev$mouse(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10) 09:42:05 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, 0x0) [ 2578.765517][T15545] usb 2-1: Using ep0 maxpacket: 32 [ 2578.825534][ T7623] usb 1-1: Using ep0 maxpacket: 32 [ 2578.915562][T15545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2578.927037][T15545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2578.939889][T15545] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2578.949216][T15545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2578.959385][T15545] usb 2-1: config 0 descriptor?? [ 2578.975490][ T7623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2578.988526][ T7623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2579.000537][T15545] hub 2-1:0.0: USB hub found [ 2579.010235][ T7623] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2579.022375][ T7623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2579.037651][ T7623] usb 1-1: config 0 descriptor?? [ 2579.085897][ T7623] hub 1-1:0.0: USB hub found [ 2579.205493][T15545] hub 2-1:0.0: 1 port detected [ 2579.205508][T30428] hub 3-1:0.0: activate --> -90 [ 2579.215453][ T6154] hub 6-1:0.0: activate --> -90 [ 2579.235771][T17418] hub 4-1:0.0: activate --> -90 [ 2579.295497][ T7623] hub 1-1:0.0: 1 port detected [ 2579.412507][T15691] usb 3-1: USB disconnect, device number 88 [ 2579.419733][T15688] usb 6-1: USB disconnect, device number 102 [ 2579.430011][T30428] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2579.437062][ T6154] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2579.444731][T17658] usb 4-1: USB disconnect, device number 98 [ 2579.455770][T17418] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2579.816262][ T7623] usb 1-1: USB disconnect, device number 8 09:42:07 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:42:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:07 executing program 4: socketpair(0x25, 0x1, 0xfd7e, &(0x7f00000017c0)) [ 2580.095400][T15545] hub 2-1:0.0: activate --> -90 [ 2580.195422][T15691] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2580.255403][T17658] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2580.298051][ T7623] usb 2-1: USB disconnect, device number 114 [ 2580.320517][T15545] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2580.435387][T15691] usb 3-1: Using ep0 maxpacket: 16 [ 2580.545361][T17658] usb 4-1: Using ep0 maxpacket: 16 [ 2580.558549][T15691] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2580.571693][T15691] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2580.581079][T15691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2580.591683][T15691] usb 3-1: config 0 descriptor?? [ 2580.637563][T15691] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2580.675375][T17658] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2580.688760][T17658] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2580.698097][T17658] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2580.708147][T17658] usb 4-1: config 0 descriptor?? 09:42:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:42:07 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:42:07 executing program 4: syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 09:42:07 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2580.757565][T17658] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2580.838107][T17658] usb 3-1: USB disconnect, device number 89 [ 2580.956998][T15688] usb 4-1: USB disconnect, device number 99 [ 2581.095291][T15691] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 2581.109227][T17418] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2581.145228][ T9274] usb 2-1: new high-speed USB device number 115 using dummy_hcd 09:42:08 executing program 4: 09:42:08 executing program 4: [ 2581.335215][T15691] usb 1-1: Using ep0 maxpacket: 16 [ 2581.355271][T17418] usb 6-1: Using ep0 maxpacket: 16 09:42:08 executing program 4: 09:42:08 executing program 4: [ 2581.395925][ T9274] usb 2-1: Using ep0 maxpacket: 16 09:42:08 executing program 4: [ 2581.437265][T17658] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2581.455336][T15691] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2581.475263][T17418] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2581.488713][T15691] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2581.499811][T17418] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2581.510265][T15691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.518405][T15688] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2581.525445][ T9274] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2581.526346][T17418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.548278][ T9274] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2581.550063][T15691] usb 1-1: config 0 descriptor?? [ 2581.566295][T17418] usb 6-1: config 0 descriptor?? [ 2581.577641][ T9274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.597345][T15691] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2581.607071][T17418] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2581.607698][ T9274] usb 2-1: config 0 descriptor?? [ 2581.657192][ T9274] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2581.695233][T17658] usb 3-1: Using ep0 maxpacket: 32 [ 2581.800006][ T9274] usb 1-1: USB disconnect, device number 9 [ 2581.808250][T15545] usb 6-1: USB disconnect, device number 103 [ 2581.815277][T15688] usb 4-1: Using ep0 maxpacket: 32 [ 2581.845318][T17658] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2581.856884][T17658] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2581.859128][T17418] usb 2-1: USB disconnect, device number 115 [ 2581.875840][T17658] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2581.894999][T17658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.904565][T17658] usb 3-1: config 0 descriptor?? [ 2581.935391][T15688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2581.947341][T15688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2581.960266][T15688] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2581.967852][T17658] hub 3-1:0.0: USB hub found [ 2581.969549][T15688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.990016][T15688] usb 4-1: config 0 descriptor?? [ 2582.035542][T15688] hub 4-1:0.0: USB hub found [ 2582.195207][T17658] hub 3-1:0.0: 1 port detected [ 2582.255186][T15688] hub 4-1:0.0: 1 port detected [ 2582.405353][T15545] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2582.413367][ T9274] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 2582.445212][T17418] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2582.655130][T15545] usb 6-1: Using ep0 maxpacket: 32 [ 2582.675320][ T9274] usb 1-1: Using ep0 maxpacket: 32 [ 2582.686491][T17418] usb 2-1: Using ep0 maxpacket: 32 [ 2582.785431][T15545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2582.796895][T15545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2582.805118][T17418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2582.815704][ T9274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2582.819843][T17418] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2582.829055][T15545] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2582.841944][T17418] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2582.853393][ T9274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2582.859519][T17418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2582.867386][T15545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2582.884693][ T9274] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2582.888517][T17418] usb 2-1: config 0 descriptor?? [ 2582.894884][T15545] usb 6-1: config 0 descriptor?? [ 2582.905300][ T9274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2582.924648][ T9274] usb 1-1: config 0 descriptor?? [ 2582.965927][T17418] hub 2-1:0.0: USB hub found [ 2582.975560][ T9274] hub 1-1:0.0: USB hub found [ 2582.980803][T15545] hub 6-1:0.0: USB hub found [ 2583.065195][ T7623] hub 3-1:0.0: activate --> -90 [ 2583.185118][T15545] hub 6-1:0.0: 1 port detected [ 2583.185124][T15688] hub 4-1:0.0: activate --> -90 [ 2583.185260][T17418] hub 2-1:0.0: 1 port detected [ 2583.190314][ T9274] hub 1-1:0.0: 1 port detected [ 2583.266312][T17658] usb 3-1: USB disconnect, device number 90 [ 2583.285067][ T7623] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2583.386117][ T7623] usb 4-1: USB disconnect, device number 100 [ 2583.405046][T15688] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 2583.717702][ T9274] usb 1-1: USB disconnect, device number 10 09:42:10 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:11 executing program 4: [ 2584.054966][T15688] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2584.054999][T15545] hub 6-1:0.0: activate --> -90 [ 2584.064926][T17418] hub 2-1:0.0: activate --> -90 [ 2584.174926][T15691] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2584.263545][ T9274] usb 6-1: USB disconnect, device number 104 [ 2584.270189][T15545] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2584.278927][ T6154] usb 2-1: USB disconnect, device number 116 [ 2584.295976][T17418] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2584.302955][T15688] usb 3-1: Using ep0 maxpacket: 16 [ 2584.424963][T15688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2584.438470][T15691] usb 4-1: Using ep0 maxpacket: 16 [ 2584.443982][T15688] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2584.456167][T15688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2584.465809][T15688] usb 3-1: config 0 descriptor?? [ 2584.507199][T15688] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2584.554995][T15691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2584.568132][T15691] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2584.577398][T15691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2584.589447][T15691] usb 4-1: config 0 descriptor?? [ 2584.637115][T15691] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2584.706164][T15691] usb 3-1: USB disconnect, device number 91 09:42:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:11 executing program 4: 09:42:11 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:42:11 executing program 4: 09:42:12 executing program 4: [ 2584.837716][T15545] usb 4-1: USB disconnect, device number 101 09:42:12 executing program 4: 09:42:12 executing program 4: 09:42:12 executing program 4: [ 2585.084866][ T6154] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2585.098242][T30428] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 2585.105850][T15688] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2585.194877][ T9274] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2585.324873][ T6154] usb 2-1: Using ep0 maxpacket: 16 [ 2585.345065][T15688] usb 6-1: Using ep0 maxpacket: 16 [ 2585.350711][T30428] usb 1-1: Using ep0 maxpacket: 16 [ 2585.444836][T15545] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2585.445192][ T6154] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2585.466122][T15688] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2585.479258][ T6154] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2585.484800][ T9274] usb 3-1: Using ep0 maxpacket: 32 [ 2585.488867][T30428] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2585.506250][T15688] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2585.515395][ T6154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2585.523939][T15688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2585.534032][ T6154] usb 2-1: config 0 descriptor?? [ 2585.539113][T30428] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2585.550254][T15688] usb 6-1: config 0 descriptor?? [ 2585.555269][T30428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2585.575156][T30428] usb 1-1: config 0 descriptor?? [ 2585.586941][ T6154] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2585.614960][ T9274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2585.616711][T15688] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2585.629135][ T9274] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2585.635445][T30428] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2585.667442][ T9274] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2585.680116][ T9274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2585.692222][ T9274] usb 3-1: config 0 descriptor?? [ 2585.704781][T15545] usb 4-1: Using ep0 maxpacket: 32 [ 2585.745361][ T9274] hub 3-1:0.0: USB hub found [ 2585.787028][T17658] usb 2-1: USB disconnect, device number 117 [ 2585.817849][T15688] usb 6-1: USB disconnect, device number 105 [ 2585.840016][ T7623] usb 1-1: USB disconnect, device number 11 [ 2585.846326][T15545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2585.858924][T15545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2585.878390][T15545] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2585.891569][T15545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2585.903746][T15545] usb 4-1: config 0 descriptor?? [ 2585.957097][T15545] hub 4-1:0.0: USB hub found [ 2585.966200][ T9274] hub 3-1:0.0: 1 port detected [ 2586.164746][T15545] hub 4-1:0.0: 1 port detected [ 2586.374702][T15688] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 2586.394900][T17658] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2586.444741][ T7623] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2586.614754][T15688] usb 6-1: Using ep0 maxpacket: 32 [ 2586.634796][T17658] usb 2-1: Using ep0 maxpacket: 32 [ 2586.704642][ T7623] usb 1-1: Using ep0 maxpacket: 32 [ 2586.734884][T15688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2586.746511][T15688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2586.762563][T15688] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2586.765132][T17658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2586.778623][T15688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2586.784283][T17658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2586.801190][T17658] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2586.803693][T15688] usb 6-1: config 0 descriptor?? [ 2586.814926][T17658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2586.833217][T17658] usb 2-1: config 0 descriptor?? [ 2586.839167][ T9274] hub 3-1:0.0: activate --> -90 [ 2586.855990][ T7623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2586.865093][T15688] hub 6-1:0.0: USB hub found [ 2586.868332][ T7623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2586.896556][T17658] hub 2-1:0.0: USB hub found [ 2586.904895][ T7623] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2586.917031][ T7623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2586.935082][ T7623] usb 1-1: config 0 descriptor?? [ 2586.985081][ T7623] hub 1-1:0.0: USB hub found [ 2587.034775][T15545] hub 4-1:0.0: activate --> -90 [ 2587.039515][ T6154] usb 3-1: USB disconnect, device number 92 [ 2587.055694][ T9274] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2587.076321][T15688] hub 6-1:0.0: 1 port detected [ 2587.104632][T17658] hub 2-1:0.0: 1 port detected [ 2587.214664][ T7623] hub 1-1:0.0: 1 port detected [ 2587.236643][T30428] usb 4-1: USB disconnect, device number 102 [ 2587.254654][T15545] hub 4-1:0.0: hub_ext_port_status failed (err = -71) 09:42:14 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:14 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:14 executing program 4: [ 2587.759180][ T7623] usb 1-1: USB disconnect, device number 12 [ 2587.824538][T17658] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2587.944559][T15688] hub 6-1:0.0: activate --> -90 [ 2587.964561][T15545] hub 2-1:0.0: activate --> -90 [ 2588.054517][T30428] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2588.094548][T17658] usb 3-1: Using ep0 maxpacket: 16 [ 2588.147914][ T6154] usb 6-1: USB disconnect, device number 106 [ 2588.165732][T15688] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2588.173651][ T7623] usb 2-1: USB disconnect, device number 118 [ 2588.186020][T15545] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2588.224579][T17658] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2588.237421][T17658] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2588.254649][T17658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2588.263330][T17658] usb 3-1: config 0 descriptor?? [ 2588.294503][T30428] usb 4-1: Using ep0 maxpacket: 16 [ 2588.307712][T17658] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2588.414570][T30428] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2588.427579][T30428] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2588.442362][T30428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2588.453704][T30428] usb 4-1: config 0 descriptor?? [ 2588.496499][T30428] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2588.516633][T30428] usb 3-1: USB disconnect, device number 93 09:42:15 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:15 executing program 4: 09:42:15 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:15 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:15 executing program 4: [ 2588.705777][ T7623] usb 4-1: USB disconnect, device number 103 09:42:15 executing program 4: 09:42:15 executing program 4: 09:42:15 executing program 4: 09:42:15 executing program 4: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x25a7, &(0x7f0000000000), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 2588.974416][T15688] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2588.986011][T30428] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2588.994538][ T6154] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2589.004506][T15691] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2589.214404][T15688] usb 6-1: Using ep0 maxpacket: 16 [ 2589.224580][T30428] usb 3-1: Using ep0 maxpacket: 32 [ 2589.234712][ T6154] usb 1-1: Using ep0 maxpacket: 16 [ 2589.244661][T15691] usb 2-1: Using ep0 maxpacket: 16 [ 2589.324391][ T7623] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2589.337668][T15688] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2589.351934][T30428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2589.363000][ T6154] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2589.375805][T15691] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2589.388580][T15688] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2589.397652][T30428] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2589.408388][T15691] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2589.417864][ T6154] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2589.426952][T15688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2589.435146][T30428] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2589.444162][T30428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2589.452153][ T6154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2589.461090][T15691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2589.469756][T15688] usb 6-1: config 0 descriptor?? [ 2589.481705][ T6154] usb 1-1: config 0 descriptor?? [ 2589.486952][T15691] usb 2-1: config 0 descriptor?? [ 2589.492279][T30428] usb 3-1: config 0 descriptor?? [ 2589.516310][T15688] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2589.526515][T15691] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2589.542406][ T6154] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2589.550119][T30428] hub 3-1:0.0: USB hub found [ 2589.575371][ T7623] usb 4-1: Using ep0 maxpacket: 32 [ 2589.704508][ T7623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2589.716127][T15691] usb 6-1: USB disconnect, device number 107 [ 2589.717180][ T7623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2589.750122][ T7623] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2589.755980][T30428] hub 3-1:0.0: 1 port detected [ 2589.759526][ T7623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2589.781010][ T7623] usb 4-1: config 0 descriptor?? [ 2589.791884][T17658] usb 2-1: USB disconnect, device number 119 [ 2589.799557][T15545] usb 1-1: USB disconnect, device number 13 [ 2589.834632][ T7623] hub 4-1:0.0: USB hub found [ 2590.064326][ T7623] hub 4-1:0.0: 1 port detected [ 2590.274310][T15691] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 2590.334272][T17658] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2590.342042][T15545] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2590.514318][T15691] usb 6-1: Using ep0 maxpacket: 32 [ 2590.604320][T15545] usb 1-1: Using ep0 maxpacket: 32 [ 2590.609493][T17658] usb 2-1: Using ep0 maxpacket: 32 [ 2590.625724][T30428] hub 3-1:0.0: activate --> -90 [ 2590.634640][T15691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2590.645741][T15691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2590.658837][T15691] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2590.668275][T15691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2590.677251][T15691] usb 6-1: config 0 descriptor?? [ 2590.716743][T15691] hub 6-1:0.0: USB hub found [ 2590.744508][T17658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2590.755529][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2590.766512][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2590.785071][T17658] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2590.794955][T17658] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2590.804001][T17658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2590.812007][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2590.821054][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2590.832310][T17658] usb 2-1: config 0 descriptor?? [ 2590.833519][ T6154] usb 3-1: USB disconnect, device number 94 [ 2590.841053][T15545] usb 1-1: config 0 descriptor?? [ 2590.845739][T30428] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2590.894625][T15545] hub 1-1:0.0: USB hub found [ 2590.899558][T17658] hub 2-1:0.0: USB hub found [ 2590.934226][T15691] hub 6-1:0.0: 1 port detected [ 2590.934280][ T7623] hub 4-1:0.0: activate --> -90 [ 2591.104279][T17658] hub 2-1:0.0: 1 port detected [ 2591.109071][T15545] hub 1-1:0.0: 1 port detected [ 2591.135211][ T2732] usb 4-1: USB disconnect, device number 104 [ 2591.154229][ T7623] hub 4-1:0.0: hub_ext_port_status failed (err = -71) 09:42:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:18 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:18 executing program 4: socket(0x0, 0x0, 0x10001) openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000540)=""/229, 0xe5) [ 2591.634168][ T7623] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2591.648706][T15545] usb 1-1: USB disconnect, device number 14 [ 2591.794140][ T6154] hub 6-1:0.0: activate --> -90 [ 2591.904097][ T7623] usb 3-1: Using ep0 maxpacket: 16 [ 2591.954137][ T9274] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2591.974215][T17658] hub 2-1:0.0: activate --> -90 [ 2591.996101][T15545] usb 6-1: USB disconnect, device number 108 [ 2592.015662][ T6154] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2592.034291][ T7623] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2592.047161][ T7623] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2592.056749][ T7623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.067550][ T7623] usb 3-1: config 0 descriptor?? [ 2592.116200][ T7623] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2592.174842][ T7623] usb 2-1: USB disconnect, device number 120 [ 2592.186566][T17658] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2592.194825][ T9274] usb 4-1: Using ep0 maxpacket: 16 [ 2592.325409][T15545] usb 3-1: USB disconnect, device number 95 [ 2592.354077][ T9274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2592.367016][ T9274] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2592.378966][ T9274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2592.388967][ T9274] usb 4-1: config 0 descriptor?? [ 2592.447817][ T9274] usbhid 4-1:0.0: couldn't find an input interrupt endpoint 09:42:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:19 executing program 4: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000480)) 09:42:19 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2592.645426][ T9274] usb 4-1: USB disconnect, device number 105 09:42:19 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x30801, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000003800)='TIPCv2\x00') 09:42:19 executing program 4: timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 09:42:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 09:42:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x185, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 09:42:19 executing program 4: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @datasec={0x0, 0x1, 0x0, 0xf, 0x2, [{}], "d0c3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "fd"}, @datasec={0x0, 0x2, 0x0, 0xf, 0x1, [{}, {}], "1d"}, @enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '\x00'}]}}, 0x0, 0x13a}, 0x20) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 2592.894058][T15545] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2592.963987][T15691] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2592.984047][ T7623] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2592.993993][ T6154] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2593.154014][T15545] usb 3-1: Using ep0 maxpacket: 32 [ 2593.193986][ T9274] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2593.203964][T15691] usb 1-1: Using ep0 maxpacket: 16 [ 2593.234058][ T7623] usb 6-1: Using ep0 maxpacket: 16 [ 2593.234063][ T6154] usb 2-1: Using ep0 maxpacket: 16 [ 2593.294021][T15545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2593.305087][T15545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2593.320538][T15545] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2593.324652][T15691] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2593.336442][T15545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2593.344278][T15691] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2593.358742][T15545] usb 3-1: config 0 descriptor?? [ 2593.362424][ T6154] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2593.378988][ T6154] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2593.388393][T15691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2593.395739][ T7623] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2593.398277][ T6154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2593.419114][T15691] usb 1-1: config 0 descriptor?? [ 2593.426600][ T7623] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2593.427249][ T6154] usb 2-1: config 0 descriptor?? [ 2593.437110][T15545] hub 3-1:0.0: USB hub found [ 2593.468378][T15691] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2593.474074][ T9274] usb 4-1: Using ep0 maxpacket: 32 [ 2593.478445][ T6154] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2593.483989][ T7623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2593.530353][ T7623] usb 6-1: config 0 descriptor?? [ 2593.596173][ T7623] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2593.613953][ T9274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2593.625387][ T9274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2593.638303][ T9274] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2593.647395][ T9274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2593.655424][T15545] hub 3-1:0.0: 1 port detected [ 2593.661041][ T9274] usb 4-1: config 0 descriptor?? [ 2593.670351][ T6154] usb 1-1: USB disconnect, device number 15 [ 2593.687592][T15691] usb 2-1: USB disconnect, device number 121 [ 2593.725414][ T9274] hub 4-1:0.0: USB hub found [ 2593.796243][ T7623] usb 6-1: USB disconnect, device number 109 [ 2593.933936][ T9274] hub 4-1:0.0: 1 port detected [ 2594.243860][T15691] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2594.251562][ T6154] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 2594.373874][ T7623] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2594.493842][T15691] usb 2-1: Using ep0 maxpacket: 32 [ 2594.499119][ T6154] usb 1-1: Using ep0 maxpacket: 32 [ 2594.513832][T17658] hub 3-1:0.0: activate --> -90 [ 2594.613848][T15691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2594.624809][ T6154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2594.633802][ T7623] usb 6-1: Using ep0 maxpacket: 32 [ 2594.635823][T15691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2594.650913][ T6154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2594.661780][ T6154] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2594.670924][T15691] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2594.680090][ T6154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2594.688140][T15691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2594.697787][ T6154] usb 1-1: config 0 descriptor?? [ 2594.703138][T15691] usb 2-1: config 0 descriptor?? [ 2594.720695][ T2732] usb 3-1: USB disconnect, device number 96 [ 2594.734163][ T6154] hub 1-1:0.0: USB hub found [ 2594.735475][T17658] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 2594.744167][T15691] hub 2-1:0.0: USB hub found [ 2594.765228][ T7623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2594.781912][ T7623] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2594.796653][ T7623] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2594.807366][ T9274] hub 4-1:0.0: activate --> -90 [ 2594.814287][ T7623] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2594.824561][ T7623] usb 6-1: config 0 descriptor?? [ 2594.874254][ T7623] hub 6-1:0.0: USB hub found [ 2594.953784][ T6154] hub 1-1:0.0: 1 port detected [ 2594.970088][T15691] hub 2-1:0.0: 1 port detected [ 2595.103786][ T7623] hub 6-1:0.0: 1 port detected 09:42:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2595.214206][ T2732] usb 4-1: USB disconnect, device number 106 [ 2595.513745][T15688] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2595.596065][ T2732] usb 1-1: USB disconnect, device number 16 [ 2595.606913][ T6154] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 09:42:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="4c4ced391180"}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) [ 2595.753700][T15688] usb 3-1: Using ep0 maxpacket: 16 [ 2595.813780][T15691] hub 2-1:0.0: activate --> -90 [ 2595.873709][T15688] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2595.886537][T15688] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2595.895607][T15688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2595.907302][T15688] usb 3-1: config 0 descriptor?? [ 2595.955835][T15688] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2595.983850][ T7623] hub 6-1:0.0: activate --> -90 [ 2596.016106][T15688] usb 2-1: USB disconnect, device number 122 [ 2596.030452][ T9274] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2596.033674][T15691] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 2596.155421][T17658] usb 3-1: USB disconnect, device number 97 [ 2596.185979][T15545] usb 6-1: USB disconnect, device number 110 [ 2596.203662][ T7623] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2596.303687][ T9274] usb 4-1: Using ep0 maxpacket: 16 [ 2596.423651][ T9274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2596.436479][ T9274] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2596.451381][ T9274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2596.463182][ T9274] usb 4-1: config 0 descriptor?? 09:42:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:23 executing program 4: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) 09:42:23 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2596.515890][ T9274] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2596.633665][T17658] usb 3-1: new high-speed USB device number 98 using dummy_hcd 09:42:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2596.715045][T15691] usb 4-1: USB disconnect, device number 107 [ 2596.813609][ T9274] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 2596.833595][T15688] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2596.893582][T17658] usb 3-1: Using ep0 maxpacket: 32 [ 2596.983596][T15545] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2597.023627][T17658] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2597.036065][T17658] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2597.048678][T17658] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2597.059402][T17658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2597.071126][T17658] usb 3-1: config 0 descriptor?? [ 2597.073543][T15688] usb 2-1: Using ep0 maxpacket: 16 [ 2597.077369][ T9274] usb 1-1: Using ep0 maxpacket: 16 [ 2597.124022][T17658] hub 3-1:0.0: USB hub found [ 2597.183542][T15691] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2597.195029][T15688] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2597.207906][T15688] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2597.218163][T15688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2597.224324][ T9274] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2597.240666][T15688] usb 2-1: config 0 descriptor?? [ 2597.241714][T15545] usb 6-1: Using ep0 maxpacket: 16 [ 2597.252033][ T9274] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2597.261597][ T9274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2597.272823][ T9274] usb 1-1: config 0 descriptor?? [ 2597.285661][T15688] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2597.325684][ T9274] usbhid 1-1:0.0: couldn't find an input interrupt endpoint 09:42:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff54, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) [ 2597.343613][T17658] hub 3-1:0.0: 1 port detected 09:42:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff54, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff54, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) [ 2597.393626][T15545] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2597.406561][T15545] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2597.418483][T15545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2597.424186][T15691] usb 4-1: Using ep0 maxpacket: 32 [ 2597.427262][T15545] usb 6-1: config 0 descriptor?? 09:42:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff54, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:24 executing program 4: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff54, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) [ 2597.486280][ T9274] usb 2-1: USB disconnect, device number 123 [ 2597.504112][T15545] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2597.526354][T15545] usb 1-1: USB disconnect, device number 17 [ 2597.544689][T15691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2597.572857][T15691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2597.582774][T15691] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2597.591809][T15691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2597.602951][T15691] usb 4-1: config 0 descriptor?? [ 2597.643942][T15691] hub 4-1:0.0: USB hub found [ 2597.696120][ T2732] usb 6-1: USB disconnect, device number 111 [ 2597.863496][T15691] hub 4-1:0.0: 1 port detected [ 2598.113763][ T9274] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2598.121501][T15545] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2598.213450][T17658] hub 3-1:0.0: activate --> -90 [ 2598.283437][ T2732] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2598.373488][ T9274] usb 2-1: Using ep0 maxpacket: 32 [ 2598.383429][T15545] usb 1-1: Using ep0 maxpacket: 32 [ 2598.513718][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2598.524746][ T9274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2598.535616][ T9274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2598.554375][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2598.564201][ T2732] usb 6-1: Using ep0 maxpacket: 32 [ 2598.569463][ T9274] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2598.585566][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2598.594759][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2598.602931][ T9274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2598.612709][T15545] usb 1-1: config 0 descriptor?? [ 2598.620883][ T9274] usb 2-1: config 0 descriptor?? [ 2598.634520][ T7623] usb 3-1: USB disconnect, device number 98 [ 2598.653928][T15545] hub 1-1:0.0: USB hub found [ 2598.664337][ T9274] hub 2-1:0.0: USB hub found [ 2598.703623][ T2732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2598.714674][ T2732] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2598.724619][ T2732] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2598.733428][T15688] hub 4-1:0.0: activate --> -90 [ 2598.733895][ T2732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2598.748996][ T2732] usb 6-1: config 0 descriptor?? [ 2598.793797][ T2732] hub 6-1:0.0: USB hub found [ 2598.883399][ T9274] hub 2-1:0.0: 1 port detected [ 2598.888220][T15545] hub 1-1:0.0: 1 port detected [ 2599.003407][ T2732] hub 6-1:0.0: 1 port detected 09:42:26 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2599.153692][T15691] usb 4-1: USB disconnect, device number 108 [ 2599.423355][ T6154] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2599.515635][ T2732] usb 1-1: USB disconnect, device number 18 [ 2599.533333][T15545] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 09:42:26 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:26 executing program 4: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff54, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) [ 2599.663288][ T6154] usb 3-1: Using ep0 maxpacket: 16 [ 2599.743319][ T9274] hub 2-1:0.0: activate --> -90 [ 2599.783565][ T6154] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2599.796406][ T6154] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2599.808466][ T6154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2599.820109][ T6154] usb 3-1: config 0 descriptor?? [ 2599.865409][ T6154] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2599.893298][ T7623] hub 6-1:0.0: activate --> -90 [ 2599.963309][T15688] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2600.064691][ T2732] usb 3-1: USB disconnect, device number 99 [ 2600.094284][ T6154] usb 6-1: USB disconnect, device number 112 [ 2600.114483][ T7623] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 2600.154824][T30428] usb 2-1: USB disconnect, device number 124 [ 2600.203249][T15688] usb 4-1: Using ep0 maxpacket: 16 [ 2600.323362][T15688] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2600.336279][T15688] usb 4-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2600.345409][T15688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2600.354993][T15688] usb 4-1: config 0 descriptor?? [ 2600.395068][T15688] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2600.543193][ T7623] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2600.596017][T15688] usb 4-1: USB disconnect, device number 109 09:42:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:27 executing program 4: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff54, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:27 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:27 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:27 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff54, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:27 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff54, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:27 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff54, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 09:42:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) [ 2600.793161][ T7623] usb 3-1: Using ep0 maxpacket: 32 [ 2600.933267][ T7623] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2600.944305][ T7623] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2600.953146][ T6154] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2600.964282][ T9274] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2600.971980][ T2732] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2600.979791][ T7623] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2600.989070][ T7623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2600.997850][ T7623] usb 3-1: config 0 descriptor?? [ 2601.045279][ T7623] hub 3-1:0.0: USB hub found [ 2601.163145][T15688] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2601.193175][ T6154] usb 1-1: Using ep0 maxpacket: 16 [ 2601.223285][ T9274] usb 6-1: Using ep0 maxpacket: 16 [ 2601.253124][ T2732] usb 2-1: Using ep0 maxpacket: 16 [ 2601.263160][ T7623] hub 3-1:0.0: 1 port detected [ 2601.313157][ T6154] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2601.327406][ T6154] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2601.342710][ T6154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2601.354728][ T6154] usb 1-1: config 0 descriptor?? [ 2601.356905][ T9274] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2601.372762][ T9274] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2601.383107][ T2732] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2601.395074][ T6154] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2601.396048][ T9274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2601.403232][T15688] usb 4-1: Using ep0 maxpacket: 32 [ 2601.411333][ T2732] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2601.426315][ T9274] usb 6-1: config 0 descriptor?? [ 2601.441621][ T2732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2601.457765][ T2732] usb 2-1: config 0 descriptor?? [ 2601.475178][ T9274] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2601.515547][ T2732] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2601.553156][T15688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2601.565803][T15688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2601.581586][T15688] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2601.595433][T15688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2601.596472][ T2732] usb 1-1: USB disconnect, device number 19 [ 2601.621955][T15688] usb 4-1: config 0 descriptor?? [ 2601.663587][T15688] hub 4-1:0.0: USB hub found [ 2601.682569][T30428] usb 6-1: USB disconnect, device number 113 [ 2601.715111][ T6154] usb 2-1: USB disconnect, device number 125 [ 2601.884312][T15688] hub 4-1:0.0: 1 port detected [ 2602.123104][ T7623] hub 3-1:0.0: activate --> -90 [ 2602.163067][ T2732] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2602.193033][ T9274] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2602.233159][T30428] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2602.413024][ T2732] usb 1-1: Using ep0 maxpacket: 32 [ 2602.443002][ T9274] usb 2-1: Using ep0 maxpacket: 32 [ 2602.473050][T30428] usb 6-1: Using ep0 maxpacket: 32 [ 2602.543397][T15545] usb 3-1: USB disconnect, device number 100 [ 2602.553657][ T2732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2602.565620][ T2732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2602.576647][ T2732] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2602.585925][ T2732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.593190][T30428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2602.600194][ T2732] usb 1-1: config 0 descriptor?? [ 2602.609978][ T9274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2602.613220][T30428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2602.629926][ T9274] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2602.645174][T30428] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2602.652202][ T9274] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2602.654469][T30428] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.663842][ T2732] hub 1-1:0.0: USB hub found [ 2602.678780][T30428] usb 6-1: config 0 descriptor?? [ 2602.692352][ T9274] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2602.708584][ T9274] usb 2-1: config 0 descriptor?? [ 2602.724554][T30428] hub 6-1:0.0: USB hub found [ 2602.753552][T15688] hub 4-1:0.0: activate --> -90 [ 2602.763371][ T9274] hub 2-1:0.0: USB hub found [ 2602.882991][ T2732] hub 1-1:0.0: 1 port detected [ 2602.942987][T30428] hub 6-1:0.0: 1 port detected [ 2602.972998][ T9274] hub 2-1:0.0: 1 port detected 09:42:30 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2603.173690][T17658] usb 4-1: USB disconnect, device number 110 [ 2603.332937][T15545] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2603.526006][T15688] usb 1-1: USB disconnect, device number 20 [ 2603.536934][ T9274] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 2603.592876][T15545] usb 3-1: Using ep0 maxpacket: 16 09:42:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 09:42:30 executing program 3: perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = creat(0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x26, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000080), 0x4) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = gettid() clone(0x6cbaa500, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000180)={0x0}) wait4(0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) [ 2603.714859][ T903] IPVS: ftp: loaded support on port[0] = 21 [ 2603.728016][T15545] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2603.747282][ T904] IPVS: ftp: loaded support on port[0] = 21 [ 2603.758769][T15545] usb 3-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2603.775849][T15545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2603.789105][T15545] usb 3-1: config 0 descriptor?? [ 2603.813690][T30428] hub 6-1:0.0: activate --> -90 [ 2603.837026][T15545] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2603.844805][T17658] hub 2-1:0.0: activate --> -90 [ 2604.037291][ T2732] usb 3-1: USB disconnect, device number 101 [ 2604.233134][ T6154] usb 6-1: USB disconnect, device number 114 [ 2604.266609][T30428] usb 2-1: USB disconnect, device number 126 [ 2604.632778][ T2732] usb 3-1: new high-speed USB device number 102 using dummy_hcd 09:42:31 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:31 executing program 3: bpf$MAP_LOOKUP_BATCH(0x1c, 0x0, 0x0) 09:42:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:31 executing program 3: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)) 09:42:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x39, 0x0, &(0x7f0000002300)) 09:42:32 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f0000000080)=""/248, 0x26, 0xf8, 0x1}, 0x20) [ 2604.892777][ T2732] usb 3-1: Using ep0 maxpacket: 32 [ 2605.042864][ T2732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2605.055349][ T2732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2605.074438][T17658] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2605.082138][ T2732] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2605.082714][T15691] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2605.099947][ T2732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2605.100050][T30428] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2605.120174][ T2732] usb 3-1: config 0 descriptor?? [ 2605.173081][ T2732] hub 3-1:0.0: USB hub found [ 2605.342722][T17658] usb 6-1: Using ep0 maxpacket: 16 [ 2605.372695][T30428] usb 1-1: Using ep0 maxpacket: 16 [ 2605.377894][T15691] usb 2-1: Using ep0 maxpacket: 16 [ 2605.394140][ T2732] hub 3-1:0.0: 1 port detected [ 2605.492844][T17658] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2605.502712][T30428] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2605.506008][T17658] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2605.518596][T15691] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2605.527818][T17658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2605.554243][T17658] usb 6-1: config 0 descriptor?? [ 2605.555550][T30428] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2605.569784][T15691] usb 2-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2605.579127][T30428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2605.590310][T15691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2605.600270][T30428] usb 1-1: config 0 descriptor?? [ 2605.604680][T17658] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2605.614164][T15691] usb 2-1: config 0 descriptor?? [ 2605.646238][T30428] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2605.655694][T15691] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2605.804980][T17658] usb 6-1: USB disconnect, device number 115 [ 2605.845458][ T2732] usb 1-1: USB disconnect, device number 21 [ 2605.859124][T15691] usb 2-1: USB disconnect, device number 127 [ 2606.272669][ T9274] hub 3-1:0.0: activate --> -90 [ 2606.289379][T17658] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 2606.413860][T15691] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2606.432605][ T2732] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2606.542618][T17658] usb 6-1: Using ep0 maxpacket: 32 [ 2606.652650][T15691] usb 2-1: Using ep0 maxpacket: 32 [ 2606.673149][T17658] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2606.684016][ T2732] usb 1-1: Using ep0 maxpacket: 32 [ 2606.689133][T17658] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2606.692976][ T3324] usb 3-1: USB disconnect, device number 102 [ 2606.710125][T17658] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2606.725568][T17658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2606.739541][T17658] usb 6-1: config 0 descriptor?? [ 2606.782600][T15691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2606.793570][T15691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2606.803920][T15691] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2606.804570][T17658] hub 6-1:0.0: USB hub found [ 2606.822713][T15691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2606.834729][ T2732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2606.848731][T15691] usb 2-1: config 0 descriptor?? [ 2606.852191][ T2732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2606.883961][ T2732] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2606.893049][ T2732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2606.901941][ T2732] usb 1-1: config 0 descriptor?? [ 2606.903137][T15691] hub 2-1:0.0: USB hub found [ 2606.962950][ T2732] hub 1-1:0.0: USB hub found [ 2607.022547][T17658] hub 6-1:0.0: 1 port detected [ 2607.112541][T15691] hub 2-1:0.0: 1 port detected 09:42:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) 09:42:34 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f00000079c0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) [ 2607.182552][ T2732] hub 1-1:0.0: 1 port detected [ 2607.814535][ T3324] usb 1-1: USB disconnect, device number 22 [ 2607.832513][T15545] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 2607.882571][T17658] hub 6-1:0.0: activate --> -90 [ 2607.982437][T15691] hub 2-1:0.0: activate --> -90 [ 2608.294157][ T3324] usb 6-1: USB disconnect, device number 116 [ 2608.402876][T17658] usb 2-1: USB disconnect, device number 2 09:42:36 executing program 2: 09:42:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:36 executing program 3: 09:42:36 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000005480)={0x0, 0x0, &(0x7f0000005400)=[{0x0}, {&(0x7f0000000380)={0x10}, 0x10}], 0x2}, 0x0) 09:42:36 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000040)='GPL\x00', 0x3, 0xee, &(0x7f0000000080)=""/238, 0x0, 0xb, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:42:36 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) 09:42:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:36 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000fea000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 09:42:36 executing program 1: 09:42:36 executing program 2: [ 2609.222365][T15691] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 2609.242310][T15545] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2609.462280][T15691] usb 6-1: Using ep0 maxpacket: 16 [ 2609.502292][T15545] usb 1-1: Using ep0 maxpacket: 16 [ 2609.582373][T15691] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2609.582391][T15691] usb 6-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2609.582401][T15691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2609.584265][T15691] usb 6-1: config 0 descriptor?? [ 2609.642303][T15545] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2609.654460][T15691] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 2609.655162][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2609.680975][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2609.690188][T15545] usb 1-1: config 0 descriptor?? [ 2609.754576][T15545] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2609.865694][T15688] usb 6-1: USB disconnect, device number 117 [ 2609.954750][T17658] usb 1-1: USB disconnect, device number 23 [ 2610.422179][T15688] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2610.582177][T17658] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2610.662159][T15688] usb 6-1: Using ep0 maxpacket: 32 [ 2610.782270][T15688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2610.793165][T15688] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2610.803163][T15688] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2610.812830][T15688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2610.822808][T15688] usb 6-1: config 0 descriptor?? [ 2610.842120][T17658] usb 1-1: Using ep0 maxpacket: 32 [ 2610.862556][T15688] hub 6-1:0.0: USB hub found [ 2610.982159][T17658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2610.993114][T17658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2611.009125][T17658] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2611.021001][T17658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2611.033658][T17658] usb 1-1: config 0 descriptor?? [ 2611.082120][T15688] hub 6-1:0.0: 1 port detected [ 2611.082599][T17658] hub 1-1:0.0: USB hub found [ 2611.322094][T17658] hub 1-1:0.0: 1 port detected [ 2611.943408][T15691] usb 1-1: USB disconnect, device number 24 [ 2611.953464][T17658] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 2611.962211][ T3324] hub 6-1:0.0: activate --> -90 [ 2612.382384][T17658] usb 6-1: USB disconnect, device number 118 09:42:40 executing program 3: 09:42:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:40 executing program 2: 09:42:40 executing program 1: 09:42:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:40 executing program 5: 09:42:40 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)='p', 0x1}], 0x1}], 0x1, 0x0) 09:42:40 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x80, 0x0) 09:42:40 executing program 3: r0 = inotify_init1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) 09:42:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff54, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x0, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x69912664, 0x4) 09:42:40 executing program 5: eventfd(0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') read$eventfd(r0, 0x0, 0x0) 09:42:40 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/4\x00') 09:42:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff54, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x0, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:40 executing program 2: capset(&(0x7f00000000c0)={0x20071026, 0xffffffffffffffff}, 0x0) 09:42:40 executing program 3: r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x8b406e217f7d16f6) [ 2613.113146][ T1222] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 2613.193214][T30428] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2613.431863][T30428] usb 1-1: Using ep0 maxpacket: 16 [ 2613.552280][T30428] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2613.565103][T30428] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2613.575720][T30428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2613.588161][T30428] usb 1-1: config 0 descriptor?? [ 2613.634268][T30428] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2613.833805][ T3324] usb 1-1: USB disconnect, device number 25 [ 2614.311812][ T2732] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2614.551792][ T2732] usb 1-1: Using ep0 maxpacket: 32 [ 2614.701866][ T2732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2614.713028][ T2732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2614.723032][ T2732] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2614.733815][ T2732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2614.743229][ T2732] usb 1-1: config 0 descriptor?? [ 2614.783791][ T2732] hub 1-1:0.0: USB hub found [ 2614.992128][ T2732] hub 1-1:0.0: 1 port detected [ 2615.634679][ T3324] usb 1-1: USB disconnect, device number 26 [ 2615.652836][T17658] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 09:42:43 executing program 1: clock_gettime(0x2415aadd0c6b8be2, 0x0) 09:42:43 executing program 5: io_setup(0x0, &(0x7f0000000100)=0x0) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) io_destroy(r0) 09:42:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff54, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x0, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:43 executing program 3: r0 = inotify_init1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x0, 0x0, 0xffffffffffffff4c) 09:42:43 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:42:43 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1}], 0x1, 0x0) 09:42:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x7, 0x6, 0x3, 0x0, 0xf0ffff}, 0x14}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:43 executing program 2: r0 = eventfd(0x0) r1 = socket$unix(0x1, 0x2, 0x0) dup3(r0, r1, 0x0) 09:42:43 executing program 1: r0 = eventfd(0x0) r1 = socket$unix(0x1, 0x1, 0x0) dup3(r0, r1, 0x0) 09:42:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)) 09:42:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x7, 0x6, 0x3, 0x0, 0xf0ffff}, 0x14}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:43 executing program 5: futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) 09:42:43 executing program 2: r0 = eventfd(0x0) r1 = socket$unix(0x1, 0x2, 0x0) dup3(r0, r1, 0x0) 09:42:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x7, 0x6, 0x3, 0x0, 0xf0ffff}, 0x14}, 0x1, 0xdd473aaf32000000}, 0x0) 09:42:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140085"], 0x18}, 0x0) 09:42:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) [ 2616.471544][ T3324] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 2616.711568][ T3324] usb 1-1: Using ep0 maxpacket: 16 [ 2616.832103][ T3324] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2616.846561][ T3324] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2616.858541][ T3324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2616.868634][ T3324] usb 1-1: config 0 descriptor?? [ 2616.913823][ T3324] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2617.113562][T17658] usb 1-1: USB disconnect, device number 27 [ 2617.681457][T17658] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2617.921412][T17658] usb 1-1: Using ep0 maxpacket: 32 [ 2618.041789][T17658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2618.056369][T17658] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2618.072366][T17658] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2618.084845][T17658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2618.096983][T17658] usb 1-1: config 0 descriptor?? [ 2618.143046][T17658] hub 1-1:0.0: USB hub found [ 2618.361379][T17658] hub 1-1:0.0: 1 port detected [ 2618.982754][ T2732] usb 1-1: USB disconnect, device number 28 [ 2618.994347][T17658] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 09:42:46 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:42:46 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000001300), 0x8, 0x0) bind(r0, 0x0, 0x0) 09:42:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fchown(r0, 0x0, 0xffffffffffffffff) 09:42:46 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x254800, 0x0) 09:42:46 executing program 4: capset(&(0x7f0000000540)={0x20071026}, 0x0) 09:42:46 executing program 3: clock_gettime(0xa274fca2e647ec48, 0x0) 09:42:46 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fdinfo/4\x00') 09:42:46 executing program 1: 09:42:46 executing program 5: 09:42:46 executing program 3: 09:42:46 executing program 4: 09:42:46 executing program 2: [ 2619.841302][ T3324] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2620.111318][ T3324] usb 1-1: Using ep0 maxpacket: 16 [ 2620.241456][ T3324] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2620.254593][ T3324] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2620.266434][ T3324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2620.276396][ T3324] usb 1-1: config 0 descriptor?? [ 2620.343295][ T3324] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2620.542955][T15545] usb 1-1: USB disconnect, device number 29 [ 2621.101099][T15545] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2621.341046][T15545] usb 1-1: Using ep0 maxpacket: 32 [ 2621.461425][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2621.472326][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2621.484970][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2621.494072][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2621.505190][T15545] usb 1-1: config 0 descriptor?? [ 2621.541341][T15545] hub 1-1:0.0: USB hub found [ 2621.771014][T15545] hub 1-1:0.0: 1 port detected [ 2622.412716][T15545] usb 1-1: USB disconnect, device number 30 [ 2622.430938][T17658] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 09:42:50 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 09:42:50 executing program 5: 09:42:50 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20}, 0x20}}, 0x0) 09:42:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512-ssse3)\x00'}, 0x58) 09:42:50 executing program 1: 09:42:50 executing program 2: 09:42:50 executing program 5: 09:42:50 executing program 1: 09:42:50 executing program 2: 09:42:50 executing program 3: 09:42:50 executing program 5: 09:42:50 executing program 1: [ 2623.290861][T15545] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 2623.540825][T15545] usb 1-1: Using ep0 maxpacket: 16 [ 2623.670860][T15545] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2623.684675][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2623.700112][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2623.713058][T15545] usb 1-1: config 0 descriptor?? [ 2623.765174][T15545] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2623.962457][ T3324] usb 1-1: USB disconnect, device number 31 [ 2624.430742][ T3324] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2624.670717][ T3324] usb 1-1: Using ep0 maxpacket: 32 [ 2624.791034][ T3324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2624.801950][ T3324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2624.814395][ T3324] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2624.823495][ T3324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2624.834746][ T3324] usb 1-1: config 0 descriptor?? [ 2624.871200][ T3324] hub 1-1:0.0: USB hub found [ 2625.090780][ T3324] hub 1-1:0.0: 1 port detected [ 2625.732108][T30428] usb 1-1: USB disconnect, device number 32 [ 2625.745799][ T3324] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 09:42:53 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:53 executing program 2: 09:42:53 executing program 4: 09:42:53 executing program 3: 09:42:53 executing program 1: 09:42:53 executing program 5: 09:42:53 executing program 2: 09:42:53 executing program 4: 09:42:53 executing program 5: 09:42:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@prinfo={0x14}], 0x14}, 0x0) 09:42:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x102, &(0x7f0000000140), &(0x7f0000000240)=0x8) 09:42:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@authinfo={0x10}], 0x10}, 0x0) [ 2626.590545][T30428] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2626.850845][T30428] usb 1-1: Using ep0 maxpacket: 16 [ 2626.970492][T30428] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2626.983914][T30428] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2626.999522][T30428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2627.010744][T30428] usb 1-1: config 0 descriptor?? [ 2627.053726][T30428] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2627.252431][ T3324] usb 1-1: USB disconnect, device number 33 [ 2627.720404][ T3324] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2627.970369][ T3324] usb 1-1: Using ep0 maxpacket: 32 [ 2628.090482][ T3324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2628.101389][ T3324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2628.117468][ T3324] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2628.129396][ T3324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2628.141267][ T3324] usb 1-1: config 0 descriptor?? [ 2628.193389][ T3324] hub 1-1:0.0: USB hub found [ 2628.410377][ T3324] hub 1-1:0.0: 1 port detected [ 2629.052179][T15545] usb 1-1: USB disconnect, device number 34 [ 2629.060272][ T3324] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 09:42:56 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:42:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000000c0), 0x8c) 09:42:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x1f, &(0x7f0000000000), 0x4) 09:42:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x107, &(0x7f0000000000), &(0x7f0000000100)=0x18) 09:42:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000013c0)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@sndinfo={0x1c}], 0x1c}, 0x0) 09:42:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 09:42:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040), 0xa0) 09:42:56 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000200)=ANY=[], &(0x7f0000000140)=0xb0) 09:42:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2, 0x2, 0x101, 0x5}, 0x10) 09:42:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000140), &(0x7f0000000200)=0x98) 09:42:56 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) 09:42:56 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1021, 0x0, 0x0) [ 2629.920196][ T2732] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2630.160116][ T2732] usb 1-1: Using ep0 maxpacket: 16 [ 2630.280588][ T2732] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2630.294768][ T2732] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2630.306751][ T2732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2630.317065][ T2732] usb 1-1: config 0 descriptor?? [ 2630.362484][ T2732] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2630.562106][ T2732] usb 1-1: USB disconnect, device number 35 [ 2631.140044][ T2732] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2631.389995][ T2732] usb 1-1: Using ep0 maxpacket: 32 [ 2631.510347][ T2732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2631.522465][ T2732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2631.538137][ T2732] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2631.550527][ T2732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2631.566623][ T2732] usb 1-1: config 0 descriptor?? [ 2631.613413][ T2732] hub 1-1:0.0: USB hub found [ 2631.830013][ T2732] hub 1-1:0.0: 1 port detected [ 2632.471540][T17658] usb 1-1: USB disconnect, device number 36 [ 2632.482433][ T2732] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 09:43:00 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:43:00 executing program 4: open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) 09:43:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000100)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2, 0x2, 0x101, 0x5}, 0x10) 09:43:00 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040), 0x0) 09:43:00 executing program 2: r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000040), 0x4) 09:43:00 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1008, 0x0, 0x0) 09:43:00 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @remote, @val, {@ipv6}}, 0x0) 09:43:00 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) 09:43:00 executing program 3: r0 = socket$inet6(0x18, 0x2, 0x0) r1 = dup(r0) getsockopt$sock_int(r1, 0xffff, 0x20, 0x0, 0x0) 09:43:00 executing program 4: syz_emit_ethernet(0x6c, &(0x7f00000003c0)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 09:43:00 executing program 5: open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) 09:43:00 executing program 2: r0 = socket$inet6(0x18, 0x4001, 0x0) recvmsg(r0, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x1) [ 2633.329852][T15545] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2633.569804][T15545] usb 1-1: Using ep0 maxpacket: 16 [ 2633.710134][T15545] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2633.722974][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2633.738304][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2633.750604][T15545] usb 1-1: config 0 descriptor?? [ 2633.791975][T15545] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2633.991552][T15545] usb 1-1: USB disconnect, device number 37 [ 2634.569677][T15545] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2634.809674][T15545] usb 1-1: Using ep0 maxpacket: 32 [ 2634.930137][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2634.941084][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2634.953466][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2634.962676][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2634.971776][T15545] usb 1-1: config 0 descriptor?? [ 2635.010157][T15545] hub 1-1:0.0: USB hub found [ 2635.229652][T15545] hub 1-1:0.0: 1 port detected [ 2635.871496][ T3324] usb 1-1: USB disconnect, device number 38 [ 2635.882750][T15545] hub 1-1:0.0: hub_ext_port_status failed (err = -71) 09:43:03 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:43:03 executing program 4: 09:43:03 executing program 1: 09:43:03 executing program 5: 09:43:03 executing program 3: 09:43:03 executing program 2: 09:43:03 executing program 4: 09:43:03 executing program 1: 09:43:03 executing program 3: 09:43:03 executing program 5: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x410, 0xffffffffffffffff, 0x0) 09:43:03 executing program 2: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x9, &(0x7f00000002c0)=0x80000001, 0x4) 09:43:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred, @cred, @rights], 0x3c}, 0x0) [ 2636.739531][T30428] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2636.989747][T30428] usb 1-1: Using ep0 maxpacket: 16 [ 2637.119440][T30428] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2637.132511][T30428] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2637.147726][T30428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2637.159473][T30428] usb 1-1: config 0 descriptor?? [ 2637.201607][T30428] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2637.401197][T30428] usb 1-1: USB disconnect, device number 39 [ 2637.869322][T30428] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2638.109310][T30428] usb 1-1: Using ep0 maxpacket: 32 [ 2638.229531][T30428] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2638.246026][T30428] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2638.274269][T30428] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2638.295872][T30428] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2638.316762][T30428] usb 1-1: config 0 descriptor?? [ 2638.369611][T30428] hub 1-1:0.0: USB hub found [ 2638.589301][T30428] hub 1-1:0.0: 1 port detected [ 2639.239224][T30428] hub 1-1:0.0: activate --> -90 [ 2639.559238][T30428] usb 1-1: USB disconnect, device number 40 09:43:07 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:43:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f0000000000), &(0x7f0000000080)=0x8) 09:43:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x2, &(0x7f0000000180), &(0x7f0000000200)=0x14) 09:43:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) clock_gettime(0xf, &(0x7f0000000240)) 09:43:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x14) 09:43:07 executing program 2: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000740)=[{0x0}, {0x0, 0x9}], 0x2, &(0x7f0000000540)=[@rights, @cred, @rights, @rights, @cred, @cred, @cred], 0xb4}, 0x0) 09:43:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000700)=[{0x0}, {0x0, 0xfffffffffffffdcc}, {0x0}], 0x3}, 0x0) 09:43:07 executing program 2: poll(&(0x7f0000000280)=[{}], 0x2000000000000102, 0x0) 09:43:07 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x108, &(0x7f0000000140), &(0x7f0000000180)=0x18) 09:43:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) dup2(r1, r0) 09:43:07 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) r1 = dup2(r0, r0) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x19, &(0x7f0000000340), 0x8) 09:43:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000200), &(0x7f00000002c0)=0xac) [ 2640.279111][T17658] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2640.519064][T17658] usb 1-1: Using ep0 maxpacket: 16 [ 2640.639327][T17658] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2640.652314][T17658] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2640.667882][T17658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2640.679230][T17658] usb 1-1: config 0 descriptor?? [ 2640.721358][T17658] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2640.920698][ T3324] usb 1-1: USB disconnect, device number 41 [ 2641.488974][ T3324] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2641.738934][ T3324] usb 1-1: Using ep0 maxpacket: 32 [ 2641.868962][ T3324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2641.879869][ T3324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2641.889652][ T3324] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2641.900278][ T3324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2641.910459][ T3324] usb 1-1: config 0 descriptor?? [ 2641.969446][ T3324] hub 1-1:0.0: USB hub found [ 2642.188932][ T3324] hub 1-1:0.0: 1 port detected [ 2642.848904][ T3324] hub 1-1:0.0: activate --> -90 [ 2643.168867][ T3324] usb 1-1: USB disconnect, device number 42 09:43:10 executing program 1: setgroups(0x1b, 0x0) 09:43:10 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x2b, 0x0, 0x0) 09:43:10 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x27, 0x0, &(0x7f0000000180)) 09:43:10 executing program 2: accept4$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) 09:43:10 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc218, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 09:43:10 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x30, 0x0, 0x0) 09:43:10 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x2b, 0x0, &(0x7f00000000c0)) 09:43:10 executing program 3: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendmsg(r0, &(0x7f00000017c0)={&(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000100)="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", 0xf80}, {&(0x7f0000001100)="4d0b2c1d7026674252b9088df9cfa9d6eacb94086bc4d336508b553df4eddfdb48bf3e464a0bf85caf571f73d3e81b532465a3d523", 0x35}], 0x2, &(0x7f0000001240)=[{0xc}, {0xc}], 0x18}, 0x0) 09:43:10 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000140), 0xc) 09:43:10 executing program 5: 09:43:10 executing program 1: 09:43:10 executing program 4: 09:43:10 executing program 5: 09:43:10 executing program 2: 09:43:10 executing program 3: 09:43:10 executing program 1: [ 2643.868714][T15545] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2644.108699][T15545] usb 1-1: Using ep0 maxpacket: 16 [ 2644.229021][T15545] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2644.241887][T15545] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 2644.256651][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2644.267998][T15545] usb 1-1: config 0 descriptor?? [ 2644.320997][T15545] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2644.536919][ T3324] usb 1-1: USB disconnect, device number 43 [ 2645.088618][ T3324] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2645.338769][ T3324] usb 1-1: Using ep0 maxpacket: 32 [ 2645.478595][ T3324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2645.489663][ T3324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2645.499477][ T3324] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 2645.509703][ T3324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2645.519475][ T3324] usb 1-1: config 0 descriptor?? [ 2645.578955][ T3324] hub 1-1:0.0: USB hub found [ 2645.798573][ T3324] hub 1-1:0.0: 1 port detected [ 2646.448513][T30428] hub 1-1:0.0: activate --> -90 [ 2646.768499][T30428] usb 1-1: USB disconnect, device number 44 09:43:14 executing program 2: 09:43:14 executing program 5: 09:43:14 executing program 1: 09:43:14 executing program 4: 09:43:14 executing program 3: 09:43:14 executing program 0: 09:43:14 executing program 4: 09:43:14 executing program 3: 09:43:14 executing program 1: 09:43:14 executing program 0: 09:43:14 executing program 2: 09:43:14 executing program 5: madvise(&(0x7f0000ff1000/0xc000)=nil, 0xc000, 0x6) 09:43:14 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x2c802, 0x0) 09:43:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xc, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4}]}, @enum={0xa}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x30, 0x6b857712bd874838, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f00000000c0)=""/226, 0x44, 0xe2, 0x1}, 0x20) 09:43:14 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000300)=""/205, 0x2c, 0xcd, 0x1}, 0x20) 09:43:14 executing program 0: bpf$OBJ_GET_MAP(0x21, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10) 09:43:14 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001c40)={0xffffffffffffffff, 0x24, 0x0, 0x0, 0x0}, 0x20) 09:43:14 executing program 5: perf_event_open(&(0x7f0000002680)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x848e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4d540}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:43:14 executing program 4: socketpair$unix(0x1, 0x5773543987f9a2f3, 0x0, 0x0) 09:43:14 executing program 2: bpf$ITER_CREATE(0x8, 0x0, 0x0) 09:43:14 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002500)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x24040080) 09:43:14 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x61, 0x25]}}, &(0x7f00000000c0)=""/226, 0x28, 0xe2, 0x1}, 0x20) 09:43:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x1, &(0x7f0000000040)=@raw=[@jmp], &(0x7f00000000c0)='GPL\x00', 0x3, 0xe9, &(0x7f0000000100)=""/233, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:43:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xff}, 0x40) 09:43:14 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000025c0)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x0, 0x1}}, 0x10, &(0x7f0000002500)=[{&(0x7f0000000080)="4099ea24b8a7a70031907cb48195b1386b01f392140a5f5f44526252f7b44e7557f2a4697d1aad55834573f2f9fc2aecdb4f66eb3fae7539ca9b7e2b6650f4119e5c5d3769f07557985d046ce13f3136d2ec9249f06249b4455940f0c48e93350d7ddb40466f1ca9fa1218c25d342258f58aa6ec7b72a2bdc4b563f08c5c6c135c8c3c76c27983b881fe99924007bf03c2975f77f7e6ca8d1bd37c367359630a6b7ab3fcae476fe03e8bc682b68cd31b568dde5fe2c17329a043a1620c68cba8693a70a5", 0xc4}, {&(0x7f0000000180)="507c1a6fad35e6be405ece25c9530dda98e00145646d4b00d37fc4ce63e8ac8545c54e259ad7b24b40c247cbde9853595be5dc115f0682bf6fd293bf57ad352e366be8b0fa73cb0470c6e5e5b83ac7b45782c211ca069047f72848965f7656b450f76ad2649a251d90109e7c0ac32a05a49e45e37c864ca1c6872c2b2a72cc453f66ed8384f760c09fd49f58455ab26ee1110c6d09e9e5b5a657d98f8d2e", 0x9e}, {&(0x7f0000000240)="86735a561c52d9aef27122d674cfd0793adf5507f31fb293e00b8f0525a4f100037a99260203afe350997df0461b571169ff3b70fa9360d46b74fce2967239af82236465d473781831d060a446261d4901556bebd6366b99c8eda00a10918135b2d4e4214d982d84f641e10aed35d38885738245b9ea6c62d6ecf43e8af913815cd2062aa8a841721ef50f185cf9088cc57246e3709bd1cf4420b68667db2d976b7c77a6155ce0489caeb8483f07fac650019622d458994e12fa61336beb5743a8a9b37a3e92486d", 0xc8}, {&(0x7f0000000340)="06dfca0fd5dc499c3059da9f6eeb4138ca6d34560158cd5d9e59241c5b8947e9e44b72a30011e50ab77196240039bec410ec02b39f728dc1ef9e9a1e21a84b6ca4978de5571be8c5510b6ac830a096db9ff0222553beaed24f041e0b8ee247f6ceb49adebc9b82a5ff76f7154e3fadd0e6e1bc73f06e6d6b1cb02bc933c1fdbded45e0277e09c31429", 0x89}, {&(0x7f0000000400)="86960d11a61362d0185c1a18c920f98f61236fda1c7cb34f46ea15c4707ebaac891133b8a38371ee55861e05c24d79ed2ff93663ec2454862f55d9097a830cb2acecd2f2be5fcbd946188bf4fd6f44b7275d23809848db05ceda0cde830ee1054a830d5343bade5876e0c0aecc099299f71d37c4b44146833744ee0e20c63f65c731dd0772b2650fd52401e373e3a51b61b6b620d11dc68f3cdd6a2c64211893efee499f971a7aa80e", 0xa9}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="d1649a4b9caed572d3fe037d3421d01532cca6b3e8cc8e3b2bb8fe4e5478bc69bb21764cd8118a94f438af695fdba9f1c289fcfc0d03b68b", 0x38}, {&(0x7f0000001500)="b6b0817c4ae00badc42c9ddfabe68d70bfeac304eeb4e4eb84a5409084fd7d6111393cd9e05ff907552010fb83934e4ea2bf8a338715c18cdb31548e5f90e019a7c59350d6523f435768c1546ca52697a205d328ece1a40d6d420bfb574962e5cfea206af7eccca593c21a104e5e4877b05e0e3d126975256f244f1c547f3b9e4906d4e4a80306d82c97089baaadbf9d5793d5aea1fa8cc9bc6b143b7214d91984dfa3a499e52c9b3cdb4e6c2b548d52ba82a9bfdf77b3a8e2a3190178d6489cdf123002d198c069a0878f9fb1ceaed76dc86106ade0423faf9a99f318aeef10be3bb0a9a7c4bf3fe4641b4ea3f557f0ce679f85a3f33a09086aa142177c26305a20d02b71bf454119ecdba17621f5ee38ec6a6c18dfc09721f4c9661727c770d92d2910e9a7417699571d1e36f807cb6e927385c939480a9eebe67f076b45756a09014a306188db842e9eb5d165de9bf081bb0effc684fe5533ea2666950712f7c4a7698db9ff9d1652c16c9fadc903d535980ba2ac7ac9c01f44460c0adc2b68510d6f5381562cdb27c0936ff794d1930d8cb3bffc62416009705c181e88ce7900d3c84a28340ef287fb34df6f2f09827865da98c704bf14432a9c4544120bfb6f0eac6a11871d8a53f928f26c189c0aeea6b489f7e44af7a7f597f0df8266cf181259319b8a7e9cc1a9aca3df6b3c5bd43717a1c0684e244ec0c356d0ba914e4e9d734894fb25d378bf7ae3222f4a57bbf5fb9c9d065de75d0d244c58902a9ede3da33d7c790c33d0c93b39152a44a4fbfe3f43b64ef55f65e5594aeff75620e64fdd41ebaf95e3af757a743f1aafd546b2f30cba5d84e888e52acd6948944c71fd06ee0a74492bf213960cf306c7fdbac9951e72a4834256e2466a1d0fda3d120e796a9bb3d0e9d11bc7da5b587eeaf2859584140d315e30b620234f113b97275d6305fe3fb9a9215edd013fb52ad44d28c0aaee35a151fd83537d4155fef3a3e25dc6656d98812e5379fa8ebbc36a09ac2116df36f741da704ea72e0a62a2dfd34fb790cf11e100429f45af7cdafaa4c7b354bd6446eab0fd1bc17cf8ef1cfe78d1fdcd5ca42a72bbec17e3227514f70d7debfc3dddc8ec7a38512bbe0e5d87bec7935d07a6e576fcbff3fa30fdf2ffe5eb8480bc28a7ccc3e2ea2826e87f54a4a50402f5335a7ab3894ea1e0c6bdc06cf3d07bf4b8ff84f28cf79a7074cfa67124b251fc7771c4295b4bc2588181b6dd16e5afa2963df4582abdd463dff427cab23d60e93edb6074193e71e87d6db197d7b3b3a652bbd050233220d0c387eb3db6f70cef9260fde5878502eb01bc52355c2989fd94ed9348c4720851adef7bb6b67aa98c4cf3136a230147452a338cae8409412f2eb8c6756083d7b924147779ffa36c0b121e026ddf463bff9e702f92924b19d1301b515c5bbecd7ef6dbce6d11dc88cc56cee6e5dc8bf0857b6882d91199028c71e7540e00302aee1ee423a4778e7219c831c1146ca46ac8c9fd043b47be78a7fe4dda0eed9e7561ff16055916860efe59ea507966c2556581bdb76c46656c5019821a3e0a5a09332e145b34b488cca0c730bffed5ae26e5c730c4a10dc2b8aee3d57fe875b4dcedf65fbf5a1b925fbcd56607309240e81908daf2660d688c5548a4c1b9be0936c80964bd8ed9c363488901304bc4624ccfa6093ade49715491d81b4527b2f1cd963773ba5824679ed22887002a54b779cf4e67b811d4281f2dcea2d659d4401021823c42061920bd1119ffd38d4fbbdc55a4179a0dfe14b09e6943d422912f577796c5cd9297918bd37a52792e5d9a74f85243048e170012291e54523a631ee0ef791f4adf9f77079a0e9f3bce098feced59279044bb56c56a5ba2a20fbc9bafcc6ba8d054f3d88e8988ff907a539d1b505ca4deb8add4eb55e90ae76c3ae3bb45817f35896a14c2107b8c3d0656ee7d7e472521d81fb0c5a969b4aaf750006d35434fee8b356ac95f935ad23edc70e4dadff644aade9b4e8863a229ea1aba66d1995d7f986a105ebfafc2574a0860e9fc85c9d0b15f55b71b480df3bc425fd3c19e4d7b5e919a6dcc029c44a17375494f18ee50d03ed30934101ddf2ae7281b58c476326b4f34125d082e17f09846298d8f33d41ab9ccc60fcce94ff6bf708c9fdd905450040a0343ff66285ca7931b5833e9fb2abc218f1fc00e9a3da166ec21e8cef9ba08c08c5e1d31bf753bab630b2306cdcfe9e1a63552d4159b51e0491101d0a190e72862d7895d108256f79a4d3d9b3b639f0da9bfa5da5bec38211b122b2a11f09536a14223d0efc4f72a6837ad045847236ca033f8d09a3e3780dd9b626bca996692ca8edb2ac9179cbac93632488b364aad11c8ad6e68c0dd51d2e4f1e44f5b31ec9aa772b31b90ac6f1fe78e50cac6fdd6607841ca0062a511931710e1fe85392bf67f4b070cc96b69459bf163ef88204a4950a18285ba564f6240aed7496b639e8fdf9b184d716acf412433b7dc40d4dc8a5a01c9e8d6f9ce0e32f14dc2aedd1c145011fd3414590c3f33a8186e9ec1599cdc5e458edb4e752a53cbee421f925af3b7a6c138eff51a353b88a0e0cee328ee5b00f48b93b54bcde547650ce6efa7f3bf35256264572e36ed299bde9fa498c7cc1a5e80a1b2ad6e31130b2dd2f52ae024111e09b887ac1a6e562fb829f0a760bf96750a53e2d819e256f7e3f8bf2b07afd3339ea4cd246d36c3f3b086f02bfc26307e3a85b24b8634df039c7e0ed8379ac73de9bc5df9a22f88cf9dfd2f1c4283b15a1f567367b5a167c4da35dac0e7dc047fd15751228fdb3d31b91d35fed55f34f6ff5cc9d89e88ebe0ef24f3eaa9ddab74c1612b3b2a4236f3822807b226f381c502682cd1a0db82b34f4750329b391d5914f036e3ca94fcc2fe210395375c5e05ba77732ccdde80237600392e259f79a2e7015097c443411cbf80f29b8f04d586eb20181173fab1bb0c2f02f585f68918e423d9ded95c191c80c5b3b6b6c0a9841c21d5e3cd147d7dece2aaa8dbc63343ba2735cd06a21b0e35eaf3844aa133ac5cab1f73cd033c50eac1e97d057ef055eb46fe46e33de823c6cdda66605984e8cff08517366e07648397ae520385844000907d4d99c3cf1b673c8cb798dc75222a21de780bcd599ac03334d05e6553a11e1780dc9e62a5c00cfda27bf4e0ac9fbd09d72ebdf14708cb20af008cb08afd0e9b16930fd0d1761639d205b2564c14349eb3fe1f1b27864eb314a15a99a69d55aed84cb82f2b4d794d1eb1abdd041ebcb901cafbda75fa47374cfa1582646bce25e0b9c8bf426fac974a827fc721ff5d3d51b3d8731a8b88221e827b2b1c23f856f05a36a7b18efbe00b8d5087c072eedef2e811caaadbcb5de1c807c8bddd99752e1417752cec1cae3c4685390bc11e099c6020d1915d2ec845e73bf1626c9b52c655af56a41c1ecee9d8d806727ce9a091cb2c2ba2f40ab674cd25967fe64d261ebb055f0ae5042830761e1ee304e2b23eec7faccefded5c676ddca9fb7fdbb1cef9e661fd11c3b0da948ff5db5ef501ef9abef55a89b9cb28a92bc7134a438b2d446581e4f78ebb4bab27bd2fc583c0e69dc7efd36df5241209a0799435d09198552da7ebc5847ecf57240bf3c5f4c8168ded20f30682540d058daf5cd5750ddb90", 0xa2d}], 0x8}, 0x0) 09:43:14 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000013c0)="fb", &(0x7f0000001440)="16"}, 0x48) 09:43:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000052c0)={0x11, 0x1, &(0x7f00000050c0)=@raw=[@call], &(0x7f0000005100)='syzkaller\x00', 0x2, 0xf6, &(0x7f0000005140)=""/246, 0x0, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:43:14 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)="49dae0ee48a222357471a0f294d86423e68b1f317ba95b58ea45d225dc34795b73cb1538a4", 0x25}, 0x0) 09:43:14 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(r0, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="e3", 0x7ffff000}], 0x1, &(0x7f00000002c0)=ANY=[], 0x31d0}, 0x0) 09:43:14 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f000000eec0)={&(0x7f000000de80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x2}]}, {0x0, [0x0, 0x5f, 0x30, 0x61]}}, &(0x7f000000dec0)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 09:43:14 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8912, 0x0) 09:43:14 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)) 09:43:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x10060) 09:43:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f000000eec0)={&(0x7f000000de80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x5f, 0x30, 0x61]}}, &(0x7f000000dec0)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 09:43:14 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2, 0x600}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000300)=""/205, 0x2c, 0xcd, 0x1}, 0x20) 09:43:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f000000eec0)={&(0x7f000000de80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0, 0x5f, 0x30, 0x61]}}, &(0x7f000000dec0)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 09:43:14 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f00000003c0), 0x40) 09:43:14 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(r0, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="e3", 0x7ffff000}], 0x1, &(0x7f00000002c0)=ANY=[], 0x31d0}, 0x0) 09:43:14 executing program 5: bpf$ITER_CREATE(0x2, 0x0, 0x0) 09:43:14 executing program 0: bpf$MAP_CREATE(0x4, &(0x7f00000003c0), 0x99) 09:43:14 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000000c0)=""/226, 0x26, 0xe2, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f00000001c0)=""/226, 0xe2}}, 0x10) 09:43:14 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x1}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000640)=""/214, 0x28, 0xd6, 0x1}, 0x20) 09:43:14 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0x0, @private}, 0x10, 0x0}, 0x0) 09:43:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000107c0)={0x4, 0x3, &(0x7f0000010580)=@framed, &(0x7f0000010600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0, 0x1}, 0xc) 09:43:14 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x5}, 0x10) 09:43:14 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc48, 0x10001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) 09:43:14 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000008c0)={&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/83, 0xffffff69}, {&(0x7f0000000740)=""/69, 0x4a}, {&(0x7f0000000500)=""/53, 0x2f}, {&(0x7f0000000800)=""/15, 0xf}], 0x4, &(0x7f0000000880)}, 0x12047) 09:43:14 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r1, 0xffffffffffffffff, 0x4}, 0x10) 09:43:14 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8910, &(0x7f0000000040)) 09:43:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000040010000400100000200000001000000f3000001"], &(0x7f00000001c0)=""/244, 0x15a, 0xf4, 0x1}, 0x20) 09:43:15 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000080)="4099ea24b8a7a70031907cb48195b1386b01f392140a5f5f44526252f7b44e7557f2a4697d1aad55834573f2f9fc2aecdb4f66eb3fae7539ca9b7e2b6650f4119e5c5d3769f07557985d046ce13f3136d2ec9249f06249b4455940f0c48e93350d7ddb40466f1ca9fa1218c25d342258f58aa6ec7b72a2bdc4b563f08c5c6c135c8c3c76c27983b881fe99924007bf03c2975f77f7e6ca8d1bd37c367359630a6b7ab3fcae476fe03e8bc682b68cd31b568dde5fe2c17329a043a1620c68cba8693a70a5", 0xc4}, {&(0x7f0000000180)="507c1a6fad35e6be405ece25c9530dda98e00145646d4b00d37fc4ce63e8ac8545c54e259ad7b24b40c247cbde9853595be5dc115f0682bf6fd293bf57ad352e366be8b0fa73cb0470c6e5e5b83ac7b45782c211ca069047f72848965f7656b450f76ad2649a251d90109e7c0ac32a05a49e45e37c864ca1c6872c2b2a72cc453f66ed8384f760c09fd49f58455ab26ee1110c6d09e9e5b5a657d98f8d2e", 0x9e}, {&(0x7f0000000240)="86735a561c52d9aef27122d674cfd0793adf5507f31fb293e00b8f0525a4f100037a99260203afe350997df0461b571169ff3b70fa9360d46b74fce2967239af82236465d473781831d060a446261d4901556bebd6366b99c8eda00a10918135b2d4e4214d982d84f641e10aed35d38885738245b9ea6c62d6ecf43e8af913815cd2062aa8a841721ef50f185cf9088cc57246e3709bd1cf4420b68667db2d976b7c77a6155ce0489caeb8483f07fac650019622d458994e12fa61336beb5743a8a9b37a3e92486d", 0xc8}, {&(0x7f0000000340)="06dfca0fd5dc499c3059da9f6eeb4138ca6d34560158cd5d9e59241c5b8947e9e44b72a30011e50ab77196240039bec410ec02b39f728dc1ef9e9a1e21a84b6ca4978de5571be8c5510b6ac830a096db9ff0222553beaed24f041e0b8ee247f6ceb49adebc9b82a5ff76f7154e3fadd0e6e1bc73f06e6d6b1cb02bc933c1fdbded45e0277e09c31429", 0x89}, {&(0x7f0000000400)="86960d11a61362d0185c1a18c920f98f61236fda1c7cb34f46ea15c4707ebaac891133b8a38371ee55861e05c24d79ed2ff93663ec2454862f55d9097a830cb2acecd2f2be5fcbd946188bf4fd6f44b7275d23809848db05ceda0cde830ee1054a830d5343bade5876e0c0aecc099299f71d37c4b44146833744ee0e20c63f65c731dd0772b2650fd52401e373e3a51b61b6b620d11dc68f3cdd6a2c64211893efee499f971a7aa80e", 0xa9}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="d1649a4b9caed572d3fe037d3421d01532cca6b3e8cc8e3b2bb8fe4e5478bc69bb21764cd8118a94f438af695fdba9f1c289fcfc0d03b68b", 0x38}, {&(0x7f0000001500)="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", 0xa2d}], 0x8}, 0x0) 09:43:15 executing program 2: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) 09:43:15 executing program 0: perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:43:15 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000002d40)) 09:43:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000240)=""/9, 0x0, 0x9}, 0x20) 09:43:15 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x7) 09:43:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3}]}, &(0x7f0000010600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:43:15 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x1, &(0x7f0000000180)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x83, &(0x7f00000004c0)=""/131, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:43:15 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f000000eec0)={&(0x7f000000de80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, &(0x7f000000dec0)=""/4096, 0x2a, 0x1000, 0x1}, 0x20) 09:43:15 executing program 3: socketpair(0x1f, 0x0, 0x0, &(0x7f0000000280)) 09:43:15 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) 09:43:15 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) 09:43:15 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x40}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:43:15 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000007d80)='cgroup.stat\x00', 0x0, 0x0) 09:43:15 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8946, &(0x7f0000000040)) 09:43:15 executing program 0: mkdir(&(0x7f0000001040)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) 09:43:15 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5421, &(0x7f0000000040)) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 09:43:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x0, 0x0, 0xfffffffe}, 0x40) 09:43:15 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5452, &(0x7f0000000040)) 09:43:15 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001400)="093462e5d3e3321b0064c5166b92364b73a3efd2ed4bad7255246998a938ff23bcb1", 0x22}, {&(0x7f0000001440)="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", 0xe9f}], 0x2, &(0x7f0000002480)=ANY=[@ANYBLOB="080100000000000000010000ff0f0000deb8b3f85e342c5be2ae0f5d26f2c3f807447f6b3ecea1ea85d64a588b20b2b4c6fb6ba352b2740276708d84d5a66f45bbcfa8dae56133a081eabda4d6fa05fe8f30c1e6caa69b18209ed0e083782661a8b57fdb1079073c43fcf102f4c9ff750ee7ee974a896f3fe3b3a7c283dcdfed694c18d7362ea28afac76d0321245befa0ac7a8c1ad5b858ddd6aa15fa141faa5933d21010bfb6883cd49a7ea838af8e69b048e2943a7dd4d987e7edad1861ec33349228575886b29bd339bd6c825216d53900a082e3b9c5320ccd8d16a1d00b61e55f0619cacb824c589ce6c1a2acb77c727b33e155e4b660c9dc77189192a45842fd00000000002800000000000000160100000c0a0000c7cbff9ddacf19aeb60f95eb78792311a76286698fce00000001"], 0x230}, 0x0) 09:43:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@func]}, &(0x7f0000000080)='GPL\x00', 0x7, 0xc9, &(0x7f00000000c0)=""/201, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:43:15 executing program 1: bpf$MAP_DELETE_BATCH(0x17, 0x0, 0x0) 09:43:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f00000000c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000400)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:43:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "bb"}]}}, &(0x7f00000002c0)=""/218, 0x2a, 0xda, 0x1}, 0x20) 09:43:15 executing program 0: bpf$MAP_CREATE(0x10, &(0x7f00000003c0), 0x40) 09:43:15 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x0, 0x14}, 0xc) 09:43:15 executing program 5: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 09:43:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2, 0x6c}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000300)=""/205, 0x2c, 0xcd, 0x1}, 0x20) 09:43:15 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x5421, &(0x7f0000000040)) 09:43:15 executing program 3: bpf$MAP_CREATE(0x1c, &(0x7f00000003c0), 0x40) 09:43:15 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 09:43:15 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f00000014c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0xe}]}}, &(0x7f0000001500)=""/186, 0x2a, 0xba, 0x1}, 0x20) 09:43:15 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000000c0)=""/226, 0x32, 0xe2, 0x8}, 0x20) 09:43:15 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0) 09:43:15 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000002d00)={&(0x7f0000001800)=@rc={0x1f, @none}, 0x80, &(0x7f0000002c40)=[{0x0}, {0x0}], 0x2}, 0x0) 09:43:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:43:15 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0x0, @private}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="b0", 0x1}], 0x1}, 0x0) 09:43:15 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x50, 0x0, 0x5a}]}}, &(0x7f0000000300)=""/205, 0x2a, 0xcd, 0x1}, 0x20) 09:43:15 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x18}, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xeb, 0xff, 0x1, 0x800}, {0x5, 0x9, 0xac, 0x866}, {0x0, 0x1, 0x1f, 0x7b5}, {0xff7f, 0x2, 0x5, 0x1000}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r0, r0, 0x5}, 0x10) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000003c0)=r0) r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='pids.events\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) openat$cgroup_procs(r1, &(0x7f0000000440)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x28, 0x11, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x51}, @generic={0x20, 0x9, 0x7, 0x209b, 0x7}, @ldst={0x3, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @generic={0x0, 0xc, 0xa, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @map={0x18, 0xa, 0x1, 0x0, r0}, @map_val={0x18, 0x5, 0x2, 0x0, r1}]}, &(0x7f00000006c0)='syzkaller\x00', 0x4, 0xf3, &(0x7f0000000700)=""/243, 0x40f00, 0x10, [], 0x0, 0x0, r1, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x6, 0x906, 0x8}, 0x10}, 0x78) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x8) 09:43:15 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 09:43:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) 09:43:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@enum={0x1, 0x1, 0x0, 0xc, 0x4, [{}]}, @enum]}, {0x0, [0x61]}}, &(0x7f00000000c0)=""/226, 0x3b, 0xe2, 0x1}, 0x20) 09:43:15 executing program 1: bpf$MAP_DELETE_BATCH(0x1c, 0x0, 0x0) 09:43:15 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a00)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8993, &(0x7f0000000040)) 09:43:15 executing program 5: bpf$MAP_DELETE_BATCH(0x14, 0x0, 0x0) 09:43:15 executing program 3: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:43:16 executing program 4: bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) 09:43:16 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:43:16 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) 09:43:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0xc, [@enum={0x1, 0x3, 0x0, 0x6, 0x4, [{}]}, @enum]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000000c0)=""/226, 0x44, 0xe2, 0x1}, 0x20) 09:43:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x7fff}, 0x2d) 09:43:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r0) 09:43:16 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 09:43:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4, 0xa1020000}]}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f00000000c0)=""/226, 0x32, 0xe2, 0x1}, 0x20) 09:43:16 executing program 3: 09:43:16 executing program 4: 09:43:16 executing program 2: 09:43:16 executing program 3: 09:43:16 executing program 2: 09:43:16 executing program 4: 09:43:16 executing program 5: 09:43:16 executing program 2: 09:43:16 executing program 4: 09:43:17 executing program 0: 09:43:17 executing program 1: 09:43:17 executing program 3: 09:43:17 executing program 5: 09:43:17 executing program 4: 09:43:17 executing program 2: 09:43:17 executing program 0: 09:43:17 executing program 5: 09:43:17 executing program 3: 09:43:17 executing program 2: 09:43:17 executing program 4: 09:43:17 executing program 0: 09:43:17 executing program 1: 09:43:17 executing program 3: 09:43:17 executing program 0: 09:43:17 executing program 5: 09:43:17 executing program 1: 09:43:17 executing program 4: 09:43:17 executing program 2: 09:43:17 executing program 3: 09:43:17 executing program 0: 09:43:17 executing program 5: 09:43:17 executing program 1: 09:43:17 executing program 2: 09:43:17 executing program 4: 09:43:17 executing program 5: 09:43:17 executing program 0: 09:43:17 executing program 3: 09:43:17 executing program 2: 09:43:17 executing program 4: 09:43:17 executing program 0: 09:43:17 executing program 5: 09:43:17 executing program 1: 09:43:17 executing program 3: 09:43:17 executing program 4: 09:43:17 executing program 2: 09:43:17 executing program 5: 09:43:17 executing program 0: 09:43:17 executing program 1: 09:43:17 executing program 3: 09:43:17 executing program 5: 09:43:17 executing program 4: 09:43:17 executing program 2: 09:43:17 executing program 0: 09:43:17 executing program 1: 09:43:17 executing program 3: sigaltstack(&(0x7f0000ffa000/0x4000)=nil, 0x0) mprotect(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3) 09:43:17 executing program 0: 09:43:18 executing program 2: 09:43:18 executing program 4: 09:43:18 executing program 1: 09:43:18 executing program 5: 09:43:18 executing program 3: 09:43:18 executing program 1: 09:43:18 executing program 4: 09:43:18 executing program 3: 09:43:18 executing program 0: 09:43:18 executing program 5: 09:43:18 executing program 2: 09:43:18 executing program 5: 09:43:18 executing program 4: 09:43:18 executing program 0: 09:43:18 executing program 2: 09:43:18 executing program 3: 09:43:18 executing program 1: 09:43:18 executing program 0: 09:43:18 executing program 5: 09:43:18 executing program 3: 09:43:18 executing program 4: 09:43:18 executing program 2: 09:43:18 executing program 1: 09:43:18 executing program 0: 09:43:18 executing program 3: 09:43:18 executing program 4: 09:43:18 executing program 5: 09:43:18 executing program 1: 09:43:18 executing program 2: 09:43:18 executing program 0: 09:43:18 executing program 3: 09:43:18 executing program 5: 09:43:18 executing program 4: 09:43:18 executing program 0: 09:43:18 executing program 2: 09:43:18 executing program 1: 09:43:18 executing program 3: 09:43:18 executing program 4: 09:43:18 executing program 5: 09:43:18 executing program 2: 09:43:18 executing program 0: 09:43:18 executing program 1: 09:43:18 executing program 3: 09:43:18 executing program 4: 09:43:18 executing program 0: 09:43:18 executing program 2: 09:43:18 executing program 5: 09:43:18 executing program 3: 09:43:18 executing program 1: 09:43:18 executing program 4: 09:43:18 executing program 2: 09:43:18 executing program 5: 09:43:18 executing program 0: 09:43:18 executing program 3: 09:43:18 executing program 1: 09:43:18 executing program 4: 09:43:18 executing program 5: 09:43:18 executing program 2: 09:43:18 executing program 0: 09:43:18 executing program 3: 09:43:18 executing program 1: 09:43:18 executing program 4: 09:43:18 executing program 0: 09:43:18 executing program 5: 09:43:18 executing program 2: 09:43:18 executing program 4: 09:43:18 executing program 3: 09:43:18 executing program 5: 09:43:18 executing program 1: 09:43:19 executing program 2: 09:43:19 executing program 0: 09:43:19 executing program 5: 09:43:19 executing program 4: 09:43:19 executing program 3: 09:43:19 executing program 1: 09:43:19 executing program 0: syz_mount_image$fuse(&(0x7f0000001240)='fuse\x00', &(0x7f0000001280)='./file0\x00', 0x0, 0x0, 0x0, 0x50020, &(0x7f00000012c0)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}}) 09:43:19 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f0000004580)={0x10}, 0x10}}, 0x0) 09:43:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:19 executing program 4: syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0x0, 0x400) 09:43:19 executing program 3: perf_event_open(&(0x7f0000002400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:43:19 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x7, 0x8f}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x6066f8b037950f63) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0xa2) sendfile(r3, r4, 0x0, 0x8400fffffffa) creat(&(0x7f0000000100)='./bus\x00', 0x0) 09:43:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) 09:43:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x22) 09:43:19 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) waitid(0x1, 0x0, &(0x7f0000000100), 0x2, 0x0) 09:43:19 executing program 3: select(0x0, 0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000a80)={0x0, 0x2710}) 09:43:19 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280), 0x4) 09:43:19 executing program 0: ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000100)={0x0, 0x3}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=""/151) r0 = semget$private(0x0, 0x0, 0x102) semctl$IPC_RMID(r0, 0x0, 0x0) ustat(0x4, &(0x7f0000000140)) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x1, 0x0, 0xa58, 0x7fff]) 09:43:19 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=i']) 09:43:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:19 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x8e5, 0x0, 0xfffffefe, 0x2, 0x12, "d7f11d55473900"}) 09:43:19 executing program 3: futex(0x0, 0x8b, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0), 0x0) [ 2652.225502][ T34] kauditd_printk_skb: 6 callbacks suppressed [ 2652.225513][ T34] audit: type=1804 audit(1606038199.334:350): pid=2248 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir807034910/syzkaller.62Pa9d/1112/bus" dev="sda1" ino=16370 res=1 errno=0 [ 2652.333219][ T34] audit: type=1804 audit(1606038199.394:351): pid=2254 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir807034910/syzkaller.62Pa9d/1112/bus" dev="sda1" ino=16370 res=1 errno=0 [ 2652.376940][ T2259] UDF-fs: error (device loop4): udf_fill_super: utf8 cannot be combined with iocharset [ 2652.483366][ T2259] UDF-fs: error (device loop4): udf_fill_super: utf8 cannot be combined with iocharset [ 2653.125958][ T34] audit: type=1804 audit(1606038200.234:352): pid=2280 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir807034910/syzkaller.62Pa9d/1112/bus" dev="sda1" ino=16370 res=1 errno=0 09:43:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000040), 0x4) 09:43:20 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0xee00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 09:43:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000080)=[{0x0}, {0x0, 0x0, 0x10dfe}], 0x0, &(0x7f00000000c0)=ANY=[]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfecc) ioctl$CHAR_RAW_ALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x80000101005, 0x0) r4 = dup2(r3, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) 09:43:20 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0x2}, {0x3, 0x1}], 0x2) 09:43:20 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=i']) [ 2653.184633][ T34] audit: type=1804 audit(1606038200.294:353): pid=2254 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir807034910/syzkaller.62Pa9d/1112/bus" dev="sda1" ino=16370 res=1 errno=0 09:43:20 executing program 2: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 2653.251015][ T2289] FAT-fs (loop3): bogus number of reserved sectors [ 2653.277568][ T2295] UDF-fs: error (device loop4): udf_fill_super: utf8 cannot be combined with iocharset 09:43:20 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=i']) 09:43:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:20 executing program 2: r0 = getpgid(0x0) setpriority(0x0, r0, 0xfffffffffffffffd) 09:43:20 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}]}}}]}, 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 09:43:20 executing program 0: clock_adjtime(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1ff}) [ 2653.295040][ T2289] FAT-fs (loop3): Can't find a valid FAT filesystem 09:43:20 executing program 0: clone(0x85002180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x9) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x0, 0x138, 0x0, 0x2c0, 0x228, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x3, 0x62}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x3}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}, {[], [], 0x4}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 09:43:20 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) clone(0x2800180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCDELDLCI(r0, 0x8981, 0x0) 09:43:20 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40000, 0x0) [ 2653.432782][ T2289] FAT-fs (loop3): bogus number of reserved sectors [ 2653.441808][ T2289] FAT-fs (loop3): Can't find a valid FAT filesystem [ 2653.468961][ T2321] UDF-fs: error (device loop4): udf_fill_super: utf8 cannot be combined with iocharset 09:43:20 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10125) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600000000000001006c6e00000200030000200000000800010096000000000000fc0000000000200001"], 0x2d) close(r0) clone(0x2800180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 09:43:20 executing program 0: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/68) 09:43:20 executing program 2: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000000)=""/118) 09:43:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:20 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=i']) 09:43:20 executing program 2: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0x0, 0x0, 0x0, 0xee00}}) msgsnd(0xffffffffffffffff, &(0x7f00000000c0)={0x0, "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"}, 0x1008, 0x0) msgctl$IPC_RMID(0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) 09:43:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) [ 2653.639595][ T2366] UDF-fs: error (device loop4): udf_fill_super: utf8 cannot be combined with iocharset 09:43:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) request_key(0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) setuid(0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x74, 0x2) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=0x0, @ANYBLOB="5dceb5fa8d0756995167dc7f926313d29402ad792bbb8ddadd746df1c4012673581b1cc13db1e3076711512efbbc43061958863b93afadd439258d692531db8146f050", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYBLOB, @ANYRES32=0xee01, @ANYBLOB="040002000000000008000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="10000000000000002000070000000000"], 0x84, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:43:21 executing program 3: pselect6(0x6a, &(0x7f0000000040), &(0x7f0000000180), 0x0, &(0x7f0000000200), 0x0) 09:43:21 executing program 0: perf_event_open(&(0x7f00000010c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x935d94e2ab7f21ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:43:21 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r1}) 09:43:21 executing program 2: pipe(&(0x7f0000004f00)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, 0x0, 0x0) 09:43:21 executing program 4: syz_mount_image$udf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=i']) 09:43:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x248, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'batadv0\x00', 'veth1_macvtap\x00'}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40, 'set\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 09:43:21 executing program 2: syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 09:43:21 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x7f, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) [ 2654.290902][ T2389] IPVS: ftp: loaded support on port[0] = 21 [ 2654.298712][ T2391] x_tables: duplicate underflow at hook 3 09:43:21 executing program 4: syz_mount_image$udf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=i']) 09:43:21 executing program 0: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:43:21 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r1}) [ 2654.334289][ T2395] fuse: Bad value for 'fd' [ 2654.339523][ T2395] fuse: Bad value for 'fd' [ 2654.434324][ T2389] IPVS: ftp: loaded support on port[0] = 21 09:43:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) request_key(0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) setuid(0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x74, 0x2) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="02000000010004000000000002000000", @ANYRES32=0x0, @ANYBLOB="5dceb5fa8d0756995167dc7f926313d29402ad792bbb8ddadd746df1c4012673581b1cc13db1e3076711512efbbc43061958863b93afadd439258d692531db8146f050", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYBLOB, @ANYRES32=0xee01, @ANYBLOB="040002000000000008000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="10000000000000002000070000000000"], 0x84, 0x0) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:43:21 executing program 2: getitimer(0x1, &(0x7f00000001c0)) 09:43:21 executing program 0: syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@uid_gt={'uid>'}}]}}) 09:43:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) request_key(0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x74, 0x2) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000240), 0x0) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:43:21 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r1}) 09:43:21 executing program 4: syz_mount_image$udf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=i']) 09:43:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) 09:43:22 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x3a) [ 2654.841676][ T2443] IPVS: ftp: loaded support on port[0] = 21 [ 2654.855711][ T2446] IPVS: ftp: loaded support on port[0] = 21 [ 2654.866506][ T2448] fuse: Bad value for 'fd' 09:43:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) [ 2654.930154][ T2448] fuse: Bad value for 'fd' 09:43:22 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', 0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=i']) 09:43:22 executing program 0: socket$inet6(0xa, 0x1, 0x3) [ 2654.993764][ T2500] IPVS: ftp: loaded support on port[0] = 21 09:43:22 executing program 2: socket(0x2, 0x0, 0x7f048221) 09:43:22 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x8, 0x1000}], 0x1, &(0x7f0000000100)={0x77359400}) 09:43:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) request_key(0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x74, 0x2) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000240), 0x0) getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:43:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) 09:43:22 executing program 2: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) io_submit(0x0, 0x0, 0x0) exit(0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x24040810) getresgid(0x0, &(0x7f0000000640), &(0x7f0000000680)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 09:43:22 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', 0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=i']) 09:43:22 executing program 0: select(0x40, &(0x7f0000000040)={0x7}, 0x0, 0x0, 0x0) 09:43:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x34}}, 0x0) 09:43:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) [ 2655.243998][ T2551] IPVS: ftp: loaded support on port[0] = 21 09:43:22 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0x0, 0x0, 0x7}, 0x1c) 09:43:22 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', 0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=i']) 09:43:22 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x3, 'wlan0\x00', {0x2}}) 09:43:22 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000080)) 09:43:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) [ 2655.438532][ T2595] xt_NFQUEUE: number of total queues is 0 09:43:22 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000004c0)) 09:43:22 executing program 0: socket(0x0, 0xcd23d003284fbc61, 0x0) 09:43:22 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0xec4, 0x464, 0x0, 0x0, 0x0, "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"}, 0xec4}}, 0x0) 09:43:22 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=i']) 09:43:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:22 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x3, 'wlan0\x00', {0x2}}) [ 2655.539906][ T2595] xt_NFQUEUE: number of total queues is 0 09:43:22 executing program 1: clock_adjtime(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x100, 0x20, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x100, 0x5, 0x1f, 0xb3, 0x2, 0x2, 0xffffffff, 0xf7ea, 0x5, 0x2a408fe5, 0x7ff, 0x82}) 09:43:22 executing program 0: futex(&(0x7f0000002040), 0x0, 0x0, &(0x7f0000002080)={0x0, 0x3938700}, 0x0, 0x0) 09:43:22 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=i']) [ 2655.636132][ T2634] xt_NFQUEUE: number of total queues is 0 09:43:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r1}) 09:43:22 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080), 0x14) 09:43:22 executing program 1: syz_read_part_table(0x7fff, 0x0, 0x0) 09:43:22 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x3, 'wlan0\x00', {0x2}}) 09:43:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r1}) 09:43:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) socket$inet6(0xa, 0x2, 0x0) 09:43:22 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=i']) 09:43:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r1}) 09:43:23 executing program 0: getgroups(0x1, &(0x7f0000000040)=[0x0]) [ 2655.853697][ T2666] xt_NFQUEUE: number of total queues is 0 [ 2655.873442][ T2670] xt_NFQUEUE: number of total queues is 0 [ 2655.881188][ T2670] xt_NFQUEUE: number of total queues is 0 09:43:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 09:43:23 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) 09:43:23 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r1}) 09:43:23 executing program 0: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x1ff) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fffe8ff3506000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000d05bd98c13cc170962bd1735140ecd8c3c090c1072248445f9fa9869473a88519df1465870fbe7f8c01c982af9f45358e3ba87d439c072c05961f932fdc5a905e67bc08627d42de2a4d7936fa2f4d9c817c5f71e0f46c0b890022865a94531b0ec9aec627e77235846bfbcd7c3e23339be6da4d03de41cfb8277313a5798c7f19dde0ef085bde2ed2bb7277330b4d981ee32f81913c7a962a1975e498d6fdecf6fb3086de88ffe7f46571e1a5953acdb3fa929e51bffed9b9dc694c9f7ea6cc09e1aeacf7619e53699d182719e2b20c57711d31609289beba1b1feb8c391aefbd114821dcd7cbbbf1298f663e75a733518e14641a51672909671fb51b8fdb2294e540e4753630a4b3d7457c0c392ffb7ddcf392becbabafdeb6be1d19f1917f4fba7028ad90d72c7832b2130f839e737782eb26bee0751f2fd0ea40458c53d4dffccc5369078d4f207f24cbce78ae82937ee0dfffffa09e78939c9c9f9cae86f8e64e98f580c100c8e575904e1734b80f297f532d30a35a8e78705c798e0462d26e66de5e4be161e8b1242a914c0a653e85ca644d0b67966fc4ca4fc53b2018fda3aa98998a7ed47cd02ccbc211fc65c0ea1fe5b8a0f0a9535585e06cc7824358faa27be8deca4464dd2e62279870ae9e1d95c9ce58a03b245e8a1b006b625b1566ef9798b3f9fdfd66faf0474d91a28c4038a39d4e44395a3615a77771503d04ff717b754df4eb21364204e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) io_submit(0x0, 0x0, 0x0) exit(0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) getresgid(0x0, &(0x7f0000000640), &(0x7f0000000680)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x30, 0xffffffffffffffff, 0x995c0000) 09:43:23 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x3, 'wlan0\x00', {0x2}}) 09:43:23 executing program 1: futex(&(0x7f0000000000), 0x4, 0x0, 0x0, &(0x7f0000000100), 0x0) 09:43:23 executing program 3: prctl$PR_SET_TIMERSLACK(0x1d, 0x10001) 09:43:23 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) [ 2656.063103][ T2700] xt_NFQUEUE: number of total queues is 0 [ 2656.119971][ T2710] xt_NFQUEUE: number of total queues is 0 09:43:23 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) dup2(0xffffffffffffffff, 0xffffffffffffffff) 09:43:23 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r1}) 09:43:23 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000200)=""/148, 0x94}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x7f, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) 09:43:23 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) 09:43:23 executing program 3: futex(&(0x7f0000000240)=0x1, 0x80, 0x1, &(0x7f0000000280), 0x0, 0x0) [ 2656.202440][ T2724] xt_NFQUEUE: number of total queues is 0 09:43:23 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:23 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r1}) [ 2656.383944][ T2747] xt_NFQUEUE: number of total queues is 0 09:43:23 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map}, 0x10) 09:43:23 executing program 1: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000080)=""/211) 09:43:23 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) 09:43:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:23 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) 09:43:23 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 09:43:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 09:43:24 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[]) 09:43:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x0, 0x138, 0x0, 0x2c0, 0x228, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@loopback, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}, {[], [], 0x4}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 09:43:24 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x1) 09:43:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:24 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 09:43:24 executing program 0: [ 2656.961853][ T2787] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 2657.016863][ T2794] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 09:43:24 executing program 0: 09:43:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:24 executing program 3: 09:43:24 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 2657.098039][ T2800] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2657.116641][ T2800] UDF-fs: Scanning with blocksize 512 failed [ 2657.178352][ T2800] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found 09:43:24 executing program 0: 09:43:24 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x9, 0x410000) [ 2657.229792][ T2800] UDF-fs: Scanning with blocksize 1024 failed [ 2657.236013][ T2800] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2657.256505][ T2800] UDF-fs: Scanning with blocksize 2048 failed [ 2657.277493][ T2800] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2657.290564][ T2800] UDF-fs: Scanning with blocksize 4096 failed 09:43:24 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[]) 09:43:24 executing program 3: 09:43:24 executing program 1: 09:43:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:24 executing program 0: 09:43:24 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:24 executing program 3: [ 2657.439032][ T2835] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2657.446629][ T2835] UDF-fs: Scanning with blocksize 512 failed [ 2657.465470][ T2835] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2657.526839][ T2835] UDF-fs: Scanning with blocksize 1024 failed 09:43:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:24 executing program 3: 09:43:24 executing program 0: 09:43:24 executing program 1: [ 2657.599716][ T2835] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2657.621939][ T2835] UDF-fs: Scanning with blocksize 2048 failed [ 2657.640248][ T2835] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found 09:43:24 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x9, 0x410000) [ 2657.661011][ T2835] UDF-fs: Scanning with blocksize 4096 failed 09:43:24 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[]) 09:43:24 executing program 1: 09:43:24 executing program 3: 09:43:24 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:24 executing program 0: 09:43:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:24 executing program 0: 09:43:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:25 executing program 1: 09:43:25 executing program 3: 09:43:25 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) [ 2657.843982][ T2883] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found 09:43:25 executing program 1: [ 2657.901388][ T2883] UDF-fs: Scanning with blocksize 512 failed [ 2657.946972][ T2883] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2657.965327][ T2883] UDF-fs: Scanning with blocksize 1024 failed [ 2657.971736][ T2883] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2657.982112][ T2883] UDF-fs: Scanning with blocksize 2048 failed [ 2657.989541][ T2883] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2657.996940][ T2883] UDF-fs: Scanning with blocksize 4096 failed 09:43:25 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB]) 09:43:25 executing program 3: 09:43:25 executing program 0: 09:43:25 executing program 1: 09:43:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:25 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:25 executing program 3: 09:43:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:25 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:25 executing program 1: 09:43:25 executing program 0: 09:43:25 executing program 1: [ 2658.153732][ T2908] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2658.180044][ T2908] UDF-fs: Scanning with blocksize 512 failed [ 2658.208086][ T2908] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2658.216718][ T2908] UDF-fs: Scanning with blocksize 1024 failed [ 2658.233116][ T2908] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2658.244518][ T2908] UDF-fs: Scanning with blocksize 2048 failed [ 2658.254626][ T2908] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2658.285008][ T2908] UDF-fs: Scanning with blocksize 4096 failed 09:43:25 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB]) 09:43:25 executing program 3: 09:43:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:25 executing program 0: 09:43:25 executing program 1: 09:43:25 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:25 executing program 3: 09:43:25 executing program 0: [ 2658.421696][ T2940] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2658.433361][ T2940] UDF-fs: Scanning with blocksize 512 failed [ 2658.445840][ T2940] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2658.456291][ T2940] UDF-fs: Scanning with blocksize 1024 failed [ 2658.462682][ T2940] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found 09:43:25 executing program 1: 09:43:25 executing program 3: 09:43:25 executing program 1: 09:43:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) [ 2658.476417][ T2940] UDF-fs: Scanning with blocksize 2048 failed [ 2658.491322][ T2940] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2658.504108][ T2940] UDF-fs: Scanning with blocksize 4096 failed 09:43:25 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB]) 09:43:25 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:25 executing program 0: 09:43:25 executing program 1: 09:43:25 executing program 0: 09:43:25 executing program 3: 09:43:25 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:25 executing program 0: [ 2658.678101][ T2972] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2658.714941][ T2972] UDF-fs: Scanning with blocksize 512 failed 09:43:25 executing program 1: 09:43:25 executing program 3: [ 2658.751288][ T2972] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2658.802066][ T2972] UDF-fs: Scanning with blocksize 1024 failed 09:43:26 executing program 0: [ 2658.850507][ T2972] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2658.901532][ T2972] UDF-fs: Scanning with blocksize 2048 failed [ 2658.942679][ T2972] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2658.953161][ T2972] UDF-fs: Scanning with blocksize 4096 failed 09:43:26 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=000000000']) 09:43:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:26 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:26 executing program 3: 09:43:26 executing program 1: 09:43:26 executing program 0: 09:43:26 executing program 1: 09:43:26 executing program 3: 09:43:26 executing program 0: [ 2659.089129][ T3007] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2659.103422][ T3007] UDF-fs: Scanning with blocksize 512 failed [ 2659.116009][ T3007] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2659.126875][ T3007] UDF-fs: Scanning with blocksize 1024 failed 09:43:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:26 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:26 executing program 1: [ 2659.136668][ T3007] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2659.147459][ T3007] UDF-fs: Scanning with blocksize 2048 failed [ 2659.153773][ T3007] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2659.168106][ T3007] UDF-fs: Scanning with blocksize 4096 failed 09:43:26 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=000000000']) 09:43:26 executing program 3: 09:43:26 executing program 0: 09:43:26 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:26 executing program 1: 09:43:26 executing program 3: 09:43:26 executing program 0: 09:43:26 executing program 1: [ 2659.341086][ T3047] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2659.352963][ T3047] UDF-fs: Scanning with blocksize 512 failed [ 2659.359240][ T3047] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2659.366655][ T3047] UDF-fs: Scanning with blocksize 1024 failed [ 2659.373354][ T3047] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2659.380774][ T3047] UDF-fs: Scanning with blocksize 2048 failed 09:43:26 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:26 executing program 0: 09:43:26 executing program 3: [ 2659.392901][ T3047] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2659.407905][ T3047] UDF-fs: Scanning with blocksize 4096 failed 09:43:26 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=000000000']) 09:43:26 executing program 1: 09:43:26 executing program 0: 09:43:26 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:26 executing program 3: 09:43:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:26 executing program 1: 09:43:26 executing program 3: [ 2659.583802][ T3073] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found 09:43:26 executing program 3: [ 2659.657102][ T3073] UDF-fs: Scanning with blocksize 512 failed [ 2659.689611][ T3073] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found 09:43:26 executing program 1: 09:43:26 executing program 0: 09:43:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) [ 2659.705270][ T3073] UDF-fs: Scanning with blocksize 1024 failed [ 2659.724233][ T3073] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2659.744718][ T3073] UDF-fs: Scanning with blocksize 2048 failed [ 2659.761782][ T3073] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2659.778477][ T3073] UDF-fs: Scanning with blocksize 4096 failed 09:43:26 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide']) 09:43:26 executing program 1: 09:43:26 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:26 executing program 0: 09:43:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x14, 0x4, 0x8, 0x201}, 0x14}}, 0x0) 09:43:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) 09:43:27 executing program 0: syz_mount_image$fuse(&(0x7f0000000140)='fuse\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}}) 09:43:27 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000200)) 09:43:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'macvtap0\x00', {}, 0x6f2}) [ 2659.924662][ T3118] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2659.972181][ T3127] fuse: Bad value for 'fd' [ 2659.978621][ T3127] fuse: Bad value for 'fd' [ 2659.987122][ T3118] UDF-fs: Scanning with blocksize 512 failed [ 2659.995654][ T3118] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2660.003443][ T3118] UDF-fs: Scanning with blocksize 1024 failed [ 2660.014137][ T3118] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found 09:43:27 executing program 0: mq_open(&(0x7f0000000300)='batadv0\x00', 0x40, 0x0, 0x0) [ 2660.022627][ T3118] UDF-fs: Scanning with blocksize 2048 failed [ 2660.028946][ T3118] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2660.036334][ T3118] UDF-fs: Scanning with blocksize 4096 failed 09:43:27 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide']) 09:43:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) 09:43:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x21, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:43:27 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8971, 0x0) 09:43:27 executing program 1: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f00000008c0)={[{@utf8='utf8=1'}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xaa8) 09:43:27 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:27 executing program 0: mq_open(&(0x7f0000000300)='batadv0\x00', 0x40, 0x0, &(0x7f0000000340)={0x7fffffff, 0x3, 0x0, 0x3}) [ 2660.170103][ T3153] FAT-fs (loop1): bogus number of reserved sectors [ 2660.187760][ T3159] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found 09:43:27 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:27 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r0, 0x80108906, 0x0) [ 2660.211642][ T3153] FAT-fs (loop1): Can't find a valid FAT filesystem [ 2660.224770][ T3159] UDF-fs: Scanning with blocksize 512 failed 09:43:27 executing program 0: openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x220102, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r0, 0x5460, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000008b40)={'batadv0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000008b40)={'batadv0\x00'}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000008b40)={'batadv0\x00'}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000040)={0x0, 'dummy0\x00', {}, 0x1a88}) [ 2660.252147][ T3159] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2660.265278][ T3159] UDF-fs: Scanning with blocksize 1024 failed [ 2660.275961][ T3159] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2660.283625][ T3159] UDF-fs: Scanning with blocksize 2048 failed [ 2660.291083][ T3159] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found 09:43:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) 09:43:27 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) [ 2660.302305][ T3159] UDF-fs: Scanning with blocksize 4096 failed [ 2660.329026][ T3153] FAT-fs (loop1): bogus number of reserved sectors [ 2660.343285][ T3153] FAT-fs (loop1): Can't find a valid FAT filesystem 09:43:27 executing program 0: r0 = openat$zero(0xffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x100953, r0, 0x0) 09:43:27 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide']) 09:43:27 executing program 3: prctl$PR_GET_FP_MODE(0x2f) 09:43:27 executing program 2: clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:27 executing program 1: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0x0, 0x0) 09:43:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:27 executing program 0: keyctl$link(0x8, 0x0, 0xfffffffffffffffa) 09:43:27 executing program 3: r0 = openat$vcsa(0xffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) read$alg(r0, &(0x7f0000000100)=""/207, 0xcf) [ 2660.469185][ T3206] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2660.503914][ T3206] UDF-fs: Scanning with blocksize 512 failed [ 2660.527219][ T3206] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2660.543059][ T3206] UDF-fs: Scanning with blocksize 1024 failed [ 2660.553711][ T3206] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 2660.561353][ T3206] UDF-fs: Scanning with blocksize 2048 failed [ 2660.567670][ T3206] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found 09:43:27 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)='./bus/file0\x00') mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000340)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[]) 09:43:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) [ 2660.576981][ T3206] UDF-fs: Scanning with blocksize 4096 failed 09:43:27 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000480)) 09:43:27 executing program 0: 09:43:27 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,ioc']) 09:43:27 executing program 0: r0 = getpid() process_vm_readv(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/212, 0xd4}], 0x1, &(0x7f0000000440)=[{&(0x7f0000000240)=""/85, 0x55}, {0x0}], 0x2, 0x0) 09:43:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) [ 2660.695091][ T3237] nfqueue_tg_check: 21 callbacks suppressed [ 2660.695105][ T3237] xt_NFQUEUE: number of total queues is 0 09:43:27 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/162, 0xa2}, {0x0}, {&(0x7f00000001c0)=""/71, 0x47}], 0x3}, 0x7f}, {{&(0x7f0000000280)=@x25, 0x80, &(0x7f0000001640)=[{&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/244, 0xf4}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000001600)=""/15, 0xf}], 0x4, &(0x7f0000001680)=""/90, 0x5a}}], 0x2, 0x0, &(0x7f0000001740)={0x0, 0x3938700}) syz_read_part_table(0x1000, 0x9, &(0x7f0000002180)=[{&(0x7f0000001c00)="0546daf49bd67eb06354ebe0541f5ecbcd4f8d6db92ef77af0adb88fcb640d5a8ed3b5103d16164d8ac6bb6bb69afeb6888134ea0eab2e978925a5fd316426a2de9db2ebe6f2e8984df7f3664ac898504f323a739be70ae6ad564d9b17d6b3959b89603037af0c5d6f966715b727e53ec2711d95edf71de8ba425781f9085841df226a889e85aa4716e392ee4fbee49ff9b7e43fd9bba52551e20a877459c41d9acb8b427c", 0xa5, 0x2}, {&(0x7f0000001cc0)="ce13895c3d50b68f8b3d82574e1663d5b109ad3896da0dc6ba2ac7bb5a1bafbacd32c9fc2c6dc43eabdef859fff660cb275c12101e4345ae7ede5d1931f974280bf6a92c4e3c0ac6d276071efb0a3582621102d1d81dbf087f4816ea3c92e858a26ebd2c654b11b7abfcc0e93b0ed827d3484a520365f99f3e8e4091e305faed3f8766f65878ca05ec62c3c86df531f438ba76b942d845070a97d5309c888b31d1eae61ee68fca58904cdc12fee01b408127d22501529a7855f8dc6e70b5348672bc81f8b1cd9e1b2dd638dfec9cd141e2a3241e0872a5abebaa14a56653e5005dfc17c4e55f68e7bceb70", 0xeb, 0xff}, {&(0x7f0000001dc0)="79bd2accafe6aa90350414d79fb46a50cceb6b8e968c082e49f5f38ae9da77e567c1d02b890f8ddadc7e09d69a197d24665f50b449a001f26717cb0bcf22d76f13a12df4d180396d6297aceb9a7fe1918ca7eb10fd78bd639f69c2c424f0d29c23cc9bf0968d51e43446b5ad7700", 0x6e, 0x400}, {&(0x7f0000001e40)="594af4111bb9e8d2701760f2459be57b4f60407e005d8a2501d35e841c88cb392002610cc0706bb00fd1918520ecc1a108892a36f1d4d8e5729049fbc9752ce757e4c8b25dd33b90ec65c084652e0efc3f66eac17060dff3a0758fbf53a74c72cd1b2845ffea801710cc66dddc314423c3a5a70787dbe159aca03c5db4561a429dca0b511764839ef661984b4fdaa583bd06e1c935f3d580dfa1b430c6b4b9cc57e782a02bad524a06d92c1ca23da3e978c5b00babb1ce193a568556bd23a6f8481c33ff", 0xc4, 0x5}, {&(0x7f0000001f40)="9d7b5c17ea670030037c6c185591d8ad4d0fedd95b272d19e4a0fb971b67b72439088f965c535189143b74f9aede4e83e5ffdedc9f9e24943e7b45c00ca55c6f9a4344190d02fae5e46a19778918b71998fe4cdc585797f4e09c13bfad9902", 0x5f, 0x898}, {&(0x7f0000001fc0)="23e9cd2054cb9167f53877782f61eff8374e3f1294b8", 0x16, 0x6}, {&(0x7f0000002000)="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", 0xfe, 0x8000000}, {&(0x7f0000002100)="6f1edeac0554898ab7c91a08e1b7dfd786f0376049020eb7588ce0fe97bbefc8701828c42be57fafb89433822fa7d8b3105e913807450a9120ea98f61e6c5f", 0x3f, 0x3}, {&(0x7f0000002140)="f28fd4d3315e4366521cf393003f1762", 0x10, 0xad1a}]) 09:43:27 executing program 1: add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="cc", 0x1, 0xfffffffffffffffb) 09:43:27 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r1}) [ 2660.751701][ T3243] UDF-fs: bad mount option "ioc" or missing value 09:43:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010efa8c68d0058b7a34f00000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010efa8c68d0058b7a34f00000000000a20000000020301"], 0xcc}}, 0x0) 09:43:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:27 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,ioc']) 09:43:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x5004}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 09:43:28 executing program 3: getresuid(&(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002400)) [ 2660.842248][ T3264] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2660.862577][ T3269] xt_NFQUEUE: number of total queues is 0 09:43:28 executing program 0: timer_create(0x0, &(0x7f00000009c0)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000a00)) timer_gettime(0x0, 0x0) 09:43:28 executing program 1: clone(0x80000000, 0x0, 0x0, 0x0, 0x0) 09:43:28 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r1}) 09:43:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) [ 2660.953582][ T3280] UDF-fs: bad mount option "ioc" or missing value 09:43:28 executing program 0: prctl$PR_GET_FP_MODE(0x4) 09:43:28 executing program 3: sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)) gettid() 09:43:28 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r0, 0x894c, 0x0) 09:43:28 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,ioc']) [ 2661.020676][ T3292] xt_NFQUEUE: number of total queues is 0 09:43:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:28 executing program 3: r0 = add_key$keyring(&(0x7f0000001840)='keyring\x00', &(0x7f0000001880)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f00000018c0)='mptcp_pm\x00') 09:43:28 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r1}) 09:43:28 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iochars']) [ 2661.132179][ T3313] UDF-fs: bad mount option "ioc" or missing value 09:43:28 executing program 0: process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x8) [ 2661.178572][ T3320] xt_NFQUEUE: number of total queues is 0 09:43:28 executing program 1: r0 = io_uring_setup(0x391a, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f0000000300)='/dev/vcsu#\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1, r2, 0xffffffffffffffff], 0x3) 09:43:28 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) [ 2661.224304][ T3326] UDF-fs: bad mount option "iochars" or missing value 09:43:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:28 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r0, 0x40049409, &(0x7f00000000c0)) 09:43:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:28 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iochars']) 09:43:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) [ 2661.353461][ T3348] overlayfs: filesystem on './bus' not supported as upperdir [ 2661.363579][ T3350] UDF-fs: bad mount option "iochars" or missing value [ 2661.373514][ T3354] xt_NFQUEUE: number of total queues is 0 09:43:28 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:28 executing program 0: prctl$PR_GET_FP_MODE(0x26) 09:43:28 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iochars']) 09:43:28 executing program 1: clone(0x40040200, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) 09:43:28 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0xb, 0x0, 0x0, 0x18}]}, &(0x7f00000013c0)='GPL\x00', 0x5, 0xc8, &(0x7f0000001400)=""/200, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:43:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:28 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) [ 2661.509030][ T3373] UDF-fs: bad mount option "iochars" or missing value [ 2661.535863][ T3379] IPVS: ftp: loaded support on port[0] = 21 [ 2661.572667][ T3388] xt_NFQUEUE: number of total queues is 0 09:43:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:28 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset']) 09:43:28 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0xa, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) 09:43:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) [ 2661.701244][ T3379] IPVS: ftp: loaded support on port[0] = 21 09:43:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:28 executing program 0: inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000000) [ 2661.744674][ T3424] UDF-fs: bad mount option "iocharset" or missing value [ 2661.755318][ T3436] xt_NFQUEUE: number of total queues is 0 09:43:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:43:29 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:29 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset']) 09:43:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x1, 0x101}, 0x14}}, 0x0) 09:43:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) [ 2661.919371][ T3465] xt_NFQUEUE: number of total queues is 0 [ 2661.928020][ T3463] UDF-fs: bad mount option "iocharset" or missing value 09:43:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x19, 0x0, 0x0) 09:43:29 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:29 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset']) 09:43:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/151, 0x97}], 0x1, 0x0, 0x0) ioctl$CHAR_RAW_SECDISCARD(0xffffffffffffffff, 0x127d, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000240)=0x8) stat(&(0x7f0000002c00)='./file0\x00', &(0x7f0000002c40)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002cc0), &(0x7f0000002d00)=0xc) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3b0, 0xe0, 0xe0, 0x1ec, 0x2d0, 0x2d0, 0x2d0, 0x4, &(0x7f0000000280), {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr, 0x1}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffff, 0x6}}}], {{[], 0xbc, 0xe0}, {0x24}}}}, 0x3fc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11f08) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 2662.059574][ T3481] UDF-fs: bad mount option "iocharset" or missing value 09:43:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:29 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=']) [ 2662.115456][ T3488] xt_NFQUEUE: number of total queues is 0 09:43:29 executing program 0: openat$vcsu(0xffffff9c, &(0x7f00000002c0)='/dev/vcsu\x00', 0x3e3101, 0x0) 09:43:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:29 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') [ 2662.216744][ T3502] UDF-fs: bad mount option "iocharset=" or missing value 09:43:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, 0xa, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}}, 0x0) [ 2662.292976][ T3513] xt_NFQUEUE: number of total queues is 0 09:43:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:29 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=']) 09:43:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/151, 0x97}], 0x1, 0x0, 0x0) ioctl$CHAR_RAW_SECDISCARD(0xffffffffffffffff, 0x127d, 0x0) r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000240)=0x8) stat(&(0x7f0000002c00)='./file0\x00', &(0x7f0000002c40)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002cc0), &(0x7f0000002d00)=0xc) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3b0, 0xe0, 0xe0, 0x1ec, 0x2d0, 0x2d0, 0x2d0, 0x4, &(0x7f0000000280), {[{{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @rand_addr, 0x1}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xffff, 0x6}}}], {{[], 0xbc, 0xe0}, {0x24}}}}, 0x3fc) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11f08) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 09:43:29 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:29 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:29 executing program 0: clone(0x20982d00, 0x0, 0x0, 0x0, 0x0) 09:43:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000002000000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x3, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0) [ 2662.454348][ T3529] UDF-fs: bad mount option "iocharset=" or missing value 09:43:29 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:29 executing program 4: syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='noadinicb,nostrict,session=00000000000000000001,unhide,utf8,iocharset=']) [ 2662.525292][ T3544] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 2662.562231][ T3549] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 09:43:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:29 executing program 1: perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x4000, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000880)='./file0\x00', 0x0, 0x3, &(0x7f0000000b80)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x10e00}, {&(0x7f00000002c0)="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", 0x504, 0xe7}], 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="753466380d76757c67383dd1bb312cbd4acacbbf895ee50daaf9f2558d9f6faa6c03771be41ef60fb85a05118451e3ad1c190ffd62beb9"]) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r1 = creat(0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000940)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x24040080) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x4}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1300000065fffb07000000060039503230303037ccde50fcde1656c51f31adb875373b9eb7a85c3191072ef846cee56263aae078c40cc38f4cd061edc70656d3852e7e7895d469a40eb0e4de3dc306823b6524d35a497bb19b25e1e8e48442ac61229b5f3fcd8a7c8f27911e035725c241b4f77b124d73179264afb5ab0c129429bbd24957e5b2"], 0x13) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a80)={r1, &(0x7f0000000a00)="d7a115331d5d5daf95dcf4fa13b10d9cf18ad52766aa9d1603ebb35b0ce7704cd75616caa80d31ccc9ef58b9c3e401c8a66c7df420b491e65be2b8f96f102505fe154fb6108abd0a9381d96a60a91de206877f6d8f2b58bbc21332615bb6aa72c406fd24f430c071a14dbd4ad791d676868f0aa6ceac295c2ab3", 0x0}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001c80)=ANY=[], 0xde) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, &(0x7f0000000240)) close(0xffffffffffffffff) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000980), 0x0) r3 = openat$vcs(0xffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x103940, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0xaa8) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000008c0)='trusted.overlay.nlink\x00', &(0x7f00000009c0)={'L+', 0x4}, 0x16, 0x1) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 2662.610403][ T3558] UDF-fs: bad mount option "iocharset=" or missing value 09:43:29 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/162, 0xa2}, {0x0}, {&(0x7f00000001c0)=""/71, 0x47}], 0x3}, 0x7f}, {{&(0x7f0000000280)=@x25, 0x80, &(0x7f0000001640)=[{&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000400)=""/244, 0xf4}, {&(0x7f0000000500)=""/203, 0xcb}, {&(0x7f0000001600)=""/15, 0xf}], 0x4, &(0x7f0000001680)=""/90, 0x5a}, 0x1}], 0x2, 0x0, &(0x7f0000001740)={0x0, 0x3938700}) syz_read_part_table(0x1000, 0x8, &(0x7f0000002180)=[{&(0x7f0000001cc0)="ce13895c3d50b68f8b3d82574e1663d5b109ad3896da0dc6ba2ac7bb5a1bafbacd32c9fc2c6dc43eabdef859fff660cb275c12101e4345ae7ede5d1931f974280bf6a92c4e3c0ac6d276071efb0a3582621102d1d81dbf087f4816ea3c92e858a26ebd2c654b11b7abfcc0e93b0ed827d3484a520365f99f3e8e4091e305faed3f8766f65878ca05ec62c3c86df531f438ba76b942d845070a97d5309c888b31d1eae61ee68fca58904cdc12fee01b4081", 0xb1, 0xff}, {&(0x7f0000001dc0)="79bd2accafe6aa90350414d79fb46a50cceb6b8e968c082e49f5f38ae9da77e567c1d02b890f8ddadc7e09d69a197d24665f50b449a001f26717cb0bcf22d76f13a12df4d180396d6297aceb9a7fe1918ca7eb10fd78bd639f69c2c424f0d29c23cc9bf0968d51e43446b5ad7700", 0x6e, 0x400}, {&(0x7f0000001e40)="594af4111bb9e8d2701760f2459be57b4f60407e005d8a2501d35e841c88cb392002610cc0706bb00fd1918520ecc1a108892a36f1d4d8e5729049fbc9752ce757e4c8b25dd33b90ec65c084652e0efc3f66eac17060dff3a0758fbf53a74c72cd1b2845ffea801710cc66dddc314423c3a5a70787dbe159aca03c5db4561a429dca0b511764839ef661984b4fdaa583bd06e1c935f3d580dfa1b430c6b4b9cc57e782a02bad524a06d92c1ca23da3e978c5b00babb1ce193a568556bd23a6f8481c33ff03def35a5c47d0e7ee3af3e718d5f9061ac9b3c2d127f7e107", 0xdd, 0x5}, {&(0x7f0000001f40)="9d7b5c17ea670030037c6c185591d8ad4d0fedd95b272d19e4a0fb971b67b72439088f965c535189143b74f9aede4e83e5ffdedc9f9e24943e7b45c00ca55c6f9a4344190d02fae5e46a19778918b71998fe4cdc585797f4e09c13bfad9902", 0x5f, 0x898}, {&(0x7f0000001fc0)="23e9cd2054cb9167f53877782f61eff8374e3f1294b8", 0x16, 0x6}, {0x0, 0x0, 0x8000000}, {&(0x7f0000002100)="6f1edeac0554898ab7c91a08e1b7dfd786f0376049020eb7588ce0fe97bbefc8701828c42be57fafb89433822fa7d8b3105e913807450a9120ea98f61e6c5f", 0x3f, 0x3}, {&(0x7f0000002140)="f28fd4d3315e4366", 0x8, 0xad1a}]) 09:43:29 executing program 4: r0 = io_uring_setup(0x391a, &(0x7f0000000080)) r1 = syz_open_dev$vcsu(&(0x7f0000000300)='/dev/vcsu#\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1, r2, 0xffffffffffffffff], 0x3) 09:43:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:29 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:29 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) [ 2662.725210][ T3573] FAT-fs (loop1): Unrecognized mount option "u4f8vu|g8=ѻ1" or missing value 09:43:29 executing program 0: socket(0x2, 0x0, 0xfffff226) 09:43:29 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') [ 2662.825050][ T3573] FAT-fs (loop1): Unrecognized mount option "u4f8vu|g8=ѻ1" or missing value 09:43:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:30 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:43:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_u8={{0xd}}], 0x10}}], 0x1, 0x4008840) 09:43:30 executing program 0: setreuid(0xee00, 0xee00) syz_io_uring_setup(0x443e, &(0x7f00000005c0), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000640), &(0x7f0000000680)) 09:43:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:30 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0xfffffff8}, 0x8) 09:43:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:30 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000002000000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}}, 0x0) 09:43:30 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x0, {0xa88, {0x74ad7246b8e3c1d5, 0x4, 0x6}, 0x310, 0x0, 0xee00, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8000}}, 0xa0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:43:30 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8912, &(0x7f00000000c0)) 09:43:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:30 executing program 4: openat$zero(0xffffff9c, 0x0, 0x0, 0x0) setreuid(0x0, 0xee01) socket$xdp(0x2c, 0x3, 0x0) 09:43:30 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f00000013c0)='GPL\x00', 0x2, 0xc8, &(0x7f0000001400)=""/200, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:43:30 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x2, &(0x7f0000000900)=@raw=[@map_val={0x18, 0x7}], &(0x7f0000000980)='syzkaller\x00', 0x3f, 0xd5, &(0x7f00000009c0)=""/213, 0x40f00, 0x9, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x6, 0x0, 0x4}, 0x10}, 0x74) 09:43:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1c8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x228) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:30 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x220901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:43:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1c, 0x1, &(0x7f00000002c0)=@raw=[@func], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:43:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:30 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x3}]}}, &(0x7f00000000c0)=""/173, 0x26, 0xad, 0x1}, 0x20) 09:43:30 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') [ 2663.285839][ T3678] overlayfs: failed to resolve './file1': -2 09:43:30 executing program 4: r0 = getpid() process_vm_readv(r0, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000540)=""/166, 0xa6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000d40)=[{&(0x7f0000000bc0)=""/69, 0x20000585}], 0x1, 0x0) 09:43:30 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @timestamp, @sack_perm, @mss], 0x4) 09:43:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1c8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x228) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:30 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') [ 2663.388434][ T3696] overlayfs: failed to resolve './file1': -2 09:43:30 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0\x00', 0x10) 09:43:30 executing program 4: getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x44, r3, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x44}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2663.493132][ T3716] overlayfs: failed to resolve './file1': -2 09:43:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000013c0)='GPL\x00', 0x5, 0xc8, &(0x7f0000001400)=""/200, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:43:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, r2}) 09:43:30 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:30 executing program 1: r0 = add_key$keyring(&(0x7f0000001840)='keyring\x00', &(0x7f0000001880)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 09:43:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1c8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x228) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:30 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x1, &(0x7f0000001340)=@raw=[@call], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 09:43:30 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)='./bus/file0\x00') mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000340)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[]) 09:43:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) 09:43:30 executing program 1: openat$vcsu(0xffffff9c, &(0x7f0000000e80)='/dev/vcsu\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 09:43:30 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4) 09:43:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:30 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000140)='big_key\x00', 0x0, 0x0) [ 2663.753737][ T3755] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 09:43:30 executing program 0: openat$rtc(0xffffff9c, &(0x7f0000000400)='/dev/rtc0\x00', 0x18a201, 0x0) 09:43:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) 09:43:31 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0) [ 2663.810445][ T3764] overlayfs: filesystem on './bus' not supported as upperdir [ 2663.830935][ T3765] xt_TCPMSS: Only works on TCP SYN packets 09:43:31 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:31 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)='./bus/file0\x00') mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000340)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[]) 09:43:31 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f0000000780)='./bus/file0\x00') mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000340)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[]) 09:43:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) 09:43:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:31 executing program 1: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000e80)='/dev/vcsu\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 09:43:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) 09:43:31 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') [ 2663.995089][ T3785] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2664.021435][ T3794] xt_TCPMSS: Only works on TCP SYN packets 09:43:31 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') openat$dir(0xffffff9c, &(0x7f0000000100)='./bus/file0\x00', 0x254b, 0x0) [ 2664.036070][ T3793] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 09:43:31 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8993, 0x0) 09:43:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) 09:43:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x9, 0x410000) 09:43:31 executing program 4: ioctl$CHAR_RAW_DISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8946, &(0x7f00000000c0)) 09:43:31 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}) [ 2664.164839][ T3806] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2664.190873][ T3812] xt_TCPMSS: Only works on TCP SYN packets 09:43:31 executing program 0: perf_event_open(&(0x7f0000000700)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:43:31 executing program 5: [ 2664.221876][ T3822] overlayfs: maximum fs stacking depth exceeded [ 2664.232048][ T3806] overlayfs: filesystem on './bus' not supported as upperdir 09:43:31 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x0, 0x410000) 09:43:31 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') openat$dir(0xffffff9c, &(0x7f0000000100)='./bus/file0\x00', 0x254b, 0x0) 09:43:31 executing program 5: 09:43:31 executing program 0: 09:43:31 executing program 3: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:31 executing program 4: 09:43:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 09:43:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x0, 0x410000) 09:43:31 executing program 0: prctl$PR_GET_FP_MODE(0x66) 09:43:31 executing program 4: 09:43:31 executing program 5: [ 2664.442614][ T3849] overlayfs: failed to resolve './file0': -2 [ 2664.463656][ T3852] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 09:43:31 executing program 0: 09:43:31 executing program 3: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:31 executing program 1: 09:43:31 executing program 4: 09:43:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x0, 0x0) 09:43:31 executing program 5: 09:43:31 executing program 4: 09:43:31 executing program 0: 09:43:31 executing program 3: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') [ 2664.595507][ T3864] overlayfs: failed to resolve './file0': -2 09:43:31 executing program 5: 09:43:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x0, 0x0) 09:43:31 executing program 1: 09:43:31 executing program 4: 09:43:31 executing program 0: 09:43:31 executing program 5: 09:43:31 executing program 1: [ 2664.719728][ T3876] overlayfs: failed to resolve './file0': -2 09:43:31 executing program 3: mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:31 executing program 4: 09:43:31 executing program 0: 09:43:31 executing program 1: 09:43:31 executing program 5: 09:43:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x2, 0x3, 0x1f8, 0xc8, 0xc8, 0xc8, 0x0, 0xc8, 0x160, 0x160, 0x160, 0x160, 0x160, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x258) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x0, 0x0) 09:43:31 executing program 4: 09:43:32 executing program 0: [ 2664.848965][ T3891] overlayfs: failed to resolve './file0': -2 09:43:32 executing program 3: mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:32 executing program 1: 09:43:32 executing program 4: 09:43:32 executing program 5: 09:43:32 executing program 1: 09:43:32 executing program 0: 09:43:32 executing program 5: [ 2664.967501][ T3902] overlayfs: failed to resolve './file0': -2 09:43:32 executing program 4: 09:43:32 executing program 2: 09:43:32 executing program 3: mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:32 executing program 1: 09:43:32 executing program 0: 09:43:32 executing program 5: 09:43:32 executing program 4: 09:43:32 executing program 2: 09:43:32 executing program 0: 09:43:32 executing program 5: 09:43:32 executing program 1: 09:43:32 executing program 4: 09:43:32 executing program 2: [ 2665.133986][ T3917] overlayfs: failed to resolve './file0': -2 09:43:32 executing program 0: 09:43:32 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:32 executing program 5: 09:43:32 executing program 4: 09:43:32 executing program 1: 09:43:32 executing program 2: getrusage(0x0, &(0x7f00000002c0)) 09:43:32 executing program 0: 09:43:32 executing program 5: 09:43:32 executing program 1: 09:43:32 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:32 executing program 4: 09:43:32 executing program 0: 09:43:32 executing program 2: 09:43:32 executing program 5: 09:43:32 executing program 1: 09:43:32 executing program 2: 09:43:32 executing program 4: 09:43:32 executing program 5: 09:43:32 executing program 1: 09:43:32 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:32 executing program 0: 09:43:32 executing program 2: 09:43:32 executing program 4: 09:43:32 executing program 5: 09:43:32 executing program 2: 09:43:32 executing program 1: 09:43:32 executing program 4: 09:43:32 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:32 executing program 0: 09:43:32 executing program 5: 09:43:32 executing program 2: 09:43:32 executing program 4: 09:43:32 executing program 1: 09:43:32 executing program 0: 09:43:32 executing program 5: 09:43:32 executing program 2: 09:43:32 executing program 4: 09:43:32 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:32 executing program 5: 09:43:32 executing program 0: 09:43:32 executing program 1: 09:43:32 executing program 2: 09:43:32 executing program 4: 09:43:32 executing program 0: 09:43:32 executing program 5: 09:43:32 executing program 2: 09:43:32 executing program 1: 09:43:32 executing program 4: 09:43:32 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:33 executing program 5: 09:43:33 executing program 1: 09:43:33 executing program 0: 09:43:33 executing program 2: 09:43:33 executing program 4: 09:43:33 executing program 5: 09:43:33 executing program 0: 09:43:33 executing program 2: 09:43:33 executing program 4: 09:43:33 executing program 1: 09:43:33 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:33 executing program 0: 09:43:33 executing program 5: 09:43:33 executing program 2: 09:43:33 executing program 1: 09:43:33 executing program 4: 09:43:33 executing program 5: 09:43:33 executing program 0: 09:43:33 executing program 2: 09:43:33 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:33 executing program 1: 09:43:33 executing program 5: 09:43:33 executing program 4: 09:43:33 executing program 0: 09:43:33 executing program 1: 09:43:33 executing program 5: 09:43:33 executing program 2: 09:43:33 executing program 4: 09:43:33 executing program 1: 09:43:33 executing program 5: 09:43:33 executing program 0: 09:43:33 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:33 executing program 2: 09:43:33 executing program 5: 09:43:33 executing program 4: 09:43:33 executing program 1: 09:43:33 executing program 0: 09:43:33 executing program 2: 09:43:33 executing program 4: 09:43:33 executing program 5: 09:43:33 executing program 1: 09:43:33 executing program 0: 09:43:33 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:33 executing program 2: 09:43:33 executing program 0: 09:43:33 executing program 5: 09:43:33 executing program 1: 09:43:33 executing program 4: 09:43:33 executing program 0: [ 2666.574703][ T4042] overlayfs: failed to resolve './file1': -2 09:43:33 executing program 2: 09:43:33 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:33 executing program 1: 09:43:33 executing program 5: 09:43:33 executing program 4: 09:43:33 executing program 0: 09:43:33 executing program 2: 09:43:33 executing program 1: 09:43:33 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:33 executing program 4: [ 2666.714151][ T4057] overlayfs: failed to resolve './file1': -2 09:43:33 executing program 5: 09:43:33 executing program 2: 09:43:33 executing program 1: 09:43:33 executing program 0: 09:43:33 executing program 2: 09:43:33 executing program 5: 09:43:33 executing program 4: 09:43:34 executing program 0: [ 2666.840328][ T4065] overlayfs: failed to resolve './file1': -2 09:43:34 executing program 1: 09:43:34 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:34 executing program 2: 09:43:34 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp\x00') read$FUSE(r0, 0x0, 0x0) 09:43:34 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000002740)={0xffffffffffffffff}) sendmsg$xdp(r0, &(0x7f0000001140)={&(0x7f00000000c0), 0x10, &(0x7f0000001100)=[{&(0x7f0000000100)="cc", 0x1}], 0x1}, 0x0) 09:43:34 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x40ee1, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 09:43:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x7, 0x0, 0x0) 09:43:34 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:34 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) 09:43:34 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40002162) 09:43:34 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000001580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x0, 0x0) 09:43:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x5, &(0x7f0000000280)={0x0, 0x1, 0x6, @broadcast}, 0x10) 09:43:34 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') [ 2667.049456][ T34] audit: type=1804 audit(1606038214.166:354): pid=4090 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir856509419/syzkaller.f9C8Px/3191/bus" dev="sda1" ino=15874 res=1 errno=0 09:43:34 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 09:43:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 09:43:34 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:34 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write(r0, 0x0, 0x0) [ 2667.841632][ T34] audit: type=1804 audit(1606038214.956:355): pid=4135 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir856509419/syzkaller.f9C8Px/3191/bus" dev="sda1" ino=15874 res=1 errno=0 09:43:35 executing program 5: io_uring_setup(0x9f4, &(0x7f0000000000)={0x0, 0x0, 0x33}) 09:43:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x24000094}, 0x2404c081) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={0x0, 0x3}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8000) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40) fsetxattr$security_ima(r2, &(0x7f0000000200)='security.ima\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="b2659e521a4737206d44261c5f1b594229675458e33a760b5b37d989f84f514a637329bfa036b8322b2447342505ccdb3475474149fc907e82d57891b294135803d7f187abb2b94b75a2192af3564590a89c676f4a9759a5"], 0xe, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x4000) dup2(r2, r3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae5ed88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 09:43:35 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:35 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000007940)=[{{0x0, 0x0, &(0x7f0000003240)=[{0x0}, {&(0x7f00000030c0)=""/73, 0x49}], 0x2}}], 0x1, 0x0, &(0x7f0000007b00)={0x77359400}) 09:43:35 executing program 4: add_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="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", 0xfffffffffffffe7d, 0xfffffffffffffff8) 09:43:35 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) [ 2667.871922][ T34] audit: type=1804 audit(1606038214.986:356): pid=4136 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir856509419/syzkaller.f9C8Px/3191/bus" dev="sda1" ino=15874 res=1 errno=0 09:43:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x1600bd7e, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) 09:43:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) lseek(r0, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) 09:43:35 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendto(r0, 0x0, 0x36, 0x0, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x20, 0x0, 0x0, 0x0, @link_local}, 0x80) 09:43:35 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:35 executing program 1: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 09:43:35 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:35 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udplite6\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) [ 2668.123009][ T34] audit: type=1804 audit(1606038215.236:357): pid=4162 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir405636352/syzkaller.GAijun/1359/file1/bus" dev="loop5" ino=101 res=1 errno=0 [ 2668.159085][ T4162] attempt to access beyond end of device [ 2668.159085][ T4162] loop5: rw=0, want=94, limit=87 09:43:35 executing program 0: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:43:35 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') [ 2668.265076][ T34] audit: type=1804 audit(1606038215.376:358): pid=4180 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir405636352/syzkaller.GAijun/1359/file1/bus" dev="loop5" ino=101 res=1 errno=0 09:43:35 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) lseek(r0, 0x1200, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x8400fffffffa) 09:43:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x1600bd7e, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xffffff7f, 0x0}}], 0x300, 0x401eb94) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) [ 2668.371926][T20443] attempt to access beyond end of device [ 2668.371926][T20443] loop5: rw=1, want=98, limit=87 09:43:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000020000000500000008"], 0x24}}, 0x0) 09:43:35 executing program 1: bpf$MAP_CREATE(0x18, 0x0, 0x0) 09:43:35 executing program 2: r0 = syz_io_uring_setup(0x47cc, &(0x7f0000000080)={0x0, 0x8513}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ee8000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 2668.427865][ T4188] overlayfs: missing 'lowerdir' 09:43:35 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:35 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') [ 2668.525826][ T4214] overlayfs: missing 'lowerdir' 09:43:35 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') [ 2668.548294][ T34] audit: type=1804 audit(1606038215.666:359): pid=4202 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir405636352/syzkaller.GAijun/1360/file1/bus" dev="loop5" ino=102 res=1 errno=0 [ 2668.564872][ T4217] overlayfs: missing 'lowerdir' 09:43:35 executing program 0: r0 = mq_open(&(0x7f0000000280)='eth0\x00', 0x0, 0x0, 0x0) mq_notify(r0, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) [ 2668.602542][ T4202] attempt to access beyond end of device [ 2668.602542][ T4202] loop5: rw=0, want=94, limit=87 09:43:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="15000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000005"], 0x24}}, 0x0) 09:43:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') read$FUSE(r0, 0x0, 0x0) 09:43:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') read$FUSE(r0, 0x0, 0x0) [ 2668.690724][ T4231] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2668.701580][ T4232] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. 09:43:35 executing program 4: r0 = socket(0x2, 0x3, 0x4) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 09:43:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x63) 09:43:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) [ 2668.739323][ T4234] overlayfs: missing 'lowerdir' 09:43:35 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r2 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x1}) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000001c0)=ANY=[]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 09:43:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)) 09:43:36 executing program 2: sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x78, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x10}}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x401}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008001) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x80000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x2, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0xa], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) 09:43:36 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) 09:43:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) 09:43:36 executing program 4: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e22, 0x5, @ipv4={[], [], @private=0xa010102}, 0x4}, {0xa, 0x4e20, 0x10000, @mcast2, 0x6}, 0x20, [0x7fff, 0x800, 0x1f, 0x4, 0x4, 0x22d, 0xfff, 0x5]}, 0x5c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x3f, 0x4, 0x4, 0x0, @private1, @local, 0x7, 0x7800, 0x81f, 0x7}}) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000000c0)="0a3077f2f0e7165e39b40f20d7ce17f752e0444ce65dbb9549479c4a9ba31f8845020000000000000008ba57659c58d2f139b096f6cc1e6dcbb8997687010a603517fb20094d3f9327c3029f388af2d59149bd924afb7d296032c57da25b016efc787070a14949fc48417e8a898a8197ea3cf0afec36e3b908c8bcecfae70421a7432f38fd71597deb98e3ec2eaaa34ea0f78cce7cb4adc26a9298347d7590c28c70b99f4c4f3a4d210c7c5f", 0xac) accept$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c) [ 2668.893434][ T34] audit: type=1804 audit(1606038216.006:360): pid=4252 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir856509419/syzkaller.f9C8Px/3198/file0/bus" dev="ramfs" ino=218867 res=1 errno=0 09:43:36 executing program 0: prctl$PR_GET_SECUREBITS(0x1b) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:36 executing program 5: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:43:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000007940)=[{{&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000003240)=[{0x0}, {&(0x7f00000030c0)=""/73, 0x49}], 0x2}}, {{0x0, 0x0, 0x0}, 0x6}], 0x3, 0x0, &(0x7f0000007b00)={0x77359400}) [ 2668.989700][ T4262] overlayfs: missing 'lowerdir' 09:43:36 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:36 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x15, &(0x7f0000000040)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) 09:43:36 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/nf_conntrack_expect\x00') read$char_usb(r0, 0x0, 0x700) 09:43:36 executing program 4: 09:43:36 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:36 executing program 5: syz_io_uring_setup(0x4675, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x2, &(0x7f0000000440), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4675, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:43:36 executing program 0: prctl$PR_GET_SECUREBITS(0x1b) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') read$FUSE(r0, 0x0, 0x0) 09:43:36 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) [ 2669.227241][ T4297] overlayfs: missing 'lowerdir' 09:43:36 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:36 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) 09:43:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') read$FUSE(r0, 0x0, 0x0) 09:43:36 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x38}}, 0x0) [ 2669.429515][ T4329] overlayfs: missing 'lowerdir' 09:43:36 executing program 5: clock_gettime(0xf9ab0586d6a82e6b, 0x0) 09:43:36 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:36 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:36 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0x3e) 09:43:36 executing program 4: socket(0x2, 0x3, 0x9) 09:43:36 executing program 5: socket$packet(0x11, 0x3, 0x300) select(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0) 09:43:36 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:36 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1], 0x38}}, 0x0) 09:43:36 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/softnet_stat\x00') read$FUSE(r0, 0x0, 0x0) 09:43:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8916, &(0x7f0000000080)={'batadv_slave_0\x00'}) [ 2669.628199][ T4362] overlayfs: missing 'lowerdir' 09:43:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 09:43:36 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:36 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/sockstat6\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:36 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000001e00000000000000000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='ext4_es_lookup_extent_exit\x00', r4}, 0x10) sendfile(r0, r2, 0x0, 0x8000fffffffe) 09:43:36 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') read$FUSE(r0, 0x0, 0x0) 09:43:36 executing program 0: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') fstatfs(r0, &(0x7f0000000080)=""/31) r1 = socket(0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) [ 2669.764892][ T4382] overlayfs: missing 'lowerdir' 09:43:36 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000042) 09:43:36 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:36 executing program 5: r0 = socket(0x2, 0x3, 0x4) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 2669.817856][ T34] audit: type=1800 audit(1606038216.936:361): pid=4389 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16375 res=0 errno=0 09:43:37 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x2) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 09:43:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') read$FUSE(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') dup3(r1, r0, 0x0) 09:43:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000), 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x30) [ 2669.953524][ T4414] overlayfs: missing 'lowerdir' 09:43:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:37 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x7fffef80, 0x0) 09:43:37 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_targets\x00') read$char_usb(r0, 0x0, 0x0) 09:43:37 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:37 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x20, 0x0, 0x0, 0x6, @link_local}, 0x80) 09:43:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:43:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:37 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 2670.273499][ T4438] overlayfs: missing 'lowerdir' 09:43:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:43:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:37 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000680)='/dev/cuse\x00', 0x2, 0x0) fallocate(r0, 0x51, 0x0, 0x401) 09:43:37 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x7fffef80, 0x0) 09:43:37 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=.']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:37 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r1 = io_uring_setup(0x6e5b, &(0x7f00000000c0)={0x0, 0x0, 0x1}) dup3(r0, r1, 0x0) 09:43:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5411, &(0x7f0000000080)={'batadv_slave_0\x00'}) 09:43:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) memfd_create(0x0, 0x0) socket(0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 09:43:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) 09:43:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) [ 2670.468109][ T4458] overlayfs: missing 'lowerdir' 09:43:37 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 09:43:37 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) [ 2670.521456][ T34] audit: type=1804 audit(1606038217.636:362): pid=4465 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir807034910/syzkaller.62Pa9d/1222/file1/bus" dev="loop1" ino=103 res=1 errno=0 [ 2670.557521][ T4465] attempt to access beyond end of device [ 2670.557521][ T4465] loop1: rw=0, want=94, limit=87 09:43:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 2670.620247][ T34] audit: type=1804 audit(1606038217.736:363): pid=4465 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir807034910/syzkaller.62Pa9d/1222/file1/bus" dev="loop1" ino=103 res=1 errno=0 09:43:37 executing program 1: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) memfd_create(0x0, 0x0) socket(0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 09:43:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) [ 2670.685950][T20443] attempt to access beyond end of device [ 2670.685950][T20443] loop1: rw=1, want=98, limit=87 [ 2670.720416][ T4487] overlayfs: unrecognized mount option "lower" or missing value 09:43:37 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 09:43:37 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 09:43:37 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:37 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8936, 0x0) 09:43:38 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 2670.841748][ T4498] attempt to access beyond end of device [ 2670.841748][ T4498] loop1: rw=0, want=94, limit=87 [ 2670.854467][ T4513] overlayfs: unrecognized mount option "lower" or missing value 09:43:38 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 09:43:38 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lower']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:38 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) write$P9_RLOCK(r1, &(0x7f0000000240)={0x8}, 0xff83) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r1, r3, 0x0, 0x7fffffff) 09:43:38 executing program 1: syz_io_uring_setup(0x650a, &(0x7f00000004c0)={0x0, 0x0, 0x5}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000580)) 09:43:38 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 09:43:38 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:38 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 2671.040003][ T4529] overlayfs: unrecognized mount option "lower" or missing value 09:43:38 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x141242, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='fd/3\x00') r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x145042, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r4, 0x0) write$P9_RLOCK(r1, &(0x7f0000000240)={0x8}, 0xff83) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendfile(r1, r3, 0x0, 0x7fffffff) 09:43:38 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:38 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:38 executing program 5: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 09:43:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0x4}]}}}}}) 09:43:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000008c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000094}, 0x2404c081) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES16=r3, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x20000010}, 0x810) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x108801}, 0xc, &(0x7f0000000700)={&(0x7f00000012c0)={0x6c, r3, 0x400, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x46, 0x3, "047558220f3ebbd2de093e083a9056ef7987a6ae946e3602cd3f7bf86f5bb2ecf7087c0ca71437333b434d58e101f4c273c5d4291eb592542d3b06a714b99d3b43cb"}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc0, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x16c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40) fsetxattr$security_ima(r2, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="b2659e521a4737206d44261c5f1b594229675458e33a760b5b37d989f84f514a637329bfa036b8322b2447342505ccdb3475474149fc907e82d57891b294135803d7f187abb2b94b75a2192af3564590a89c676f4a9759a5"], 0xe, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) dup2(r2, r4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae5ed88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 09:43:38 executing program 0: request_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) 09:43:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 09:43:38 executing program 5: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 09:43:38 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) [ 2671.239621][ T4551] overlayfs: overlapping upperdir path 09:43:38 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@private0, @private1, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0080008}) 09:43:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000008c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000094}, 0x2404c081) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES16=r3, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x20000010}, 0x810) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x108801}, 0xc, &(0x7f0000000700)={&(0x7f00000012c0)={0x6c, r3, 0x400, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x46, 0x3, "047558220f3ebbd2de093e083a9056ef7987a6ae946e3602cd3f7bf86f5bb2ecf7087c0ca71437333b434d58e101f4c273c5d4291eb592542d3b06a714b99d3b43cb"}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc0, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x16c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40) fsetxattr$security_ima(r2, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="b2659e521a4737206d44261c5f1b594229675458e33a760b5b37d989f84f514a637329bfa036b8322b2447342505ccdb3475474149fc907e82d57891b294135803d7f187abb2b94b75a2192af3564590a89c676f4a9759a5"], 0xe, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) dup2(r2, r4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae5ed88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 09:43:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000008c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000094}, 0x2404c081) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES16=r3, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x20000010}, 0x810) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x108801}, 0xc, &(0x7f0000000700)={&(0x7f00000012c0)={0x6c, r3, 0x400, 0x0, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x46, 0x3, "047558220f3ebbd2de093e083a9056ef7987a6ae946e3602cd3f7bf86f5bb2ecf7087c0ca71437333b434d58e101f4c273c5d4291eb592542d3b06a714b99d3b43cb"}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc0, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x16c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40) fsetxattr$security_ima(r2, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="b2659e521a4737206d44261c5f1b594229675458e33a760b5b37d989f84f514a637329bfa036b8322b2447342505ccdb3475474149fc907e82d57891b294135803d7f187abb2b94b75a2192af3564590a89c676f4a9759a5"], 0xe, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) dup2(r2, r4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae5ed88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 09:43:38 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') read$FUSE(r0, 0x0, 0x7702) 09:43:38 executing program 5: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 09:43:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:38 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 09:43:38 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8904, &(0x7f0000000080)={'batadv_slave_0\x00'}) [ 2671.491221][ T4578] overlayfs: overlapping upperdir path 09:43:38 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:38 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 09:43:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:38 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) [ 2671.621994][ T4592] overlayfs: overlapping upperdir path 09:43:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sched\x00') write$vhost_msg(r0, 0x0, 0x0) 09:43:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) read$FUSE(r0, 0x0, 0x277) 09:43:39 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./fil']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:39 executing program 5: syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) 09:43:39 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 09:43:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') read$FUSE(r0, 0x0, 0x0) 09:43:39 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:39 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x65, 0x0, 0x0) [ 2672.309439][ T4616] overlayfs: failed to resolve './fil': -2 09:43:39 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./fil']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:39 executing program 0: creat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:39 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') read$FUSE(r0, 0x0, 0x0) 09:43:39 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 09:43:39 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') read$FUSE(r0, 0x0, 0x0) 09:43:39 executing program 0: creat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:39 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:39 executing program 5: io_uring_setup(0x6e5b, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x2}) [ 2672.525637][ T4638] overlayfs: failed to resolve './fil': -2 09:43:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:39 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./fil']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:39 executing program 0: creat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:39 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:39 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x1600bd7e, 0x0, 0x0) 09:43:39 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) [ 2672.709544][ T4664] overlayfs: failed to resolve './fil': -2 09:43:40 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 09:43:40 executing program 0: creat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:40 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:40 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$char_usb(r0, 0x0, 0x0) 09:43:40 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:40 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:40 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:40 executing program 0: creat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:40 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000009c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xa3, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xbc, 0x8}}, @cf={0x4, 0x6, {0x1, 0x6, 0x1, 0x6ec9}}, @perr={0x84, 0x75, {0x0, 0x7, [@ext={{}, @device_b, 0x0, @device_b, 0xe}, @ext={{}, @device_b, 0x4, @device_a, 0x24}, @not_ext={{}, @device_b, 0x4}, @not_ext={{}, @device_a, 0x1, "", 0x15}, @ext={{}, @broadcast, 0x0, @device_b}, @ext={{}, @device_b, 0x0, @broadcast}, @not_ext={{}, @device_b}]}}, @rann={0x7e, 0x15, {{}, 0x0, 0x0, @device_b}}]}, @NL80211_ATTR_IE={0x1ed, 0x2a, [@perr={0x84, 0x2}, @gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0xf4, {0x0, 0x0, 0x0, "ed32ae522021f7dcf594b0182570d06e7b5e7104500d0438a4587558aa753e4feafa07acd75fd41982d2ee68a425ffe919e8286fafadd01a6208a57fb1c2425e90b4ab6aa952fdb7d01648adb25d553a4ebf825d842fc202c669ff2575635774a6dbdc1f6284e29d21628b2e53ba070e45cc06635c95754e49138d04484fcbb46fb86b2b1165bb5c9bf0bea87d3fec4b9c6c648cd15d2b9f763e8f1ad679dc5b4b7aff305312544f4c89618a998490a78d72e0f56c895b6e184e7d800b0246ad52955abfeb96754c8b615bf66e9e0f301fbcaf74254d3c7a52830f0deea1709bd8adae7c56d0b70bf9309f9ca146c511bc"}}, @tim={0x5, 0xdf, {0x0, 0x0, 0x0, "e3d3f7b49792581eacc1946a74ed859972ad32d26318dbabbcb435b329fe8023888903fe3929b0400f0d071865f943e0c2f2e7f7a2e6efa8b564a5262b94adff0f5da42b244cde531f4868ee7da09370c637bc944fd6f0a5885cb026cb227e8d6cf260cacdc140cec05ae768ef22972a1f94cab838a5cde3788e606be9e281338a98b88641b95d9844a1660476465d0d55559814f6fc07cb0e41fe43e65be26e510d4bfc21063ac46e532c7b0d4ce52ec6e859a049f646647f71f3030a95b309e8c082b7a267aa51d79b0f92445bcfbf473848354bf023b42ba942de"}}, @dsss={0x3, 0x1}, @ssid={0x0, 0x1, @random='}'}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xc5, 0xfc, "969381b662963d37935851fc804e4d7cc9d4d21ed54deea549683948e89027b5f6ee37fc0c764523147cb5c220fe60c228cca54d393382c9501999f49411c42fc8308e4897f0c616c5879e4ca031cbacee064ac0c9d7fb707637f80386fdd3892b4ed18573e3f4126c3ecb86cd9b880f757d89047650e2041f446b04f9610033cf5a22e6e14b0a400c112bc8c806bfc7c43b19fd0efd6edd378ee6cba1fd1019bafde33c30176a488417ed4cef0b0f5773fd2d239d034b714b36558b909e8372a8"}, @NL80211_ATTR_FILS_ERP_RRK={0x61, 0xfc, "787be09f4a728effefea06915117ac5a50058c3085d54f987fe3fd1c76c4ca066d1c1a0942c721f800b86ab006e0c675373bc0209036143be1e963dafc6445c859c252ad93b58ee017e6e00a17ec2fc2c83ae6c3dd76bad7d837ed209c"}, @NL80211_ATTR_FILS_ERP_RRK={0xa5, 0xfc, "a77bbd2b427a985702e4e332449b71719524aefea21f285c4722233aecf147a3106794e6d42abee733920ddcd74316bbc58017894e0cfe57b65a4f2e152342ddb24e30f31f32a47d277b876b8aea8d1a380f76940eef373748b4fae0cb012039ad8affb4f3e2ace9e08433f14c2038d0e16cb80ba4fe0ce4059f54cce0444b71c828a4c7b90d41e15c3bb626d73736b5dd89b0ebe4c364df32532161f1bfb23bb6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "62b1971a09"}, @NL80211_ATTR_FILS_ERP_RRK={0x29, 0xfc, "347e1a91f1be3219b36e95d4fc0684640560bb6f473d67550d0dc0481ad6c37c034a011fd3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, 'L'}, @NL80211_ATTR_FILS_ERP_REALM={0xc5, 0xfa, "dbc545acc863b73526092cb958b6e1804f8ae11faea253f8c09b3dce57de35ecd78dea8ab2e08c4ed406e67044b44f4b6d9a9a0f6898acc4882a6d80768271d3fe27678a8c54256b25662dd3c46409424aec5b6ce14c455ba3b8685d0bd30568441f2a1c3e1bc24b8f03204c0b8b7bfa38433a5c296ab91204147ac09531fedc5330423b799cb0f649ba9099c16a9c8e5abf5665c7e4e075168cc5e3ca49455153f3983e8024d66fa7f5f25e04d13eecfe2d75e93ab5c1377266cdf5b8133cea39"}, @NL80211_ATTR_FILS_ERP_RRK={0x61, 0xfc, "0c94ca0f0441457a26edb1181898cae786e00eff1f18a20b7830fcf09fac3e458a9c52524fc77f9fb1658230abc4938c21fad18edaa0a345c4cec7288ca3e757fec7e4bd7b17680fb2c5ccd7fee01012862b965d3f2e0679003387fe96"}, @NL80211_ATTR_FILS_ERP_REALM={0xb9, 0xfa, "47111eff2dec8ff89a9193a7018610c607007bc88b2c57fe750bcdde751e4b7c1a142b1151eae50772a27984e8335f4df0b13a1fe01b81d97c0938a536479b733700b34fc293879ac27341ffa57dd39e92bea0af29f9da6263b8708cdd4cf005c163a69992c3285a0023ad2ebdd320fea65487eab317a8cb55bc7d3e30a42bb007c17c97764573253cbba89f5dda32e07f793ce1b4810d1dac208269bc173e68ed2f659e3b9f2de2bf068c6c774e59b503e0e5adfd"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x80d, 0xfa, "69ca15369f26507d124ca3008fd4ab6443e3460eeb1dc494e9cbfb64351507b9707c44d57998ba2bb2e6554818542300f4c20b5dc934a07215ada102d9e2e80c89bcdbc6e4db95708f64577df32e60fb7feb0bf43619f8bb694716da956ed092fffe1f2d42f26be2685c5bb683b632def2766e7d7308bcdb30b2a2dd934fac794aefa2b63a953a6a70be62a86b90ea5ec0d75a46194f5d007e639dd2168a1bbb087298067c44494817444ba405b1ffc254086189a8a00757e5e800fef0b64249bac8c9923c656990a441ca11d7038d11be8c3937f90ccc052a497d76378b6450183569c9185c086fa51e12835b50f25cfaf7395d32a0b3e30790b1e66c35d587be59d3ad0cbba2f3fa37fa8bb7954288cd7be814648cb64818a3df4a0216e5726b435f0f991875c209f498d9da536083d485a85526647dc29d5560da304bb370f1a5fc2a3ee4b679ef1ee54739207d5c448a702a897862303203a557237102ff8d3d8bbb1d30f45a1f22b8a3b7e15ed65362a4b8c0051ac6e38b098a7456d6308547fd59318bb08831ed30e00e377b5c810b6c3a2c7f085fa72c66010545c2cadd39143bfb9b5c7bac9fe6068e2ec884a937d836421c722b071dd0b71b540bb5c635ee0f872e6bf215e205391da51d67a22bb00ad90f97a6ce763cb2064365609ac6b98a6784a1f6ed3a27952b259e1dd4e2c774124e57a1d305c7b7ee5295f67c3e25b277d96d824a3a99e048a7f07f38ad8ac0e69f6f4410cdca737d76017ffa84d5447ce7855401fb4e49b5809f403b9217f64842950731a6f8eb04528fdca4c9a996423e940f9374af0f8522abcd169838b89aa9e158010e7b16ad0ca6e72659c00f51d9f6747dd603352ccfd545e3d34c77d9e1c4dd261a87edb8be9bcf5297371e517a31cdad39d421de9856cbf291a5c78ed1fec636d2f009c2f64404195cd15015c2ef98c3ffaa5930664042b6e92e4b55f357c6c2c2797b745fc0c782c8651a29aeffda8863d4536d4e33fe2b34b36217440a9ca5b7c09888ca1e685645e1ea9f137a0764301ea743f1a12638f40dd3d9c48420598a0c3d1f47e1a6906ce944b95b966ee51eaacc68ee15eaffddc8ce527e31536a4b3889968bf0aa47013fc7254f2f1385dadea2760a88bf0b34bbce5048edaf9d7f7286d41ad0b876a45c305350b13a254429533cf6af8ad3dd26dc37f5229c9f445a1c445baa6926ea4644733c9ddc90fc9a32abef9574630f6e259b07220e185c21064b1241418942e3e5904ea4ced2bff3614019427054faed5e83ce3dcf220d13056d92094771efbbe3ac444bede41c19292a4052888f89875bc978f2229b6957cdcb3265ce7f41a54b7b494e76e87a66315dd336132a278125204374e26691ee48a9447eb945298ee5edc8cd3b89d598ced00327a073c2800d6aa8732234cb3223ed05bc7f604c30086e364031c040919b6ce8cb8ade68a32b602b879d8bb6d5c62173a3dc20edec4ffdbe7047357084562eb4f293d6f80c19d6bdf6fd89c28de5e5dc6a2386c4be2253f23fdaeac5149eac7338a59b3e196e7eaaf18440ecfb18a6d2ed2bc8f9909eb5a5786dd63924a3c334dae217b1ab2de3e280ada95a6f17a9ad6e8ff83853ea0c215b240a66a6d687eb537dd3a1392b272556d574cbaaf7b3d0f6e739fd912f9d17ddd043d11c992719601fe0a9a7558c8e9d4dfb6032c636d12779e25099d834bfed6ff99f9e849ca07848a1ccb97e2d402674906f681ff0f8a288ab6245d2a05111211c3bb3cce0000f714aeaf11cb6eb8e040e7ade5bc5140840fc451396d05a403721de24628a2e4772688e9885fbc6fc03f339bb06fb2cb04e524382ccd960060f015f0a42145471cf10d34f0394075a15fef6090c204d1c49d9b7e3ac2c51c55b2ea869d0d68703a318939798e7d8139865f70333e58d19c8118482d2ca1419d7a2eab96407bcbcec0890c7e31ce7f8e3b80fc3bb2eb4df21e45778d17d13f6068888fce521326c79c3b407a433f9d1f9a37ded7bf158a4c9212fd18c7cd9607c1a9e1ee7ee635ac9c560dac825bfb37d159eed61f4d183860a26ee1b922a6a2d499593deb6cb458b88507534df57ce05cc1aa5ea97dde1028a84b149cdd10ef93384d1a8383268f78398c1c8a0de20332e2f40215fe947816005cd9d6102d9732028a4099b179d97c983a0dc0ec27ddba079abef95effcc7b40eda13ce4a3ce57e5a6b18d9313fda75d369a3104e426ca1efa8b487920eb7f99fb83dcb6243e4eb97c5d90f47ed900b59c54d549f73f92660cc57d6920663f0489c06ce2809d3d8f6936f1cb117f830b5b0e3fd52b2a58e78b0dbd8aa98dddaf4e0c4a28d2e2e543c65f2702147b51af0704f8e731080c8166de2c28c55f33e82d75b9672d4bcbeb81b99ee29fd3f073b9e4f376e5ea16916b7c5b9dc8e23c255fe906d9e2c8ab63a41b195ceb49a37b554d2fd13d81387b8ac3c8b245b3ec4dc3b81563b7bd96c72f12dd6ea5bb5a3c4b0d96f23a783c4de7c84792e19a2f514c75ee07eaf64054bc9683abf09282b085b5a2bfe4fd5d353efdadac3907fe8625cd59cfc31767a3ffe47900e389e946d8c0853f5becd55e6795b117bbaea3dbba60af421705fa755bb89b4970358a2eabb6f295a66515fcaf28aee1787ead61fef95a895d795d74bc356851e056ff288ce97cccb2bfd0d94fd8e9bccff6a3cb38289430361b30598bbc4304a7aa9b129f875ccfca32d255d48863f8c6a206dfd9c9da053cf3e2831e74469c52f6d86d51abf33a90b39b3c1ec012608f10fc38a0d69635046018b227abe8176c897b38a391b776581e59979f6706575f098f2b086d1e5f419619b849ece6ef89e1ef2cb816f7b27351f5659eee3857ab37de574502db2cf9fc221"}]]}, 0xec4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 09:43:40 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') [ 2673.447471][ T4690] overlayfs: failed to resolve './file': -2 09:43:40 executing program 0: creat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:40 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:40 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:40 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:40 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(0x0, 0x0, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000380)="00cfc229621bff28b24a77a1c7584d1f8b8a1e56db5cb28d3b1bebd60609133186", 0x21}, {&(0x7f0000000440)="39c6f705356dd1e78e71b71e2f154f4df10f06f350c5dd860f426c659e2dd23c492d4aad5d3b545c0a314d85072e8242b52e88f11f8f2a04ba4b89961b6042544c7083b7bc29ff522c2564bb3748d251ad11022b84ec361540edd8f4b05c2a7d2d7e679403b207acf0150654", 0x6c}, {&(0x7f00000004c0)="c7f69b32002049dd2cb9a9e9e1", 0xd}], 0x3) 09:43:40 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') [ 2673.584447][ T4711] overlayfs: failed to resolve './file': -2 09:43:40 executing program 0: creat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:40 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:40 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:40 executing program 0: creat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:40 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:40 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:40 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f00000005c0)=""/135, 0x26, 0x87, 0x8}, 0x20) [ 2673.752080][ T4723] overlayfs: failed to resolve './file': -2 09:43:40 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:40 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(0x0) lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:41 executing program 0: creat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:41 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 4: bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 09:43:41 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(0x0) lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:41 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 0: creat(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:41 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00') read$FUSE(r0, 0x0, 0x0) 09:43:41 executing program 0: creat(0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:41 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(0x0) lremovexattr(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:41 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f00000029c0)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}, {{0x0, 0x0, 0x0}, 0xff}], 0x2, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 0: creat(0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:41 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(0x0, &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:41 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 0: creat(0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:41 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x101, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) 09:43:41 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:41 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @local}}}}) 09:43:41 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:41 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(0x0, &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:41 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000040)={@empty, @random="000000000010", @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @local, "", @multicast}}}}, 0x0) 09:43:41 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:41 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(0x0, &(0x7f0000000400)=@known='trusted.syz\x00') 09:43:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:43:41 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:41 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x89b0, &(0x7f0000000080)={'batadv_slave_0\x00'}) 09:43:41 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 4: fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000002c0)) syz_open_dev$loop(0x0, 0x0, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) 09:43:41 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', 0x0) 09:43:41 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:41 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:41 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', 0x0) 09:43:42 executing program 4: fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000002c0)) syz_open_dev$loop(0x0, 0x0, 0x0) pipe(0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x7, 0x4) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) 09:43:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:42 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r1, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:42 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') lremovexattr(&(0x7f00000003c0)='./bus\x00', 0x0) 09:43:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:42 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:42 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast2, 0x700}}) 09:43:42 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:42 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') read$FUSE(r0, 0x0, 0x0) 09:43:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:42 executing program 3: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f00000000c0)="ab", 0x1, r0) 09:43:42 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:42 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x1600bd80, 0x0, 0x0) 09:43:42 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 09:43:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') read$FUSE(r0, 0x0, 0x0) 09:43:42 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="24b68dc4fcceef1b5d50"], 0x1a) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000100)=""/87, 0x57}], 0x1, 0x0, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) 09:43:43 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 09:43:43 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f00000000c0), 0xffffffffffffff25) 09:43:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:43 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 09:43:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) dup3(r0, r1, 0x0) 09:43:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') read$char_usb(r0, 0x0, 0x0) 09:43:43 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000007940)=[{{&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/84, 0x54}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000007b00)={0x77359400}) 09:43:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000005240)='/dev/zero\x00', 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) 09:43:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') read$FUSE(r0, 0x0, 0x0) 09:43:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:43:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') read$char_usb(r0, 0x0, 0x0) 09:43:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) 09:43:43 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') read$char_usb(r0, 0x0, 0x0) 09:43:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:43:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 1: syz_io_uring_setup(0x4675, &(0x7f0000000000), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x4675, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x245}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 09:43:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 3: r0 = add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="ab", 0x1, 0xffffffffffffffff) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 09:43:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, 0x0, 0x0, 0x0, 0x0) 09:43:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:43:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xaefc, 0x0) 09:43:43 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xf7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) 09:43:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, 0x0, 0x0, 0x0, 0x0) 09:43:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x894b, &(0x7f0000000080)={'batadv_slave_0\x00'}) 09:43:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 1: sigaltstack(&(0x7f0000ffa000/0x4000)=nil, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 09:43:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x5, 0x7, 0x9}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0xffffffff, 0x0, r0}, 0x40) 09:43:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:43 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000011c0)='maps\x00') preadv(r2, 0x0, 0x0, 0x0, 0x0) 09:43:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:43 executing program 2: bpf$MAP_CREATE(0x17, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 09:43:43 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') 09:43:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @dev}, 0x10) 09:43:43 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 09:43:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 09:43:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:43 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x12, 0x0, 0x0) 09:43:43 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_matches\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0) 09:43:43 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:43:44 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 09:43:44 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:43:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8929, &(0x7f0000000080)={'batadv_slave_0\x00'}) 09:43:44 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0) [ 2676.870915][ T5089] device batadv0 entered promiscuous mode [ 2676.904732][ T5087] device batadv0 left promiscuous mode 09:43:44 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x67) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x56, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 09:43:44 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:43:44 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0) 09:43:44 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 09:43:44 executing program 1: bpf$MAP_CREATE(0x13, 0x0, 0x0) 09:43:44 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0) 09:43:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @private2}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 09:43:44 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:44 executing program 4: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:43:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') read$char_usb(r0, 0x0, 0x7000000) 09:43:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') read$FUSE(r0, 0x0, 0x0) 09:43:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 09:43:44 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0xc020660b, 0x0) 09:43:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') read$FUSE(r0, 0x0, 0x0) 09:43:44 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x17, &(0x7f0000001080)="2ad84ff5", 0x4) 09:43:44 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00') read$char_usb(r0, 0x0, 0x0) 09:43:44 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') read$char_usb(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) 09:43:44 executing program 5: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)={0xe, 0x17, 0x0, {0x5, './bus'}}, 0xe) fcntl$setstatus(r0, 0x4, 0x6900) lseek(r0, 0x1200, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) 09:43:44 executing program 1: socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 09:43:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 09:43:44 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:43:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1a, &(0x7f0000001080)="2ad84ff5", 0x4) [ 2677.448282][ T34] kauditd_printk_skb: 1 callbacks suppressed [ 2677.448294][ T34] audit: type=1804 audit(1606038224.567:365): pid=5156 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir405636352/syzkaller.GAijun/1424/file1/bus" dev="loop5" ino=105 res=1 errno=0 09:43:44 executing program 3: socket(0x2c, 0x3, 0x7f) 09:43:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc008ae05, 0x0) [ 2677.497489][ T5156] attempt to access beyond end of device [ 2677.497489][ T5156] loop5: rw=0, want=90, limit=87 09:43:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') read$char_usb(r0, 0x0, 0x0) 09:43:44 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:43:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x4000) read$char_usb(r0, 0x0, 0x700) 09:43:44 executing program 1: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x28, &(0x7f00000004c0)}, 0x400) 09:43:44 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000007940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001a00)=""/99, 0x63}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {0x0}], 0x3, &(0x7f0000002c00)=""/32, 0x20}, 0x10001}, {{&(0x7f0000002c40)=@hci, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/231, 0xe7}], 0x1, &(0x7f0000002f80)=""/119, 0x77}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003280)=""/171, 0xab}}], 0x4, 0x0, &(0x7f0000007b00)={0x77359400}) 09:43:44 executing program 3: 09:43:44 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 2677.655083][ T34] audit: type=1804 audit(1606038224.727:366): pid=5174 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir405636352/syzkaller.GAijun/1424/file1/bus" dev="loop5" ino=105 res=1 errno=0 09:43:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000009c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xa3, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xbc, 0x8}}, @cf={0x4, 0x6, {0x1, 0x6, 0x1, 0x6ec9}}, @perr={0x84, 0x75, {0x0, 0x7, [@ext={{}, @device_b, 0x0, @device_b, 0xe}, @ext={{}, @device_b, 0x4, @device_a, 0x24}, @not_ext={{}, @device_b, 0x4}, @not_ext={{}, @device_a, 0x1, "", 0x15}, @ext={{}, @broadcast, 0x0, @device_b}, @ext={{}, @device_b, 0x0, @broadcast}, @not_ext={{}, @device_b}]}}, @rann={0x7e, 0x15, {{}, 0x0, 0x0, @device_b}}]}, @NL80211_ATTR_IE={0x1ed, 0x2a, [@perr={0x84, 0x2}, @gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0xf4, {0x0, 0x0, 0x0, "ed32ae522021f7dcf594b0182570d06e7b5e7104500d0438a4587558aa753e4feafa07acd75fd41982d2ee68a425ffe919e8286fafadd01a6208a57fb1c2425e90b4ab6aa952fdb7d01648adb25d553a4ebf825d842fc202c669ff2575635774a6dbdc1f6284e29d21628b2e53ba070e45cc06635c95754e49138d04484fcbb46fb86b2b1165bb5c9bf0bea87d3fec4b9c6c648cd15d2b9f763e8f1ad679dc5b4b7aff305312544f4c89618a998490a78d72e0f56c895b6e184e7d800b0246ad52955abfeb96754c8b615bf66e9e0f301fbcaf74254d3c7a52830f0deea1709bd8adae7c56d0b70bf9309f9ca146c511bc"}}, @tim={0x5, 0xdf, {0x0, 0x0, 0x0, "e3d3f7b49792581eacc1946a74ed859972ad32d26318dbabbcb435b329fe8023888903fe3929b0400f0d071865f943e0c2f2e7f7a2e6efa8b564a5262b94adff0f5da42b244cde531f4868ee7da09370c637bc944fd6f0a5885cb026cb227e8d6cf260cacdc140cec05ae768ef22972a1f94cab838a5cde3788e606be9e281338a98b88641b95d9844a1660476465d0d55559814f6fc07cb0e41fe43e65be26e510d4bfc21063ac46e532c7b0d4ce52ec6e859a049f646647f71f3030a95b309e8c082b7a267aa51d79b0f92445bcfbf473848354bf023b42ba942de"}}, @dsss={0x3, 0x1, 0x9}, @ssid={0x0, 0x1, @random='}'}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xc5, 0xfc, "969381b662963d37935851fc804e4d7cc9d4d21ed54deea549683948e89027b5f6ee37fc0c764523147cb5c220fe60c228cca54d393382c9501999f49411c42fc8308e4897f0c616c5879e4ca031cbacee064ac0c9d7fb707637f80386fdd3892b4ed18573e3f4126c3ecb86cd9b880f757d89047650e2041f446b04f9610033cf5a22e6e14b0a400c112bc8c806bfc7c43b19fd0efd6edd378ee6cba1fd1019bafde33c30176a488417ed4cef0b0f5773fd2d239d034b714b36558b909e8372a8"}, @NL80211_ATTR_FILS_ERP_RRK={0x61, 0xfc, "787be09f4a728effefea06915117ac5a50058c3085d54f987fe3fd1c76c4ca066d1c1a0942c721f800b86ab006e0c675373bc0209036143be1e963dafc6445c859c252ad93b58ee017e6e00a17ec2fc2c83ae6c3dd76bad7d837ed209c"}, @NL80211_ATTR_FILS_ERP_RRK={0xa5, 0xfc, "a77bbd2b427a985702e4e332449b71719524aefea21f285c4722233aecf147a3106794e6d42abee733920ddcd74316bbc58017894e0cfe57b65a4f2e152342ddb24e30f31f32a47d277b876b8aea8d1a380f76940eef373748b4fae0cb012039ad8affb4f3e2ace9e08433f14c2038d0e16cb80ba4fe0ce4059f54cce0444b71c828a4c7b90d41e15c3bb626d73736b5dd89b0ebe4c364df32532161f1bfb23bb6"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "62b1971a09"}, @NL80211_ATTR_FILS_ERP_RRK={0x29, 0xfc, "347e1a91f1be3219b36e95d4fc0684640560bb6f473d67550d0dc0481ad6c37c034a011fd3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, 'L'}, @NL80211_ATTR_FILS_ERP_REALM={0xc5, 0xfa, "dbc545acc863b73526092cb958b6e1804f8ae11faea253f8c09b3dce57de35ecd78dea8ab2e08c4ed406e67044b44f4b6d9a9a0f6898acc4882a6d80768271d3fe27678a8c54256b25662dd3c46409424aec5b6ce14c455ba3b8685d0bd30568441f2a1c3e1bc24b8f03204c0b8b7bfa38433a5c296ab91204147ac09531fedc5330423b799cb0f649ba9099c16a9c8e5abf5665c7e4e075168cc5e3ca49455153f3983e8024d66fa7f5f25e04d13eecfe2d75e93ab5c1377266cdf5b8133cea39"}, @NL80211_ATTR_FILS_ERP_RRK={0x61, 0xfc, "0c94ca0f0441457a26edb1181898cae786e00eff1f18a20b7830fcf09fac3e458a9c52524fc77f9fb1658230abc4938c21fad18edaa0a345c4cec7288ca3e757fec7e4bd7b17680fb2c5ccd7fee01012862b965d3f2e0679003387fe96"}, @NL80211_ATTR_FILS_ERP_REALM={0xb9, 0xfa, "47111eff2dec8ff89a9193a7018610c607007bc88b2c57fe750bcdde751e4b7c1a142b1151eae50772a27984e8335f4df0b13a1fe01b81d97c0938a536479b733700b34fc293879ac27341ffa57dd39e92bea0af29f9da6263b8708cdd4cf005c163a69992c3285a0023ad2ebdd320fea65487eab317a8cb55bc7d3e30a42bb007c17c97764573253cbba89f5dda32e07f793ce1b4810d1dac208269bc173e68ed2f659e3b9f2de2bf068c6c774e59b503e0e5adfd"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x80d, 0xfa, "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"}]]}, 0xec4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 09:43:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') read$char_usb(r0, 0x0, 0x0) 09:43:44 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x0, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:44 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1, 0x189) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="2a9a2f33eefb89e70e2a05a607e8c905a357a9d78b357d3f189044f83e2a7f124c8535b162afcd12facc1aee6103bd1c602cb0bf1a0309e130f54d03f9"], 0x1c}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') preadv(r3, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x80000000) inotify_rm_watch(r0, r2) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x301, 0x0, 0x0) 09:43:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) 09:43:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000200000005000000081f"], 0x24}}, 0x0) 09:43:45 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1, 0x189) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="2a9a2f33eefb89e70e2a05a607e8c905a357a9d78b357d3f189044f83e2a7f124c8535b162afcd12facc1aee6103bd1c602cb0bf1a0309e130f54d03f9"], 0x1c}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='setgroups\x00') preadv(r3, &(0x7f00000017c0), 0x1c0, 0x0, 0x0) 09:43:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x0, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 2677.911935][ T5209] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2677.970582][ T5213] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 09:43:45 executing program 5: 09:43:45 executing program 4: 09:43:45 executing program 1: 09:43:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x0, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:45 executing program 3: 09:43:45 executing program 2: 09:43:45 executing program 1: 09:43:45 executing program 3: 09:43:45 executing program 5: 09:43:45 executing program 4: 09:43:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x0, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:45 executing program 2: 09:43:45 executing program 5: 09:43:45 executing program 3: 09:43:45 executing program 1: 09:43:45 executing program 5: 09:43:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x0, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:45 executing program 4: 09:43:45 executing program 2: 09:43:45 executing program 1: 09:43:45 executing program 3: 09:43:45 executing program 5: 09:43:45 executing program 2: 09:43:45 executing program 3: 09:43:45 executing program 1: 09:43:45 executing program 4: 09:43:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x0, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:45 executing program 3: 09:43:45 executing program 2: perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:43:45 executing program 5: 09:43:45 executing program 1: 09:43:45 executing program 4: 09:43:45 executing program 3: 09:43:45 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:45 executing program 2: 09:43:46 executing program 3: 09:43:46 executing program 5: 09:43:46 executing program 4: 09:43:46 executing program 1: 09:43:46 executing program 2: 09:43:46 executing program 3: 09:43:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:46 executing program 5: 09:43:46 executing program 4: 09:43:46 executing program 1: 09:43:46 executing program 2: 09:43:46 executing program 4: 09:43:46 executing program 5: 09:43:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:46 executing program 3: 09:43:46 executing program 2: 09:43:46 executing program 4: 09:43:46 executing program 1: 09:43:46 executing program 5: 09:43:46 executing program 2: 09:43:46 executing program 3: 09:43:46 executing program 4: 09:43:46 executing program 1: 09:43:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:46 executing program 5: 09:43:46 executing program 2: 09:43:46 executing program 3: 09:43:46 executing program 4: 09:43:46 executing program 1: 09:43:46 executing program 5: 09:43:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:46 executing program 2: 09:43:46 executing program 5: 09:43:46 executing program 4: 09:43:46 executing program 2: 09:43:46 executing program 3: 09:43:46 executing program 1: 09:43:46 executing program 5: 09:43:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:46 executing program 4: 09:43:46 executing program 4: 09:43:46 executing program 4: 09:43:46 executing program 2: 09:43:46 executing program 3: 09:43:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:43:46 executing program 1: 09:43:46 executing program 5: 09:43:46 executing program 4: 09:43:46 executing program 3: 09:43:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:43:46 executing program 2: 09:43:46 executing program 5: 09:43:46 executing program 4: 09:43:46 executing program 1: 09:43:46 executing program 3: 09:43:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:43:46 executing program 2: 09:43:46 executing program 5: 09:43:46 executing program 4: 09:43:46 executing program 1: 09:43:46 executing program 3: 09:43:46 executing program 2: 09:43:46 executing program 5: 09:43:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:46 executing program 4: 09:43:46 executing program 3: 09:43:46 executing program 1: 09:43:46 executing program 2: 09:43:47 executing program 5: 09:43:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:47 executing program 1: 09:43:47 executing program 4: 09:43:47 executing program 3: 09:43:47 executing program 2: 09:43:47 executing program 5: 09:43:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 09:43:47 executing program 1: 09:43:47 executing program 4: 09:43:47 executing program 2: 09:43:47 executing program 3: 09:43:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:43:47 executing program 1: 09:43:47 executing program 5: 09:43:47 executing program 4: 09:43:47 executing program 3: 09:43:47 executing program 2: 09:43:47 executing program 1: 09:43:47 executing program 5: 09:43:47 executing program 4: 09:43:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:43:47 executing program 1: 09:43:47 executing program 2: 09:43:47 executing program 3: 09:43:47 executing program 5: 09:43:47 executing program 4: 09:43:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:43:47 executing program 2: 09:43:47 executing program 3: 09:43:47 executing program 1: 09:43:47 executing program 5: 09:43:47 executing program 4: 09:43:47 executing program 2: 09:43:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:43:47 executing program 3: 09:43:47 executing program 1: 09:43:47 executing program 5: 09:43:47 executing program 2: 09:43:47 executing program 4: 09:43:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:43:47 executing program 1: 09:43:47 executing program 3: 09:43:47 executing program 2: 09:43:47 executing program 5: 09:43:47 executing program 4: 09:43:47 executing program 3: 09:43:47 executing program 2: 09:43:47 executing program 1: 09:43:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:43:47 executing program 2: 09:43:47 executing program 4: 09:43:47 executing program 5: 09:43:47 executing program 3: 09:43:47 executing program 1: 09:43:47 executing program 4: 09:43:47 executing program 2: 09:43:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 09:43:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 09:43:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 09:43:47 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000001c0)={0x3, 0x5, 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(r0, r1) 09:43:47 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) 09:43:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev, 0x0, r2}) 09:43:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) 09:43:47 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) 09:43:48 executing program 1: syz_mount_image$gfs2meta(&(0x7f00000001c0)='gfs2meta\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000002480)=ANY=[]) 09:43:48 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) setitimer(0x0, 0x0, 0x0) 09:43:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) fsmount(0xffffffffffffffff, 0x0, 0x0) 09:43:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev, 0x0, r2}) 09:43:48 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff2}]}) getpgid(0x0) 09:43:48 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xff000000, 0x2c}, [@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) [ 2680.936821][ T5440] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 2680.950840][ T5439] gfs2: gfs2 mount does not exist 09:43:48 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:43:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) lstat(0x0, 0x0) [ 2680.990334][ T5439] gfs2: gfs2 mount does not exist 09:43:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev, 0x0, r2}) 09:43:48 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) acct(0x0) 09:43:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff2}]}) openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x41}, 0x18) 09:43:48 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) timer_create(0x0, 0x0, &(0x7f00000000c0)) 09:43:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) pkey_alloc(0x0, 0x0) 09:43:48 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff2}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 09:43:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev, 0x0, r2}) 09:43:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 09:43:48 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100), &(0x7f0000000080)=0x8) 09:43:48 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) pipe2(0x0, 0x0) 09:43:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x7c, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x6e, 0x5, 0x16, 0x20, 0x18c5, 0x2, 0xcdab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0xb5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x3b, 0x41, 0x3f, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x7f}}]}}, {{0x9, 0x4, 0x0, 0x2, 0x7, 0x7f, 0x44, 0xbd, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x40}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0x0, 0x10}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0xfb, 0xff}, 0x5, &(0x7f00000009c0)={0x5, 0xf, 0x5}}) 09:43:48 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) 09:43:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev}) 09:43:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) time(0x0) 09:43:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev}) 09:43:48 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) semget(0x0, 0x0, 0x0) 09:43:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)=""/4096) 09:43:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev}) 09:43:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) modify_ldt$write2(0x11, 0x0, 0x0) 09:43:48 executing program 4: syz_mount_image$ufs(&(0x7f0000000080)='ufs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x2000001, &(0x7f0000001380)) 09:43:48 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fd\x00') fchdir(r0) 09:43:48 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) [ 2681.464372][ T5505] ufs: You didn't specify the type of your ufs filesystem [ 2681.464372][ T5505] [ 2681.464372][ T5505] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2681.464372][ T5505] [ 2681.464372][ T5505] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2681.510245][ T5505] ufs: ufs_fill_super(): bad magic number [ 2681.537518][T15691] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 2681.549838][ T5505] ufs: You didn't specify the type of your ufs filesystem [ 2681.549838][ T5505] [ 2681.549838][ T5505] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2681.549838][ T5505] [ 2681.549838][ T5505] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2681.597355][ T5505] ufs: ufs_fill_super(): bad magic number [ 2681.955238][T15691] usb 2-1: not running at top speed; connect to a high speed hub [ 2682.035633][T15691] usb 2-1: config 181 has an invalid descriptor of length 127, skipping remainder of the config [ 2682.046637][T15691] usb 2-1: config 181 has 1 interface, different from the descriptor's value: 2 [ 2682.216372][T15691] usb 2-1: New USB device found, idVendor=18c5, idProduct=0002, bcdDevice=cd.ab [ 2682.225854][T15691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2682.234482][T15691] usb 2-1: Product: syz [ 2682.242002][T15691] usb 2-1: Manufacturer: syz [ 2682.246666][T15691] usb 2-1: SerialNumber: syz [ 2682.537391][T15691] usb 2-1: USB disconnect, device number 3 09:43:50 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x7c, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x6e, 0x5, 0x16, 0x20, 0x18c5, 0x2, 0xcdab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0xb5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x3b, 0x41, 0x3f, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x7f}}]}}, {{0x9, 0x4, 0x0, 0x2, 0x7, 0x7f, 0x44, 0xbd, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x40}}, {}, {}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0x0, 0x10}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0xfb, 0xff}, 0x5, &(0x7f00000009c0)={0x5, 0xf, 0x5}}) 09:43:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev, 0x0, r1}) 09:43:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878254}, 0x9c) 09:43:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) getpriority(0x2, 0xffffffffffffffff) 09:43:50 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 09:43:50 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 09:43:50 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in={0x2, 0x0, @loopback}], 0x10) connect$inet6(r0, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, &(0x7f0000000240)=0x9c) 09:43:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev, 0x0, r1}) 09:43:50 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 09:43:50 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) stat(0x0, 0x0) 09:43:50 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffff4}]}) fsync(0xffffffffffffffff) 09:43:50 executing program 0: [ 2683.434819][ T3324] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 2683.904854][ T3324] usb 2-1: not running at top speed; connect to a high speed hub [ 2683.994701][ T3324] usb 2-1: config 181 has an invalid descriptor of length 127, skipping remainder of the config [ 2684.006821][ T3324] usb 2-1: config 181 has 1 interface, different from the descriptor's value: 2 [ 2684.185002][ T3324] usb 2-1: New USB device found, idVendor=18c5, idProduct=0002, bcdDevice=cd.ab [ 2684.194448][ T3324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2684.203923][ T3324] usb 2-1: Product: syz [ 2684.209149][ T3324] usb 2-1: Manufacturer: syz [ 2684.215752][ T3324] usb 2-1: SerialNumber: syz [ 2684.497419][ T3324] usb 2-1: USB disconnect, device number 4 09:43:52 executing program 4: 09:43:52 executing program 1: 09:43:52 executing program 3: 09:43:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev, 0x0, r1}) 09:43:52 executing program 0: 09:43:52 executing program 5: 09:43:52 executing program 0: 09:43:52 executing program 4: 09:43:52 executing program 5: 09:43:52 executing program 3: 09:43:52 executing program 1: 09:43:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev, 0x0, r1}) 09:43:52 executing program 0: 09:43:52 executing program 5: 09:43:52 executing program 4: 09:43:52 executing program 1: 09:43:52 executing program 3: 09:43:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev, 0x0, r1}) 09:43:52 executing program 0: 09:43:52 executing program 4: 09:43:52 executing program 5: 09:43:52 executing program 1: 09:43:52 executing program 3: 09:43:52 executing program 0: 09:43:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev, 0x0, r1}) 09:43:52 executing program 4: 09:43:52 executing program 5: 09:43:52 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x118a8, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x0) 09:43:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @dev}, @IFLA_VTI_LOCAL={0x8, 0x4, @private}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0x48}}, 0x0) 09:43:52 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x800000003, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r3 = dup(r2) sendfile(r1, r3, 0x0, 0x80006) r4 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockname$packet(r4, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x30}}, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 09:43:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev, 0x0, r2}) 09:43:52 executing program 4: 09:43:52 executing program 5: 09:43:52 executing program 4: 09:43:52 executing program 3: 09:43:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev, 0x0, r2}) 09:43:52 executing program 5: r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)) 09:43:52 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f00000001c0)) 09:43:52 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x6480) 09:43:52 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f00007aa000/0x3000)=nil, 0x3000, 0x8) madvise(&(0x7f0000881000/0x3000)=nil, 0x3000, 0xc) 09:43:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev, 0x0, r2}) 09:43:52 executing program 0: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x800000003, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r3 = dup(r2) sendfile(r1, r3, 0x0, 0x80006) r4 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockname$packet(r4, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x30}}, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 09:43:52 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x800000003, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r3 = dup(r2) sendfile(r1, r3, 0x0, 0x80006) r4 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockname$packet(r4, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x30}}, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 09:43:52 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) 09:43:52 executing program 3: perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r3 = dup(r2) sendfile(r1, r3, 0x0, 0x80006) 09:43:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev, 0x0, r1}) 09:43:52 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x501941) 09:43:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c00000010000104020000000000000002000000", @ANYRES32=0x0, @ANYBLOB="03000400000000002800128008000100677265001c000280050017000000000006000f0000000000060002003800000008000a00", @ANYRES32], 0x5c}}, 0x0) 09:43:52 executing program 4: syz_emit_ethernet(0x5a, &(0x7f0000000040)={@dev, @empty, @val={@void, {0x8100, 0x0, 0x1}}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "af49b428242934b848b4a95e99b8d7af31932aade79173f37e371a378560aa0736a5f19d6684c4f74dec725ca6f5e928006e8917abf3e24f8fc2f391dd5d34c0"}}}}, 0x0) 09:43:52 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev, 0x0, r1}) 09:43:52 executing program 0: r0 = socket(0x1e, 0x5, 0x0) write$binfmt_elf32(r0, 0x0, 0xfffffd6d) 09:43:52 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x38}}, 0x0) [ 2685.829116][ T5678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 09:43:53 executing program 4: ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000002c0)={{}, "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"}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7a6, &(0x7f0000000980)={0x0}) 09:43:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1={0xff, 0x0}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x5c}}, 0x0) 09:43:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x50, r3, 0x1, 0x0, 0x0, {0xa}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x106}]}]}, 0x50}}, 0x0) 09:43:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev, 0x0, r1}) 09:43:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c00000010000104020000000000000002000000", @ANYRES32=0x0, @ANYBLOB="03000400000000002800128008000100677265"], 0x5c}}, 0x0) 09:43:53 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}, {{&(0x7f0000000380)=@ipx={0x4, 0x0, 0x0, "d049ce484dbe"}, 0x80, 0x0}}], 0x2, 0x0) 09:43:53 executing program 4: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x0, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @rand_addr, 0x0, 0x0, 'macsec0\x00', 'veth0_macvtap\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40, 'set\x00', 0x6}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) [ 2685.999285][ T5678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2686.088200][ T5708] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2686.100465][ T5708] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 09:43:53 executing program 5: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x4e39b7c0975c6336) 09:43:53 executing program 0: socket$inet6(0x2c, 0x0, 0x0) 09:43:53 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/full\x00', 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x180000) 09:43:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'vlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400000000000080ffff000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) socket$packet(0x11, 0xa, 0x300) socket$netlink(0x10, 0x3, 0x0) 09:43:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev}) 09:43:53 executing program 3: socket(0x2a, 0x80802, 0x0) 09:43:53 executing program 1: r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$getownex(r1, 0x40e, &(0x7f000045fff8)) 09:43:53 executing program 0: socket$inet6(0x2, 0x3, 0x0) 09:43:53 executing program 5: socket$inet6(0x2, 0xa, 0x200007) 09:43:53 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x800000003, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r3 = dup(r2) sendfile(r1, r3, 0x0, 0x80006) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14, 0x80000) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xffffff33) r6 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000024000d0f00"/20, @ANYRES32=r5, @ANYBLOB="000000000104000000000000280001007069650004000200"], 0x30}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 09:43:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev}) [ 2686.225821][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:43:53 executing program 5: getgroups(0x1, &(0x7f0000000040)=[0xee01]) [ 2686.283753][ T5737] bridge369: port 1(syz_tun) entered disabled state [ 2686.308583][ T5737] bridge370: port 1(syz_tun) entered blocking state 09:43:53 executing program 0: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f00000000c0)) [ 2686.364081][ T5737] bridge370: port 1(syz_tun) entered disabled state 09:43:53 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/seq\x00', 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 09:43:53 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x800000003, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r3 = dup(r2) sendfile(r1, r3, 0x0, 0x80006) r4 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockname$packet(r4, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000024000d0f00"/20, @ANYRES32, @ANYBLOB="000000000104000000000000280001007069650004000200"], 0x30}}, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 2686.425806][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 09:43:53 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4, 0x634080) 09:43:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev}) 09:43:53 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x3, 0x0) 09:43:53 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x800000003, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r3 = dup(r2) sendfile(r1, r3, 0x0, 0x80006) r4 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14, 0x80000) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0xffffff33) r6 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000024000d0f00"/20, @ANYRES32=r5, @ANYBLOB="000000000104000000000000280001007069650004000200"], 0x30}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 09:43:53 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev, 0x0, r1}) 09:43:53 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000045c0)={0x1b, 0x0, 0x0, 0x2000}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 09:43:53 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) 09:43:53 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev, 0x0, r1}) 09:43:53 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x800000003, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r3 = dup(r2) sendfile(r1, r3, 0x0, 0x80006) r4 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockname$packet(r4, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000024000d0f00"/20, @ANYRES32, @ANYBLOB="000000000104000000000000280001007069650004000200"], 0x30}}, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 09:43:53 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000), 0x10) 09:43:54 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/seq\x00', 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 09:43:54 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x9, 0x1, {0x2, @raw_data="89397a5c7bf1ae22b0ceabf3c1df2d702e1c5566744207ed86a5c000949ceeaaff1c75cea69646117772531c1e609922c582de4fff121f15724af8fdbb13a0ead99e1aff81ff3e1978261800a008a208a243a29e4bade90d0ccd39535d090762ace763795868594f985e43b42c9a588085313cfe4a86fac17026b46768f66c39f11d1c927e90d9fcfb633a54ae515be88e8ff01385e15dc112fe915bab67f19e273871ad8bb89be458d7b69d476f3b8b3e49d9bc7623698c12fc853805c6ddb7963d059ceac412ca"}}) 09:43:54 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/full\x00', 0x0, 0x0) connect$pppoe(r0, 0x0, 0xffffffffffffff80) 09:43:54 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) 09:43:54 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev, 0x0, r1}) 09:43:54 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x800000003, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x101802, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000040)='0', 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x0, 0x0) r3 = dup(r2) sendfile(r1, r3, 0x0, 0x80006) r4 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockname$packet(r4, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000024000d0f00"/20, @ANYRES32, @ANYBLOB="000000000104000000000000280001007069650004000200"], 0x30}}, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 09:43:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vxcan0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 09:43:54 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/full\x00', 0x0, 0x0) connect$pppoe(r0, 0x0, 0x63) 09:43:54 executing program 4: r0 = socket$inet6(0x2, 0x2, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 09:43:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1100}]}}}]}, 0x3c}}, 0x0) 09:43:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000740)={'vxcan0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 09:43:54 executing program 1: r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$getownex(r1, 0x11, &(0x7f000045fff8)) 09:43:54 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/seq\x00', 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0) dup(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2691.961408][ T1650] oom_reaper: reaped process 5814 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 2691.979858][ T8043] ================================================================== [ 2691.983753][ T4882] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2691.988026][ T8043] BUG: KCSAN: data-race in __es_shrink / __es_shrink [ 2691.988034][ T8043] [ 2692.008092][ T8043] write to 0xffff88810393fc78 of 8 bytes by task 4882 on cpu 1: [ 2692.015711][ T8043] __es_shrink+0x3a0/0x560 [ 2692.020116][ T8043] ext4_es_scan+0x87/0x210 [ 2692.021084][ T4882] CPU: 1 PID: 4882 Comm: systemd-journal Not tainted 5.10.0-rc4-syzkaller #0 [ 2692.024518][ T8043] do_shrink_slab+0x28b/0x550 [ 2692.033249][ T4882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2692.037902][ T8043] shrink_slab+0xea/0x1c0 [ 2692.047924][ T4882] Call Trace: [ 2692.052232][ T8043] shrink_node_memcgs+0x27a/0x410 [ 2692.055522][ T4882] dump_stack+0x116/0x15d [ 2692.060515][ T8043] shrink_node+0x9d2/0x11d0 [ 2692.064817][ T4882] dump_header+0x98/0x410 [ 2692.069289][ T8043] shrink_zones+0x29f/0x470 [ 2692.073591][ T4882] oom_kill_process+0x182/0x3e0 [ 2692.078062][ T8043] do_try_to_free_pages+0x193/0x6e0 [ 2692.082922][ T4882] out_of_memory+0x610/0x8c0 [ 2692.088052][ T8043] try_to_free_pages+0x399/0x870 [ 2692.092612][ T4882] __alloc_pages_slowpath+0x740/0x9c0 [ 2692.097516][ T8043] __alloc_pages_slowpath+0x52f/0x9c0 [ 2692.102857][ T4882] __alloc_pages_nodemask+0x269/0x350 [ 2692.108205][ T8043] __alloc_pages_nodemask+0x269/0x350 [ 2692.113552][ T4882] alloc_pages_current+0x21d/0x310 [ 2692.119010][ T8043] alloc_pages_current+0x21d/0x310 [ 2692.124091][ T4882] __page_cache_alloc+0x4d/0xf0 [ 2692.129170][ T8043] __page_cache_alloc+0x4d/0xf0 [ 2692.133994][ T4882] pagecache_get_page+0x554/0x980 [ 2692.138846][ T8043] page_cache_ra_unbounded+0x1ae/0x4c0 [ 2692.143849][ T4882] filemap_fault+0xbe6/0x12e0 [ 2692.149276][ T8043] do_page_cache_ra+0xa7/0xc0 [ 2692.153949][ T4882] ext4_filemap_fault+0x4b/0x60 [ 2692.158569][ T8043] filemap_fault+0x6b8/0x12e0 [ 2692.163567][ T4882] do_read_fault+0x403/0x760 [ 2692.168220][ T8043] ext4_filemap_fault+0x4b/0x60 [ 2692.172780][ T4882] handle_mm_fault+0xfeb/0x1770 [ 2692.177599][ T8043] do_read_fault+0x403/0x760 [ 2692.182424][ T4882] do_user_addr_fault+0x33e/0x730 [ 2692.186983][ T8043] handle_mm_fault+0xfeb/0x1770 [ 2692.191978][ T4882] exc_page_fault+0x91/0x290 [ 2692.196797][ T8043] do_user_addr_fault+0x33e/0x730 [ 2692.201358][ T4882] ? asm_exc_page_fault+0x8/0x30 [ 2692.206347][ T8043] exc_page_fault+0x91/0x290 [ 2692.211291][ T4882] asm_exc_page_fault+0x1e/0x30 [ 2692.215851][ T8043] asm_exc_page_fault+0x1e/0x30 [ 2692.220668][ T4882] RIP: 0033:0x7f392a80f2e3 [ 2692.225528][ T8043] [ 2692.229927][ T4882] Code: Unable to access opcode bytes at RIP 0x7f392a80f2b9. [ 2692.232221][ T8043] read to 0xffff88810393fc78 of 8 bytes by task 8043 on cpu 0: [ 2692.239563][ T4882] RSP: 002b:00007fff54744338 EFLAGS: 00010246 [ 2692.247070][ T8043] __es_shrink+0x374/0x560 [ 2692.247078][ T4882] [ 2692.253130][ T8043] ext4_es_scan+0x87/0x210 [ 2692.257526][ T4882] RAX: 0000000000000001 RBX: 00005635521c61e0 RCX: 00007f392a80f2e3 [ 2692.259820][ T8043] do_shrink_slab+0x28b/0x550 [ 2692.264199][ T4882] RDX: 0000000000000013 RSI: 00007fff54744340 RDI: 0000000000000008 [ 2692.272168][ T8043] shrink_slab+0xea/0x1c0 [ 2692.276827][ T4882] RBP: 00007fff54744530 R08: 00007fff5477c080 R09: 0000000000000000 [ 2692.284796][ T8043] shrink_node_memcgs+0x27a/0x410 [ 2692.289093][ T4882] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff54744340 [ 2692.297041][ T8043] shrink_node+0x9d2/0x11d0 [ 2692.302030][ T4882] R13: 0000000000000001 R14: ffffffffffffffff R15: 0005b4aeea6a0946 [ 2692.309975][ T8043] shrink_zones+0x29f/0x470 [ 2692.314741][ T4882] Mem-Info: [ 2692.322389][ T8043] do_try_to_free_pages+0x193/0x6e0 [ 2692.326885][ T4882] active_anon:15247 inactive_anon:197043 isolated_anon:0 [ 2692.326885][ T4882] active_file:49 inactive_file:0 isolated_file:0 [ 2692.326885][ T4882] unevictable:0 dirty:2 writeback:0 [ 2692.326885][ T4882] slab_reclaimable:8634 slab_unreclaimable:41164 [ 2692.326885][ T4882] mapped:57414 shmem:9408 pagetables:2754 bounce:0 [ 2692.326885][ T4882] free:18131 free_pcp:215 free_cma:0 [ 2692.329946][ T8043] try_to_free_pages+0x399/0x870 [ 2692.335134][ T4882] Node 0 active_anon:60988kB inactive_anon:787732kB active_file:40kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:229612kB dirty:4kB writeback:0kB shmem:37196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB kernel_stack:5216kB all_unreclaimable? yes [ 2692.371529][ T8043] __alloc_pages_slowpath+0x52f/0x9c0 [ 2692.371544][ T8043] __alloc_pages_nodemask+0x269/0x350 [ 2692.376552][ T4882] Node 1 active_anon:0kB inactive_anon:440kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:4kB writeback:0kB shmem:436kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB all_unreclaimable? yes [ 2692.405510][ T8043] alloc_pages_current+0x21d/0x310 [ 2692.405526][ T8043] __page_cache_alloc+0x4d/0xf0 [ 2692.410863][ T4882] Node 0 [ 2692.416202][ T8043] pagecache_get_page+0x554/0x980 [ 2692.416211][ T8043] filemap_fault+0xbe6/0x12e0 [ 2692.416220][ T8043] ext4_filemap_fault+0x4b/0x60 [ 2692.416229][ T8043] do_read_fault+0x403/0x760 [ 2692.416237][ T8043] handle_mm_fault+0xfeb/0x1770 [ 2692.416248][ T8043] do_user_addr_fault+0x33e/0x730 [ 2692.416257][ T8043] exc_page_fault+0x91/0x290 [ 2692.416266][ T8043] asm_exc_page_fault+0x1e/0x30 [ 2692.416268][ T8043] [ 2692.416271][ T8043] Reported by Kernel Concurrency Sanitizer on: [ 2692.416281][ T8043] CPU: 0 PID: 8043 Comm: in:imklog Not tainted 5.10.0-rc4-syzkaller #0 [ 2692.416287][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2692.416291][ T8043] ================================================================== [ 2692.416296][ T8043] Kernel panic - not syncing: panic_on_warn set ... [ 2692.416304][ T8043] CPU: 0 PID: 8043 Comm: in:imklog Not tainted 5.10.0-rc4-syzkaller #0 [ 2692.416309][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2692.416312][ T8043] Call Trace: [ 2692.416325][ T8043] dump_stack+0x116/0x15d [ 2692.416336][ T8043] panic+0x1e7/0x5fa [ 2692.416347][ T8043] ? vprintk_emit+0x2f2/0x370 [ 2692.416365][ T8043] kcsan_report+0x67b/0x680 [ 2692.443788][ T4882] DMA free:15368kB min:176kB low:220kB high:264kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2692.448862][ T8043] ? kcsan_setup_watchpoint+0x46a/0x4d0 [ 2692.453676][ T4882] lowmem_reserve[]: [ 2692.456587][ T8043] ? __es_shrink+0x374/0x560 [ 2692.456603][ T8043] ? ext4_es_scan+0x87/0x210 [ 2692.461590][ T4882] 0 [ 2692.466237][ T8043] ? do_shrink_slab+0x28b/0x550 [ 2692.466246][ T8043] ? shrink_slab+0xea/0x1c0 [ 2692.466263][ T8043] ? shrink_node_memcgs+0x27a/0x410 [ 2692.471173][ T4882] 2866 [ 2692.475732][ T8043] ? shrink_node+0x9d2/0x11d0 [ 2692.475748][ T8043] ? shrink_zones+0x29f/0x470 [ 2692.480776][ T4882] 3825 [ 2692.485603][ T8043] ? do_try_to_free_pages+0x193/0x6e0 [ 2692.485619][ T8043] ? try_to_free_pages+0x399/0x870 [ 2692.490171][ T4882] 3825 [ 2692.495008][ T8043] ? __alloc_pages_slowpath+0x52f/0x9c0 [ 2692.495023][ T8043] ? __alloc_pages_nodemask+0x269/0x350 [ 2692.497321][ T4882] 3825 [ 2692.503464][ T8043] ? alloc_pages_current+0x21d/0x310 [ 2692.511679][ T4882] [ 2692.521792][ T8043] ? __page_cache_alloc+0x4d/0xf0 [ 2692.521801][ T8043] ? pagecache_get_page+0x554/0x980 [ 2692.521810][ T8043] ? filemap_fault+0xbe6/0x12e0 [ 2692.521819][ T8043] ? ext4_filemap_fault+0x4b/0x60 [ 2692.521827][ T8043] ? do_read_fault+0x403/0x760 [ 2692.521834][ T8043] ? handle_mm_fault+0xfeb/0x1770 [ 2692.521845][ T8043] ? do_user_addr_fault+0x33e/0x730 [ 2692.521854][ T8043] ? exc_page_fault+0x91/0x290 [ 2692.521864][ T8043] ? asm_exc_page_fault+0x1e/0x30 [ 2692.521881][ T8043] ? isolate_lru_pages+0x988/0xa80 [ 2692.521890][ T8043] ? __mod_memcg_lruvec_state+0xfc/0x260 [ 2692.521901][ T8043] ? mem_cgroup_update_lru_size+0x53/0xe0 [ 2692.521911][ T8043] ? __list_add_valid+0x28/0x90 [ 2692.521922][ T8043] kcsan_setup_watchpoint+0x46a/0x4d0 [ 2692.521939][ T8043] __es_shrink+0x374/0x560 [ 2692.529986][ T4882] Node 0 [ 2692.536631][ T8043] ext4_es_scan+0x87/0x210 [ 2692.536648][ T8043] do_shrink_slab+0x28b/0x550 [ 2692.544925][ T4882] DMA32 free:23036kB min:38948kB low:47148kB high:55348kB reserved_highatomic:0KB active_anon:25020kB inactive_anon:317408kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2940032kB mlocked:0kB pagetables:4256kB bounce:0kB free_pcp:252kB local_pcp:248kB free_cma:0kB [ 2692.554880][ T8043] shrink_slab+0xea/0x1c0 [ 2692.554897][ T8043] shrink_node_memcgs+0x27a/0x410 [ 2692.558163][ T4882] lowmem_reserve[]: [ 2692.562491][ T8043] shrink_node+0x9d2/0x11d0 [ 2692.566369][ T4882] 0 [ 2692.571023][ T8043] shrink_zones+0x29f/0x470 [ 2692.575490][ T4882] 0 [ 2692.602549][ T8043] do_try_to_free_pages+0x193/0x6e0 [ 2692.602565][ T8043] try_to_free_pages+0x399/0x870 [ 2692.608078][ T4882] 959 [ 2692.611874][ T8043] __alloc_pages_slowpath+0x52f/0x9c0 [ 2692.616544][ T4882] 959 [ 2692.630296][ T8043] ? get_page_from_freelist+0x168/0x480 [ 2692.630311][ T8043] __alloc_pages_nodemask+0x269/0x350 [ 2692.632783][ T4882] 959 [ 2692.637606][ T8043] alloc_pages_current+0x21d/0x310 [ 2692.637622][ T8043] __page_cache_alloc+0x4d/0xf0 [ 2692.642087][ T4882] [ 2692.647256][ T8043] pagecache_get_page+0x554/0x980 [ 2692.647271][ T8043] filemap_fault+0xbe6/0x12e0 [ 2692.650000][ T4882] Node 0 [ 2692.654655][ T8043] ext4_filemap_fault+0x4b/0x60 [ 2692.654670][ T8043] do_read_fault+0x403/0x760 [ 2692.659381][ T4882] Normal free:11172kB min:23268kB low:26012kB high:28756kB reserved_highatomic:0KB active_anon:35968kB inactive_anon:470408kB active_file:32kB inactive_file:4kB unevictable:0kB writepending:4kB present:1048576kB managed:982580kB mlocked:0kB pagetables:6740kB bounce:0kB free_pcp:360kB local_pcp:248kB free_cma:0kB [ 2692.662132][ T8043] handle_mm_fault+0xfeb/0x1770 [ 2692.667470][ T4882] lowmem_reserve[]: [ 2692.672556][ T8043] do_user_addr_fault+0x33e/0x730 [ 2692.675295][ T4882] 0 [ 2692.680824][ T8043] exc_page_fault+0x91/0x290 [ 2692.686337][ T4882] 0 [ 2692.689088][ T8043] ? asm_exc_page_fault+0x8/0x30 [ 2692.694339][ T4882] 0 [ 2692.696645][ T8043] asm_exc_page_fault+0x1e/0x30 [ 2692.701646][ T4882] 0 [ 2692.706815][ T8043] RIP: 0033:0x7f524e11822d [ 2692.706836][ T8043] Code: Unable to access opcode bytes at RIP 0x7f524e118203. [ 2692.711646][ T4882] 0 [ 2692.716636][ T8043] RSP: 002b:00007f524bab4580 EFLAGS: 00010293 [ 2692.716644][ T8043] RAX: 000000000000007e RBX: 0000000000000000 RCX: 00007f524e11822d [ 2692.716736][ T8043] RDX: 0000000000001fa0 RSI: 00007f524bab4da0 RDI: 0000000000000004 [ 2692.721559][ T4882] [ 2692.726464][ T8043] RBP: 0000561e9d4f69d0 R08: 0000000000000000 R09: 0000000004000001 [ 2692.726470][ T8043] R10: 0000000000000001 R11: 0000000000000293 R12: 00007f524bab4da0 [ 2692.726482][ T8043] R13: 0000000000001fa0 R14: 0000000000001f9f R15: 00007f524bab4e0a [ 2692.731647][ T4882] Node 1 [ 2692.742150][ T8043] Kernel Offset: disabled [ 2693.046251][ T8043] Rebooting in 86400 seconds..