it4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:06:38 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000020c0)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:06:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:06:39 executing program 0: 03:06:39 executing program 0: 03:06:39 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x2000000000000, 0x200000) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x9) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r6}, {r7}, {r8}], 0x3, 0x0, 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r11 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r9}, {r10}, {r11}], 0x3, 0x0, 0x0, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4104}, {r10, 0x1}, {0xffffffffffffffff, 0x2040}], 0x3, 0x200) bind$alg(r8, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) ioctl(r5, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 940.113190][T12200] usb 4-1: new high-speed USB device number 86 using dummy_hcd 03:06:39 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 03:06:39 executing program 0: [ 940.328334][ T5] usb 2-1: new high-speed USB device number 77 using dummy_hcd 03:06:39 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:06:39 executing program 0: [ 940.383378][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 940.503591][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 940.513091][T12200] usb 4-1: config 0 has no interface number 0 [ 940.519302][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 940.528979][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.541071][T12200] usb 4-1: config 0 descriptor?? [ 940.583607][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 940.803814][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.815060][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 940.825245][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 940.835638][T12200] CoreChips: probe of 4-1:0.159 failed with error -32 [ 941.003487][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 941.012817][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.021082][ T5] usb 2-1: Product: syz [ 941.025477][ T5] usb 2-1: Manufacturer: syz [ 941.030146][ T5] usb 2-1: SerialNumber: syz [ 941.305721][ T5] cdc_ncm 2-1:1.0: bind() failure [ 941.316165][ T5] cdc_ncm 2-1:1.1: bind() failure [ 941.338975][ T5] usb 2-1: USB disconnect, device number 77 [ 942.743375][ C1] net_ratelimit: 24 callbacks suppressed [ 942.743390][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 942.755539][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 943.383379][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 943.389514][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 943.393569][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 943.405944][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 943.412205][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 943.418419][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:06:42 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000020c0)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:06:42 executing program 0: 03:06:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0xa0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x3c, &(0x7f0000000200)=""/181, &(0x7f0000000000)=0xb5) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) r8 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r8}, {r9}, {r10}], 0x3, 0x0, 0x0, 0x0) r11 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x100, 0x0) read(r11, &(0x7f0000000ac0)=""/4096, 0x1000) getsockopt$inet_mreqn(r10, 0x0, 0x24, &(0x7f00000000c0)={@broadcast, @multicast2}, &(0x7f00000002c0)=0xc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:06:42 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x6, 0x5ebe7d5befe38dec) syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x42b, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0xb, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'c\x9at\xde\xd8\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x21301180}, 0xfffffcfb, &(0x7f0000000380)={&(0x7f0000000340)={0xffffffffffffff61, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x44084) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:06:42 executing program 1: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:06:42 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) [ 943.797746][ T5] usb 4-1: USB disconnect, device number 86 03:06:43 executing program 0: 03:06:43 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x10000032, 0xfffffffffffffdba) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:06:43 executing program 0: 03:06:43 executing program 0: 03:06:43 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x3b, &(0x7f0000000000)="58063dda0ef8af330d660270904c325f5cb253212a7899bf9b67dbab3dff6ddf19c53ee237dd73dfe728f2afa37401391d3b46e1ae6c2f845a27aba285", 0x3d) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 944.183564][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 944.190035][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:06:43 executing program 0: [ 944.273222][ T5] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 944.353149][T11826] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 944.523210][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 944.593066][T11826] usb 2-1: Using ep0 maxpacket: 8 [ 944.643376][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 944.652067][ T5] usb 4-1: config 0 has no interface number 0 [ 944.658599][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 944.667828][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.677834][ T5] usb 4-1: config 0 descriptor?? [ 944.793565][T11826] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.804717][T11826] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 944.814713][T11826] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 944.983573][T11826] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 944.993306][T11826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.001773][T11826] usb 2-1: Product: syz [ 945.006152][T11826] usb 2-1: Manufacturer: syz [ 945.010848][T11826] usb 2-1: SerialNumber: syz [ 945.293678][T11826] cdc_ncm 2-1:1.0: bind() failure [ 945.303914][T11826] cdc_ncm 2-1:1.1: bind() failure [ 945.314934][T11826] usb 2-1: USB disconnect, device number 78 [ 945.366112][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 946.983577][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 947.013520][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 947.025524][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 947.037967][ T5] usb 4-1: USB disconnect, device number 87 03:06:46 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:06:46 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 03:06:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x10400) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f00000000c0)=0xf645) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) fallocate(r2, 0x4, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000200)) ioctl(r5, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:06:46 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000140)={0x3, "229f1b"}, 0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x40, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000180)=""/90, 0x5a}, &(0x7f0000000240), 0x10}, 0x20) 03:06:46 executing program 0: 03:06:46 executing program 1: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:06:46 executing program 0: 03:06:46 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @rand_addr=0x10000}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:06:46 executing program 2: mount(&(0x7f0000000100)=ANY=[@ANYBLOB="2f94daf7"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nsfs\x00', 0x665b1d7ac3efae1, &(0x7f0000000240)='filter\x00') setxattr$security_smack_entry(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='\x00', 0x1, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) listen(r4, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f00000001c0)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:06:46 executing program 0: 03:06:46 executing program 4: arch_prctl$ARCH_SET_GS(0x1001, 0xf34) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast2}, 0xfffffffffffffe84) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0xfffffffd, @dev={0xfe, 0x80, [], 0x24}, 0x4}, 0x1c) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/r\xd3\xe5W\xcdX\x8b;i\"0ncci\x02', 0x482, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000100)=0x662) r5 = socket$netlink(0x10, 0x3, 0x200000000000004) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x3) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:06:46 executing program 0: [ 947.843653][ T5] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 948.033831][T12200] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 948.083173][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 948.203284][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 948.211648][ T5] usb 4-1: config 0 has no interface number 0 [ 948.218123][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 948.227439][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.238281][ T5] usb 4-1: config 0 descriptor?? [ 948.283491][T12200] usb 2-1: Using ep0 maxpacket: 8 [ 948.343487][ C1] net_ratelimit: 22 callbacks suppressed [ 948.343511][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 948.356036][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 948.363539][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 948.369592][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 948.493731][T12200] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.505167][T12200] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 948.515138][T12200] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 948.683533][T12200] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 948.693612][T12200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.701705][T12200] usb 2-1: Product: syz [ 948.706177][T12200] usb 2-1: Manufacturer: syz [ 948.710868][T12200] usb 2-1: SerialNumber: syz [ 948.923365][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 948.983556][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 948.989815][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 949.003783][T12200] cdc_ncm 2-1:1.0: bind() failure [ 949.014039][T12200] cdc_ncm 2-1:1.1: bind() failure [ 949.024365][T12200] usb 2-1: USB disconnect, device number 79 [ 949.623504][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 949.623622][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 949.629799][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 949.635633][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 950.693380][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 950.705343][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 950.717586][ T5] usb 4-1: USB disconnect, device number 88 03:06:50 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:06:50 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x28}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x42b, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0xb, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'c\x9at\xde\xd8\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r5, 0x100, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008880}, 0x1) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r6, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x7f2cba8855d4402c) ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @te1=&(0x7f0000000200)={0x2, 0x0, 0x9cf6, 0x5}}}) mount(&(0x7f00000003c0)=@sr0='/dev/sr0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='btrfs\x00', 0x2, &(0x7f0000000480)='c\x9at\xde\xd8\x00') r7 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r7}, {r8}, {r9}], 0x3, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x19, &(0x7f0000000140)={'vilter\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x01\x00', 0x4}, 0x68) 03:06:50 executing program 0: 03:06:50 executing program 1: r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:06:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:06:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4f23, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:06:50 executing program 0: 03:06:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) prctl$PR_GET_KEEPCAPS(0x7) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:06:50 executing program 0: 03:06:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000200)=0x33, 0x6b) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xe) 03:06:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:06:50 executing program 0: [ 951.593734][ T5] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 951.715935][T11826] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 951.843158][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 951.963242][T11826] usb 2-1: Using ep0 maxpacket: 8 [ 951.963484][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 951.976930][ T5] usb 4-1: config 0 has no interface number 0 [ 951.983286][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 951.992587][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.002649][ T5] usb 4-1: config 0 descriptor?? [ 952.163361][T11826] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.174928][T11826] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 952.184937][T11826] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 952.353416][T11826] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 952.362875][T11826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.371257][T11826] usb 2-1: Product: syz [ 952.375862][T11826] usb 2-1: Manufacturer: syz [ 952.380593][T11826] usb 2-1: SerialNumber: syz [ 952.703323][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 953.183497][T11826] cdc_ncm 2-1:1.0: bind() failure [ 953.193980][T11826] cdc_ncm 2-1:1.1: bind() failure [ 953.204163][T11826] usb 2-1: USB disconnect, device number 80 [ 953.783571][ C1] net_ratelimit: 20 callbacks suppressed [ 953.783594][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 953.783941][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 953.789709][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 953.795849][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 953.813286][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 954.303479][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 954.333443][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 954.345555][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 954.357165][ T5] usb 4-1: USB disconnect, device number 89 [ 954.583279][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 954.589454][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 954.595726][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 954.601691][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:06:53 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:06:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x81}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={r1, 0x9e07}, 0x8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:06:53 executing program 0: 03:06:53 executing program 1: r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:06:53 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) unlinkat(r5, &(0x7f0000000100)='./file0\x00', 0x400) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="8a3ed4a7464bc896c3b532ecf5820eec6b4052d04e6b82340afca00545429ec0604ca488b186260a6c4ca0131b95ec7f081c98ce7a9a22ebe1401ce73a077b0f36e499e38e41a1a90921c8371734ad4defa85a9bc63d2c70cc96f73869de9923dc136b43e6b0b160fad5158b0bcb9756be2037a672969631ef08c4cbf3ee3e543599b7c44cea40c4a06ea27740f304d7858df1947357e2d5b4a637ce50b2563a1b5193046bdd4af8b7", 0xa9}, {&(0x7f0000000300)="cbe5b11e086a587523c37362015266cd441b16b033dd0856a131e46063a87bf8431b3f782a03d9d12c6ae1a6343b7bf54571e3817641f514ef8085b5bd47ac62de5d0d5d32e6c9d82b9c00729ed395157b74fb54a6d7", 0x56}, {&(0x7f0000000380)="1a118b38ebd899556f8e66c18fc4e0e8a123c2b9dc0cebe98f531aad07883bad1cdd7943db2d2eb4927f5f23658e095455a8cfe2be609a3357b42c2cbfce0f6a0096eff6c96932c3a9fbae8da2fbeefea0d6054702199431eaa6df7f7b7f04a8f5abf4bde72f2356a4890dda60eb8581ca752eeba92dfcb819d371ffcaab2d28388674f8ce2d054addd217c23474f05843c6033ededf0cf44a0d42100672cca3eb28bb6b37f5fd2e", 0xa8}], 0x3, 0x9) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) write$smack_current(r2, &(0x7f0000000140)='/dev/dsp\x00', 0x9) 03:06:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:06:53 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x2, 0x0) close(r2) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x9) 03:06:54 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) close(r1) 03:06:54 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x4, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @local, 0xfffffffc}, 0x1c) socket$netlink(0x10, 0x3, 0x200000000000004) r7 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x40, 0x200000) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r10 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r12 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r10}, {r11}, {r12}], 0x3, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r12, 0x8108551b, &(0x7f0000000240)={0x10001, 0x0, "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"}) ppoll(&(0x7f0000000a80)=[{r7}, {r8}, {r9}], 0x3, 0x0, 0x0, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000300000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:06:54 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) close(r1) [ 955.194504][T11826] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 955.223570][ C1] protocol 88fb is buggy, dev hsr_slave_0 03:06:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) getpeername$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x1c) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:06:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) r5 = dup2(r2, 0xffffffffffffffff) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="81792eee25f4f17b7c464e0ba6bcc23ac886ab484e79000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r10, 0x0) lstat(0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r8, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r10}, {0x2, 0x1}], {}, [{0x8, 0x4, r11}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r14, 0x0) lstat(0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r12, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000100fdd4d9620e000000000002242868", @ANYRES32=r14, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="040000000000000008000400", @ANYRES32=r15, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="10000200000000002000020000000000"], 0x44, 0x2) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r18, 0x0) lstat(0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r16, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r18}, {0x2, 0x1}], {}, [{0x8, 0x4, r19}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0, 0xee01, r11, 0xee00, r15, r19]) fchownat(r5, &(0x7f0000000000)='./file0\x00', r6, r20, 0x800) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 955.343549][ T5] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 955.523180][T11826] usb 4-1: Using ep0 maxpacket: 32 [ 955.583150][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 955.643514][T11826] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 955.651939][T11826] usb 4-1: config 0 has no interface number 0 [ 955.658329][T11826] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 955.667647][T11826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.677752][T11826] usb 4-1: config 0 descriptor?? [ 955.783379][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.794836][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 955.805013][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 955.983339][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 955.992711][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.001189][ T5] usb 2-1: Product: syz [ 956.005631][ T5] usb 2-1: Manufacturer: syz [ 956.010413][ T5] usb 2-1: SerialNumber: syz [ 956.383367][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 956.813872][ T5] cdc_ncm 2-1:1.0: bind() failure [ 956.823738][ T5] cdc_ncm 2-1:1.1: bind() failure [ 956.834411][ T5] usb 2-1: USB disconnect, device number 81 [ 957.993438][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 958.023436][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 958.035288][T11826] CoreChips: probe of 4-1:0.159 failed with error -71 [ 958.046627][T11826] usb 4-1: USB disconnect, device number 90 03:06:57 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:06:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:06:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) write$binfmt_elf64(r0, &(0x7f0000001780)=ANY=[@ANYBLOB="7f454c46000004000000000000000000000000000000000000000000000000004500000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac68cbbf551620dac65755f6812b50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5916c6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000083cd8fb593ceacdfab88ed06d9229000"/2377], 0x949) 03:06:57 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2, 0x1b}, 0xe9) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) r2 = semget$private(0x0, 0x2, 0x4) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x3, 0x2, 0x4, 0x9, 0x69, 0x200, 0x7d2]) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='\x00\b\a\x00\x00\x00\x00\x00\x00J\x1e\xf6\x93\xcd\xa7\x04\x11\x00', 0x0, 0x180) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000100)) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:06:57 executing program 1: r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:06:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:06:57 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x4}, @mss, @mss, @mss, @timestamp, @timestamp], 0x21be) 03:06:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffff800, 0x4000) write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0x9) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:06:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f00000000c0)={0x7, 0x7, 0xed, 0x2, 0x19, 0x0, 0xf7, 0xbf, 0x7, 0x7ff, 0x4, 0x4}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008916, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:06:57 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e21}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400000, 0x0) listen(r0, 0xb9) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x4e64, 0x1, @mcast1, 0x80200000}, 0x16f) r6 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r6}, {r7}, {r8}], 0x3, 0x0, 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r8, 0x111, 0x2, 0x1, 0x4) r9 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r11 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r12 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r13 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r14 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r12}, {r13}, {r14}], 0x3, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r14, 0x0, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x1b, 0x5, 0x460, 0xe0, 0xe0, 0xe0, 0x0, 0x2a8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0x98, 0xe0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x12, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @icmp_id=0x66, @icmp_id=0x65}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'bridge_slave_0\x00', 'bcsf0\x00', {}, {0x55def5f6c5f98b40}, 0x7a, 0x2, 0x8}, 0x0, 0x98, 0xd0}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x7, @multicast2, @loopback, @gre_key=0x8000, @port=0x4e23}}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff, 'ip_vti0\x00', 'sit0\x00', {0x80}, {}, 0x0, 0x2, 0x4}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x0, 0x52, 0xc5}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @broadcast, @empty, @port=0x4e21, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x1, 0x5}}, @common=@inet=@tcpmss={0x28, 'tcpmss\x00', 0x0, {0x1ff, 0xff, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @loopback, @remote, @icmp_id=0x65, @port=0x4e21}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f00000000c0)=0x40, 0x4) ppoll(&(0x7f0000000a80)=[{r9}, {r10}, {r11}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet_mreq(r11, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @remote}, 0x8) 03:06:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x40, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000300)={0x14, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @release={0x40046306, 0x2}], 0x71, 0x0, &(0x7f0000000280)="b0097e23a60b11871fbc6c604fcc9536c79272f7b4ec608f8e2d0d1930aeb8dd8adb8956a297b9d288b2c0e2206e362e934cebaa8e8e821aa5d0a50677ee657c58bfbb257ef4a2d3da09d3b56f1bfd6fe9d5e44b387a687542ed0eb33d704753b26de50a34f3765334ff218d532d146e58"}) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000000)=@generic={0x2, 0x7, 0x80000001}) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000200)={{0x1d, @empty, 0x4e21, 0x0, 'none\x00', 0x90f91414bb931abe, 0xffff1467, 0x7d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x10000, 0x1ff, 0x9, 0xe0e6}}, 0x44) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 958.855524][T11826] usb 4-1: new high-speed USB device number 91 using dummy_hcd 03:06:58 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) r1 = creat(&(0x7f0000002440)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000240)='e\xf61r\x05\xd7\xa1&\x00', 0x9) creat(&(0x7f0000002440)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000280)=0x4) r2 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x60, &(0x7f0000000080)={@multicast1, @multicast2}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'sit0\x00'}) creat(&(0x7f0000000180)='./file0\x00', 0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r4, 0xc0287c02, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r6}, {r7}, {r8}], 0x3, 0x0, 0x0, 0x0) ioctl$NBD_DISCONNECT(r8, 0xab08) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001540)={'sit0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040), &(0x7f0000000080)=0x8) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_ID(r9, 0x80082407, &(0x7f0000000300)) [ 959.013542][T22410] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 959.135424][T11826] usb 4-1: Using ep0 maxpacket: 32 [ 959.253269][T22410] usb 2-1: Using ep0 maxpacket: 8 [ 959.263492][T11826] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 959.271905][T11826] usb 4-1: config 0 has no interface number 0 [ 959.278470][T11826] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 959.287835][T11826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.297823][T11826] usb 4-1: config 0 descriptor?? [ 959.383617][ C1] net_ratelimit: 23 callbacks suppressed [ 959.383639][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 959.395931][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 959.453510][T22410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.465150][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 959.475579][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 959.643452][T22410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 959.653686][T22410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.661917][T22410] usb 2-1: Product: syz [ 959.666298][T22410] usb 2-1: Manufacturer: syz [ 959.671038][T22410] usb 2-1: SerialNumber: syz [ 959.993404][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 960.023567][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 960.023694][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 960.029772][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 960.035685][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 960.048055][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 960.054347][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 960.463742][T22410] cdc_ncm 2-1:1.0: bind() failure [ 960.473891][T22410] cdc_ncm 2-1:1.1: bind() failure [ 960.485003][T22410] usb 2-1: USB disconnect, device number 82 [ 960.823501][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 960.829761][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 961.603519][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 961.633405][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 961.645544][T11826] CoreChips: probe of 4-1:0.159 failed with error -71 [ 961.657874][T11826] usb 4-1: USB disconnect, device number 91 03:07:01 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:07:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'ve\x81\x00', @ifru_names='netdevsim0\x00'}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:01 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff7, 0x13, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xa8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0xffffffffffffff26, &(0x7f0000000180)={0x50, 0x0, 0xff0b, {0xfffffffffffffe5c, 0x0, "14074b9f062e0ecf3f49571176778fdfb2383d5cabdbf784fb31826cb8793b3b92d132650268df0d21829b4ade25ba2d7785b486f323b21bc20f46c43d2ab3897a9b7f1e76f7f2b4fb1b0153634000000005050c967bbc690a8e632d7a1be36f755c875a5e306f6ab28667998b26e8c22ba8003d77694d8074ea4f94bb89af5fb2482f49164617cbedbcf8d2faa88d8cfe1db888379dfb411a36b02589f9794596bf39a65111518cc0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 03:07:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800088}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x768e}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x9a132de11d43293f) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) pidfd_open(r6, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7cdac243, 0x100000000, r6}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:01 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x800) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) ioctl$TCSETX(r5, 0x5433, &(0x7f0000000280)={0x3f, 0x200, [0xb0a5, 0x6d4, 0x7fff, 0x2, 0x2], 0x682}) getsockopt$inet_tcp_int(r2, 0x6, 0x10, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x2574, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 962.453253][T11826] usb 1-1: new high-speed USB device number 34 using dummy_hcd 03:07:01 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) r4 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:01 executing program 2: accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup2(r3, r3) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000300)=0xfffffffeffffffff, 0x189) bind$inet6(r2, &(0x7f0000710fe4)={0xa, 0x4e21}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x20000004e21, @multicast1}, 0x10) r7 = dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r4, r10, 0x0, 0x4000000001000009) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x128}, 0xfffffffffffffe44) r11 = dup3(r1, r0, 0x100000) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r12 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r13 = socket$packet(0x11, 0x2, 0x300) r14 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r15 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r16 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r14}, {r15}, {r16}], 0x3, 0x0, 0x0, 0x0) r17 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r18 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r19 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r17}, {r18}, {r19}], 0x3, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000200)=[{r13, 0x80}, {r15, 0x144}, {0xffffffffffffffff, 0x2}, {r18, 0x810}], 0x0, 0x0, 0x0, 0xffffffffffffff99) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) [ 962.539200][ T5] usb 4-1: new high-speed USB device number 92 using dummy_hcd 03:07:01 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x8, 0x1, 0x204, 0x3f, 0x3, 0x0, 0xfffffff7, 0x3}, 0x20) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0xac02fa2a4e7379da, 0x0) write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000000200)={0xe, 0x9, 0xd9, 0x5, 0x49, "92c9dd9ee144718a4c9644b166858fdc9fbacaeb1856f57e6f04d86db0afeefd03a647460a534a70686fb7a5613585195234511beb03717173d72e4f57ec6fc292a47a086a8e8a5a02"}, 0x55) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 962.703417][T22410] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 962.723340][T11826] usb 1-1: Using ep0 maxpacket: 16 03:07:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x12}}, 0xffffffffffffffe5) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bff00000100"/72, 0x48}], 0x1) [ 962.783357][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 962.853463][T11826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.865273][T11826] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 962.878553][T11826] usb 1-1: New USB device found, idVendor=1ff7, idProduct=0013, bcdDevice= 0.40 [ 962.887835][T11826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.909489][T11826] usb 1-1: config 0 descriptor?? [ 962.925650][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 962.935081][ T5] usb 4-1: config 0 has no interface number 0 [ 962.941513][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 962.950890][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.970518][T22410] usb 2-1: Using ep0 maxpacket: 8 [ 963.002288][ T5] usb 4-1: config 0 descriptor?? [ 963.183821][T22410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.195023][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 963.205162][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 963.373380][T22410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 963.382685][T22410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.391084][T22410] usb 2-1: Product: syz [ 963.395400][T22410] usb 2-1: Manufacturer: syz [ 963.400064][T22410] usb 2-1: SerialNumber: syz [ 963.463674][T11826] usbhid 1-1:0.0: can't add hid device: -71 [ 963.469961][T11826] usbhid: probe of 1-1:0.0 failed with error -71 [ 963.486760][T11826] usb 1-1: USB disconnect, device number 34 [ 963.703705][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 964.184813][T22410] cdc_ncm 2-1:1.0: bind() failure [ 964.197153][T22410] cdc_ncm 2-1:1.1: bind() failure [ 964.207786][T11826] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 964.217649][T22410] usb 2-1: USB disconnect, device number 83 [ 964.453078][T11826] usb 1-1: Using ep0 maxpacket: 16 [ 964.573416][T11826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.584769][T11826] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 964.597795][T11826] usb 1-1: New USB device found, idVendor=1ff7, idProduct=0013, bcdDevice= 0.40 [ 964.607102][T11826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.617149][T11826] usb 1-1: config 0 descriptor?? [ 964.953497][T11826] usbhid 1-1:0.0: can't add hid device: -71 [ 964.960595][T11826] usbhid: probe of 1-1:0.0 failed with error -71 [ 964.970645][T11826] usb 1-1: USB disconnect, device number 35 [ 964.983571][ C1] net_ratelimit: 22 callbacks suppressed [ 964.983595][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 964.995856][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 965.002267][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 965.008654][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 965.303283][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 965.333345][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 965.345257][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 965.356810][ T5] usb 4-1: USB disconnect, device number 92 [ 965.623417][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 965.630201][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:04 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:07:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000200)=""/104, &(0x7f0000000280)=0x68) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:04 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000058c0)={{0xcc, 0x8, 0x8, 0x306, 0x16e, 0x0, 0x392, 0x7}, "6e3949d30726981afd5beeac0d262406b2d96bece972b98560e5dde2bb0fb61b1ec4855b40a444e90abb1e4366de38ba6442b33cccbaaffe9d32b63ed1204423de57d39dd255efd45e311014bf8dabbbe7e44155f6b3c6ada51d62e719f7735abfdf88c6", [[], [], []]}, 0x384) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000005680)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="1e5e96d8b5a31e172769239bad42f1df836ae6e8b0a7d8eb064c887b764d7cefca657c939c369b74d700bf1cc5665fc14785223399dbdb4e5c187a1c492c342d0ca8f122d6eb0b42147e112519e75d3c7983b247ab0af3f8a5a3eb97bbbe570df261df0e5c62c1eef5d709103f3a6b8397e21b6e205efaf2c910ea045e2c647325bad5c083e9fef80e7b0c6a44954b7f518fa6f0482bfbcc8f63ad8f36c577afa7e8d1a25beea5c1972ee7ff2f252933b1e904e58f7d348b9eb5b540", 0xbc}], 0x1, &(0x7f0000000240)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0xfffffff8}], 0x48, 0x44}, {0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="c1f2e4b2ee66127db101131436af1a9309822af4bd414714fb4635a36373e2f487e587d9af44422583cee5b713df9a1d947e2ebd0ba27f2587a35e73426de314e1bc6050a1734145cf75532bc73fdd7e370f06a492ab094c2a751fda15226150414be652571c695a7a91979f9d4309762ee7ea0caf3440bdc966c984682ccc497cf8adaaf24063c30a7a332cd22d51fb52387096d5ca9fc0c512876837adaa054badd85c4621a0ef6f288aa3346706789aadf1921543ce49ddbc5ecaba18f055a69152f27333c3bbbe4c427fc958d29b4332b70d32c36b35fb8b443fd9e68f0c1581c3a26ecc9dd8d7ee82640083a173643d892002", 0xf5}], 0x1, &(0x7f00000003c0)=[@op={0x18}, @iv={0x70, 0x117, 0x2, 0x59, "22a5cf5ef23e7dfb95eafa791cc6a7dd3158403698689f4d25abe5a6d985e4234f107ac873288b03ac08d810d7e793cc08471fee1b587b7170f821bf21adb65515145c06b46e28603a0bad684c9adb49832f5d1ad74918a30f"}, @iv={0x70, 0x117, 0x2, 0x58, "46b373f76a134cf814851723bb9814b89558f61762be29d590c1ec9ee3a5a7ce0594a3086a450cf560e77ef0ed8cc7798c6dd73115d829146ae3653a795aa9c849cf273afb515d3cf760875f68f6ca706cab6f1fe1685539"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x78, 0x117, 0x2, 0x64, "4c399cf0c1c9694cd5150641aa8641765c557a42dd237d2d1c5916b5a8660f98c217f3a19ecc750387e06607aabb9f8f5f9cdb74e081f0452b97f6741ace7f284acd4b2c497872f61513db3cd4ae0086a2a224443dfcd70c68d6e7da039bee9a84eb627f"}, @iv={0x90, 0x117, 0x2, 0x77, "b7b9c20637c8643e37cf7d1d027cad34693fd44be800c87b4f79b2e502566ee010f6107b5995b7c9a90638c4b58d981662dec9b9f30a68317cc6ba2be50617a9d4a99f7e6c78271012a7489abb6ce6f1752aeca7bd71f3a149db85e99708653814b5aac33222fc24a282f7220b0b2ff9bf231ea4047101"}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x1230, 0xc000}, {0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001600)="f4cf8bad8f367d3c5b9b5f76fa326620fbd106313db6eea7f6ce155de9f728c3426d3a3560c46882c9dd4f05f1d5bc8dc3f797ff1a25f16687749a154a2bbc9957b0b906723e992b697d6a6f559ace1a32ebeff1b35776bde1e7174185d62ca5ceef508f1385", 0x66}, {&(0x7f0000001680)="3608ea60cfdb164dd1c0c31273c0034e9f17128bfb2df8e60a1da68b76af398712a022b5011ded1ac3a67aade1a3b82a122f25f81859013c9651c101b8172f8c4c61dfc7f23f4f2effc3610f863eefb9117749a3025e97006a8158514a68c0df054d797d5aee5bed53c9f2573a236bd2b52e1695e39b502253fe62f13a6bae9191c824369440fe2a04da729b34370d651b58bf9f1818a05c1d14fff7db5d4476387fa11a87859c3e342c75c9e364e1a741a57cace6292bea91512dcc5794d0b9e91378b6c2e2a5d0f5e697ceacc9b42ae75cd8f94b90852c64c9", 0xda}, {&(0x7f0000001780)="2f7bddc867619fc9c391829f66f26f470d09c342259eb929a093e215f9edd09894da72b004f71cab3b79de6adf12587cd18fb7e178b371a245386cc8139ee690a1dc5d6554bf789b94ef10daacbb72007a371aee1a4ade55917c89f63886fc9d27cf50218649f37740a4ce88c29a3974af2c436888358dc879e2f15343015ee792a6c5a1eb7ae5919de38262ea5ddec9012182e63d15ddbc92be", 0x9a}, {&(0x7f0000001840)="469f8ba3623f1d9d2ede11331502085655d1d14b62bf0cea5edc003d4736eeb9680ab29715d61e0f6227d195de5b87021a16a1b007e4f4a4f7c82b992ce5d8f0995bbb598ecd4fff16704e2f04b0d3295992046b49", 0x55}, {&(0x7f00000018c0)="3575da64659df301f2c7c76cedd2ceebcdda9365c4b8e0cbe2934a", 0x1b}, {&(0x7f0000001900)="795c77e46c2fb7610e4cf629ec8469a522b91fd020499c64e84636a4bf408ba8870eeeee446e7ee6199f40d6c0ff9b6d07e76a882d2f092f03c82ec3d8f62951f77a9fea3534eba0c9e01efa0c2be4b4845d6f", 0x53}, {&(0x7f0000001980)}], 0x7, &(0x7f0000001a40)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18, 0x4000000}, {0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001a80)="931f17d61ff41689634c52e90469", 0xe}, {&(0x7f0000001ac0)="b21756751eeae146ddb37776128984ee9f0876d48d0388342208f316fbaaac827f8503284343ce746e43964738126fab54c9570de801d7ae20ecb2511c4f6c46fa50c9ee48a151274e68b26586689549dddf54647f61900d316d2252b7878680aecb48d37e272b44fb6594fa0c9f5158ae361a93feb2fddb43a152c9b5d88f6978659d27fed5d1092b8d8be6f333c1e1cddfc3bef08f0237d21b77fe6a086eec8e8316d98dcd2caa4a9f6605fa4b342db51612", 0xb3}, {&(0x7f0000001b80)="fa74bbffc5b0d1ea3f74cdb06deda0742982c9dfe0b619b35c6df80924c8f253d4f1b8591a68aec6b78b07bb50660715ef27d9221799853f51d86166b883724ccdbabb5f7fb75c99fc7973316f52f184cd6bdcffc48c4aa14b90c750fde616fa48469a9c2c120a029a5e9a5b7b774ec41d774f6de748a87733a2ba0681a14f1293effbb8370e87dce1f86eee02ccbd", 0x8f}, {&(0x7f0000001c40)="37557a7acbfe41c08afbaeb081ef67f313c94d43036aebf7343abe1e66a1e3764a474bdee4755f91d6f56ad377e06649e12a44a62d22a259ae0408ecdf6171", 0x3f}, {&(0x7f0000001c80)="7e5207fd0f7d23e0704fbf13acef188db55d7bd18f49e4e8f6646ff773f7dccae3a29897ed46dd27ded2321c9b7ca96010b535fffb08570fa916f9810b778ff174a01536873276c07835598e47f86e96b9731bdd6c3c39db9c6f54f1a74e4d2f3e86986627c5d8fde43dea70ba12e0f9f337e322a43a1f980a77c4fdf554c8a94dc326da801519b3082f528cf1d5524688f2bb53d04f58f513d6dd3f4c40c03a8761", 0xa2}], 0x5, &(0x7f0000001dc0)=[@iv={0xd0, 0x117, 0x2, 0xb8, "5587a33379a1d5bf5393b76be0ad8aa5e4f3fc58c9fb5208d9572b966f000f440ef7e247789092215ae35a92b1f3d7e070cc9b623544a78a3f60cd87588a00aa0e4b21eed5067f3e5e468991f7df16d91dae164655d58c78717cb89dcef6220611f0eeb70f92f777f39aa1744309ceeccfb9f0113afb58cbf33cc6111b6c29394c75c6ff04a565fe1c9b291f189c1225fb5df95e6097e23e5a1d548657aa3e72a3a8c9f65c4f18e1bb2a79a4a0ff9713e8760b2a977286f9"}], 0xd0, 0x2c004}, {0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001ec0)="52b548eed772", 0x6}, {&(0x7f0000001f00)="04b147ffed82174f5a5131264207be72b0548d591ead654f4ec686", 0x1b}, {&(0x7f0000001f40)="7c0ebab433fca1a617c1c9587dbd0529b2310499dba33527fe81a91f8e1f5d9d925a53c3ec58d9d30944421343295740c913845ad1c035f12710e2317e97ff7bb0b2559057ada485a5237944d4c787c7e3a9d0e1d39d496267e5f3e67c225d103e662573668606bebd34b2e5987b6dc1aa35518ec386f95899953ce425d2cf0633f746e771f2be98e334ce057c9d50a958044ec4a60ff6a7b10850a6e757b316aa754f", 0xa3}, {&(0x7f0000002000)="011189b0ee917cf8723d60a742c126e4883ff6e005ae465e82093b0122f19634c3278921c4e00763a78ab81ab0003c57f97e3626a22212610984714d06444d67c6407d4d2fdd27c10a8ea693c465c2fc34ed7d20a769fa481fc4123501a2c82d6e553597c50e3ebcfa37ea747c516ea7187e1353faa5f5ec11f7d1007f34d7613b9c4fc359a604cb0ace57a43b4cb7233cfb784463da1dbaed55351edb2ea895e610713c29963aade98c6d85049b184a68f856f57b6e57aba5c613236a0b6835e33f05cb23ac3b03c5918adf3be4c6f93e729e6abe57c98b77c58aa688", 0xdd}, {&(0x7f0000002100)="b290c899a481f21cb4167ec38a6741554d514ad70bae754938b3", 0x1a}, {&(0x7f0000002140)="d80306dc7dff3c09fbb53378a2ecb0f58d4af766920968c7c8ae2b0fb8933534ba33a39c250dec030cc0374d3918cdf89ae431d6376b93f0b0afc153b9c5b3737cf3781d0a9aa350dc6f8828088817b20560e890e658195f55d884ba68ef3d7503c0df50bb44275f190da3111621614ee35df3a712f5342ed8f7b5c824cf5cfb76ce1b4ef63d4d70f73f82eb68214b6a446380f042ee050c477e76d621e95c56824ba4a5544ad29595005fc2", 0xac}, {&(0x7f0000002200)="726987c6424c5fc003b036e351659a273a3898b9f07fb91f4ef92c5dd457f818bd45ae9e5de2c0aeeab2cb99a057ebdda3273da0cd48b6e17d018020cc40d90f01591a9c0cd9a0abcb2218f29864c8d353e114e6daf374c31be076fc101c5daf7d80754d694463f322851d1343b60811245b1351b523c6bb4d5f431cecbaeee4c3f7412dfb36ba4ad129de8f3d80305fb46a8da3cab96b39986c4e006aacbe1377198bea1fcf13ea493733229fd27ed70363e361fa199747abdc4d4bc21a1031ff9ce7481f479c4ad6a6788fac4d184353e517201b3034b915363b9f3f803f805c37cec79a85", 0xe6}, {&(0x7f0000002300)="835848065db6288fb7ab2ac06d8f1ee2340988057db5aec1197f80922374f23c90de2023d5e1c9883a97f61b77e424cf416c301b3cda1779a8dfb13703d3b4c443e63e55a657774c94a7ea3aaca51955ef7dd567f8fc27295a4a799b458c1abb9abc6e75015eb43da9ee01ac7e16c9", 0x6f}], 0x8, 0x0, 0x0, 0x20000040}, {0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002400)="e8f032738b1bc3243fc7bbe6b5598d6e0f879f5d89e2a4ce9643f6eb5551c3548e851217ebbae27660763e2b12f3bdc4", 0x30}, {&(0x7f0000002440)="c44693a5bc43bac7f6bfdaf4149077e80db686b349486aec7a2068681f0b1ce6ff6aabc48c8373644e5a4af403825e105a075c03555044ec333f846e2d339f5796ddc5c9c51a10de3716ed5786c3256ac4f78f580433b2fc50b0ecd235286dbcde0b81518e74682df0a03c101987ef73bbb9c3f0f4bb2bb181f8cf3bd64bd30b4933f03745372face62e3e0911ac13fdc6f63455eb99d58e47c42da7745144ab03c6d1a677f1c1bbb014972c29b1b261d46554f7515452aa75fff0cde61722b0bbfa7f1a3de8d11ec570314d", 0xcc}], 0x2, &(0x7f0000002580)=[@iv={0x100, 0x117, 0x2, 0xea, "2268192d230508251cfd995036ea5fd06072bb3cfc0d6984123b4e1dfa396af7293a8fab396a348b22997a350b869338b7fbbb8662d059c71ecd5d6f9c82e4b6def76e90979cdbdd9acd69d8ab585e0ac6a210f8c6ea61c889accb132da10312ae62cc9ea7cf77a00f6ebabed0bd5376f317f23a143c2d603bbb287805c835251b45fa25cf7a6bdae0a7c3c05b92b8c4613b1618aacc873ad0bbe52072a4ef01ab53cf6678cc10529a56a76133ccc1067bde0125bac799ca1817d721217984d9e03d4f888a14c406496e3ecbc149396536b4956cf60d5d0f5fb3c455c0c7044ccc2e5d9f817967dad505"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x401}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xa8, 0x117, 0x2, 0x92, "822ab7fdef1ad9209204814967e30149da72c5aa9120c5ec2a796316877172584302a03eae8c67ed3efa922430b422c067f3ef6c8ef8df6e7d405beca4a38dad7a6599e2a192f00738cf92d3767293a42371d62152938f728021c7cd56bc269fe89b092751ab092fdcb128dbe9b065db432ad5a644fc0fcdb0f8198b05e69df45262077acb94645ffdb8c3234ac882e67016"}, @iv={0x70, 0x117, 0x2, 0x5b, "b5f3311090e753066d7371ddc3030d148e503ff1d9a6cdade58019814f771543297df6c656ca5afd7799823682cc30c032226b17af4e9e8a16420b9a62a84a70c1b1d15e8b4b77531c6f3b318a49a5223480224add9dc40f20ec71"}, @assoc={0x18, 0x117, 0x4, 0x34}, @iv={0xe0, 0x117, 0x2, 0xc6, "101669167b6aed1ce8204feac158a70b4d26f86df7e6a16e59c8bfbcbcd9da91136003e27194b4a4ed47c820122f3a2654a325b1919c2c467b9e88d9251359f27f3d55c3f02fe17ef7d613c1bdd575b7e10724d65aa8f1ebf470ac37949f9051eff65c84109d3b96ead95cc868a9ee337ba78617d62510b34cbe6ae38810424f232692209ba9df364f37b524ffac27cbe9314e2c417345b17e8a4d61e32ac9498ec2f0550d29f7a3ff4ed5d81d3c60cfff053b35074924f281c55e265520c4955c43f3ea56c5"}], 0x1370}, {0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003900)="092334fd0f9e95af726e55be081e87a96f07e2ea11493461e595799d483a86dd66b2dbaffa083e390d94f50774cb09cb613e75879d59117df83945b59ece2b352a5ef10629a7a9b33da7f32cd83459499acc196478c8be4167e05920c657b38f8c377b6d7cca4b0e1d45123060f6fc7dd68fde534835771b1ebb62482480622545", 0x81}, {&(0x7f00000039c0)="d305abc76f5a3312b18a254461062409dd68dcd3a9e8e48b855726a4129a57d95dceea1000407bfa22b49323524a0218f96f1a28b1f2fb4bd2d0c60ad57354dbb5e1029dcea2de3094937cec83b78ed5dcd9bcd8de941f1c3d681bfa5b1d053584f9309bcec552", 0x67}, {&(0x7f0000003a40)="9d5d279d56c162d4f0e52e1ad370675632d2ec7046f458c599efdd44bd0e44ed75cc9a95291b9a03f0f7b7ec39e922681c406d9352aa6df8b94a3fdcf12e90794a16c5b9b949236ce5023c", 0x4b}], 0x3, &(0x7f0000003b00)=[@assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x70, 0x117, 0x2, 0x5b, "08b6db60f50d7c6e3294958100855c689fabdd2c7f6d68264e444b0998385730a7836321e9b2511bd297b63fda038b97dcb8fbd658c26847b18340da1a9b9fff40b9650903a8bfea43b72c29355b672ce23df2c8af90a91dd40a32"}, @op={0x18}, @iv={0x20, 0x117, 0x2, 0x9, "4a2c71a7a0475e32b8"}, @assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x120, 0x4000}, {0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000003c40)="8adb642f85cba7cd4f4056b0ddf96de951798a462134c785a7221a4a0e39d1d8ce236e9888e5a431ed84b6f9789981f51303668f02a4d03f15f9e20df01440b6cbe4565c0e48a276413a9bcd4d3166ce3083a8b796ef5d4a8db1c94cccda1a16caf5ee516c90d7830179d0d87978523eb522d5b1cdbf79d907419c3307159fa434826b06355b4f9bd42b7045d6edbb117a23697adbe448b7634f995658751cf2b6b3869f1bf1086a4dcadc13ba4ea11890233c5951375e42485d5db86eed5687276191d38cf12f6fa2bc82512e54", 0xce}, {&(0x7f0000003d40)="eb765abf05712b85926ef8faeebff033df1a039600a0d51078699209d0c648564ab7ea21b1bb1b05989f55d30a6fb6a07b9b1d77ac31dbc8b8682a12ae6a3af394b9cc0c587490b1dac5add7820c07402bd6583131350701a245cfdd318c1bdbe71ddeb2b096962d385787c0836ff449eeb94791a073721d468d758add98f844a1c13018e72736955e7804e9488d83d46507a1e831be229c6e1614ea2a01b86c8c58c24152bef15772e126", 0xab}, {&(0x7f0000003e00)="c384a97b9b4bbd9dbd97158589a8d4b034ce4f1d6ff72d123cd4be4ed961175a4e6324906134262424a891e013a06e3ad6abffd6f2851d2e2313d02290cf9dc0d103ec2bf334b22c6bbfb790f14defeddbe38f013db1b9709dd8c90bc69d37ec0654dc93f9", 0x65}, {&(0x7f0000003e80)="237da16406af3ac8c37bcbbcd3ff6d58633d572aecd2e3ea61e7558a71502bb564dbefdb5681fc40ca1ecd5ed90f3f5bc284e58c725c4340f13985957dd65785e638522224e08f397ea57a76c8dbc02f7d109daf97bf96a9838a8f91b37b1354e61002a83cb1790d82bd61b99e0912351829bd33f77ebeab22d4a8d147fbc0b47776eb0e56fe5632defc5eab29d6afb76644b7b9244ebb02d0dbdb24e0a8e583ab750e6c59c08c4078c7eb387e401bfdb2b67923759ee98a7c1924ac2cb799a35376708c9c0ac7e68ad10bdc27519171b1d671deadedbb8405cc995043835ca12f9ce3a99b0922dc76f4d99df8b2ad", 0xef}], 0x4, &(0x7f0000003fc0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x60, 0x117, 0x2, 0x45, "c8480ee2b458486629bd566ede0698527317f7bd7bcb2c7e76016bd7c408d7a52d1a6ae53b74fc7b8524aedca9ae6dfdc238a84a44d883672cafa1ebca3eaefe7e0737bac7"}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x90, 0x1}, {0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000004080)="1c129f806d5ec07e0dc97b963ff6792fb96785df00cd4279b365362f597eb0577c47202faefd597e304b3bedfdd191e746a6e8f99eb78e75dea0705165513c99e6d80a5e730ad3b7dc5b0cb7b80889869655dbd6ddb7f8b9d7903f7bb1e4cd962cdd2f808a668033ca1eb38e1bf944efad5336e1ce1ddb54c513dfd038b2ef7575e5974abaf0d9adc5580fb30d20ec86c8d7ef73f191245c9195424df9a27e0ab4e76ee6611f6f74e8b6506b234932e5926cb82162727cbe8e64aa3c290417226ff90fa6ab8bb91f8a94022b40e4542a982cb5a2d77d4df4f0f5f22beb7650ab3a82fb45ff67b017e38ed6192cb5532af63931b367f72dec52a43bdb86c78acdd4f1b32f96c770a99d36726b00acdeacf956db62fb381b937d7a21ded4962165029d52e7c75558b4c9de1a9b0a495a07d97888ea4e7b5b328d70a6fd72e35d04448ae6d932244c0b4c35255789b873617976128903ed809c929d8a89c756b821452dfe5e616d49ac34eae4258cb38d0947a5ebb23deb201f3cdd53ccb7d82c3b6d6cfe59b576ef225086c8564724c04573cb177647199c0384751075f8c5d910d583dac04fccb604047619eec3070ed7cb4127e6ad4d58eeb404b303219c6ca8837cf7343b871ea8762807feb39990b42d36df9978b767e0701b05b401b2c2011854b1ba6e71cd90774c9622c8cf20ecb45d5f7139d905a9ca911a0ac6879feb32e3cd5312b78e648552f881a4cfd66c822c3a1958531edf87a3cec4df17a39b27c58359d9fda3f3588552c70cee0106a07699cd6ceb04345e774c185e43f2a44bb1fcef16fe1c46fdcc1fa57c791a18cb6dcbd2b7e204a18e94b830d02f03907419f67fe8c36b8e650e34c98040867188cb0cff2ca4e6fd116b193ea43c0b095168d599af966a506a78ca519d49c073e255659d1043eccdc2c1d72ea883bda71d7e2a8a811ad0785e902cc97e824b6f66b05ab87848868e9543f1cad2909e3ab5fac1b14d2d80220d6892cefc668b1afbba5dc55116dbe3bc55f940b0a20e0699c4819a8a51642d397fcf13d4ee398bd908c8a24c93ce5f26b99990c446dad5d32343c191a94ded5f1afc3e54f96d3258ea0530c58e751dc82f8f2185bcf2456691d3e6a51273a8738ace0ea833423cc7dd675bd726f193e84ab13d3e5d9a3c899cbc99351c03e8c3359178cdb16de8de7c6564e744eb6fea38a8a66d0647ee0a7f9d619a278ba2d800ffb9ddaedcfde74f7bf1b70356e90986ed0860a1a5880edab2d4548459b0dc2b072388fe43e481d95324150bc9f7c111753d34fb4e04fdc82f98c25d4f3802e81860e61ce5371d30072d7801b66316e91af41f36a3919c650fbb25c1f4ba787a697d7e5f9ae5e0a0adff9d6d4dbc00603549a728a1f987fa13133c41382c6984ab406471e882d2b03bc8b32655e8a249f5c8d8adfe0e0eb3c8176f0297d3d53fa75d97d21ea516fb09f00ee99702f1131e1edbc1a1f0ae4f1e40b7e437ec45d02e42bb16701f7c462a4b9d0df3e3c4793ed0c16b345b907897d6cca5b669e07f6d790d5e4a4e99e80ef5723ac6ce79de4058006d9da0cbabd0771b75a870c1e3b94d764373c91b4499f6b5b8061345a6c4dfd0814903c26aa955ef5bf6ae6f5b4efaf762a846ffa8a81ebf59b9b728284465677aa38e967dc96a223252c6c4e0b7f2b74e131972c89be67ac6fedeccbb19e990e9ac595013aff0f1e4901c714ab39b34a5a82b5ca9643b600cbf062692b80dba8968eb4db53a5c9607beb735cbb1d393679c844fec982457280efbee40b353c421180600fc3bbce3849fb479cf12734a241d65bf696c4060f5912d17c70a79ed350dd3a0d8ad571e8e0ca46b84e21a8466dc9dab0c15705693c8f3413e10dee5ca1c0ae4fde0b59d023a2d62948d13befaf60e63581be3699a04dc23790f32c0e7341e71dda99f9fc02826e9761c94516d9ff58ad1db96069193719f50043f0a6889d95bef2a3e0928607a9e14b56d1212bd11e02ac5807be1efdff920998c58919f31e2bb41de3bc3427dedb9a01216d462810bfce1b1ae0da13dfe6d8624f8ff3d1d99102a350e0668d6decc74f6986ce694a8cc0567f348cd99a25e53143cda2eb7060f7db9bfb9bc9b322db6410cfd6ee9c5a0d94f685fff7fc9ab08e6cfe16c994d7e855a81a66111e407a19970a95835360829b4be99e7b59d93c332aaedb6bacace24910255b009a7804588d9881bed744dd74bc46b4b0d05a1ce894326606398bf1f51b18fbf3178ed7f744fcd4ceebb1fc694dbf2ebdd77575c66c1bd0805c22c708be6016dda1ccbd6a705df8c4b1a7bcdb88937c31a390794f756f35e4e45a911937a3d7dd941cd93c0557b87051f853ac74bfd0b25f4dde476d8476d4e8a78019226324acf5f679aa6eba2e0391af0b1b4190192bc5b2d11a17fb4742e2ddc74fd27567d6320b8bafc686bc959623206e0ee1519ae7da3ab4577e16fa9ff5121f4c3eaf73cf5f1594a77e4202e5fae2e3d137971e4c376921dbbaf8c05678f0afb82bb25c35f809dc034e3fbdf62e865002180842eccfdf031831c02a948e6f81b984fb55800512ef8d8521913632e09859dc25bd69c608dff12417369a3aeaa6e52822380d8b77561f1dfaaaf5030e3767ac08bae722b41439668d34debf7dca9187ba664ac8acba78bde22c76e2e6dd081772f84a12744c4dd12b32c23c8d3ec4696db2f9f1c22185e3290095a5a1968264331be1851ac788a72856b03003bd7c9862a6eb981f0a370ce55d1a6a65c6b2d2b0e6e496e995b8d1fc15216c390507442277c3278c2620e1ea9ffff09737b8ebac81db425f7c565f24524488c7010084f8fb8c23211bd5835f350d4c5d29cd5b2caf05d8f7db1db161603eaa18d690155f65e9e6488a9f21d3198014940b90924f82431e6a595bf720194f08d1e7406895763fa41f4889d6ab1ab754d4dec6366e958b753656bd2070a1f22e0e8c93e595e8e0352a19afd802b390a7dfe12cd5102ec2be09d44425e79f72ed58b641ddcd16fb514c5b1ecee9e0a5615ab9b42003144f870bc75954199ed9693bf6f263181d705e6b01e4cf9002779fb13975792a3e1d06da6653fbe9528c879accbf8e674aaac97c6fc45d761418bc99517cab463a2c616e7b16079d317fd1731436c9a052b3920169e3a1a6bdbcde37b1a88375c6183c76f18556c6cefa8109ceeb80b9309eb47e54d40edf765aa8254bc0d14748395a7a8e905c6837ec8d557f8ce20822958f7356853bc4f30f39b55a66b9311528caf05075d664c5e7476466710868719ddece30d0189cb63c7f66d0c892038d407a6876b6a0d14b0fd974211d65aa2de49109edc50f33569ce501efb42b03e2104966f5d4a8a8692c9157980cdf315626cc8a1d2283e3edce093d5ace5a20a9e6da54549ceef98e6f04e3044eaf8583195276895c8ae55fc1c9f185d3282081d3793e6c25fc062a4d52369651a7b127c9946ce9845e96ee559acf0278b8494e7d6edda5c6419244c386872ae927019102c91bd7390834141456ae7b2bb9c1fa7537ee4f3b1ed468ea3a0d0c2b16467fb7da6e0ce4ae676c64ac279c231eacaab5a97bf70bfc659fb66e55a1e4238832e05854b19b85a972a2425408423dd8fcb97f152c388150e65f484eccae8920f44ca4e12142607664b67e7f1d421d8a43b3fd4b148ff47ad13ef3706765b18d8fb061864dfa15e5de875d03318c4a04bff6dc7c27af366f61f0b5bba1f51390edc868d3f617b7b2288dc09ce82a4c6184748115e614429d32e69ff07dc363c0505df612ee3b37f9a0d343e3b93aad3511085fb923b9cd2ce77dd046956b690100c70d92de3438bfa6c21d33636b71c673e5c368b11f6bee19cbbe4100e035df449fb9b9ec64b02247a61e303b5aec3b51180e90752b42a70d7d405da0ee43c73248e039c31ecb114c08ab638285455453869230b1f8de00f3e40f68e71a9a6947642209405472007e4c4fbfc24d2a5da4944ed37ab928b7195415568ad1f2909c8ebae908ddef3f0db49709f740245f4930b3a67688192f60f5c03d5aae0b4e18f832421f236f7ac589644f3148ad09c6ea3af0169a625dc26becdc9023946caa3f7a32f16364297eabb600225b3638b9b8c8c959dc8c7d997fe2270de092bdff5332c1f60ea0f8c9a25d70b90fc6f100cab67cd98f0c73098a4775012ed4db29b2124d8e32ed13c9dc8fb00ac06f5b215a2e037776dc91dc3829a53042acd7fd307fe08b350359ac1309091f5b00efb61ef41e56cb6e3e914c99128edae06f54a38e97ecf010a268d76ec620c90ec5aabb774c6fcf14f56eae4f31c53a367d1de7e37bc5008fbc568ea311e1af53d8d6b641c7df81f6b6d3f4d37a98e95ecb506db0260c82fd4cdb700290823493fd05c46d0a2417a2482947c1a3250d969417139eb09b14ff75940d2d6c60795ab603c274394e1b88ff3133ef062354c0efea1f4eec9b9c33e4f004bfe52ece0c81161944a67b82b44a88b6fa82beab8c2a756e99ea0bba42f13417ff0f792b6ad671ecae4751fa798237cd12c4d67a9d56a172510476ef64eb0a668d88f14b3384c1f62e39ecb4a25f147f9821b51e515d138a3e242b2f29051facc501df8ca4214c8e5655f4cdd236404c0376dc832b613dbc31d2498eb50f01e530424d2c100177a45cb241aa1d0820491df43199ca1f8ca85e5580987ebbc77bd1a2ad36f0aa52e150949b30fea97804dfb3f2277e987890602e3c8fb43e6ce2350ed57524afd36efe25415f2a0aba2bcda37ed5fbc645e60e3018ff38fe50c4bb54287a51ea1aa95450a96915e369a3760476fad2921a25dbb48db01bf74b70e3a1535db2657428f2b9a5c4535d39056b3ac7216e990fd1024d745ab1c20f2fb0e1d2d2fac56b3915007214e9b3e6f45559ad747983dea43ebd6ab1754f0b9c1c540d83746430dc6267aed93d3756e7331dbc85a7ddb44c392f9d40ee10faca8fba8ceb471b05ec4387f0b79cc27501c3d2f2724a93847f404c64a5c6abd89dbccc86a3742c3bf4290b615601ce99595a316121f739b399f1daf52ebdd6e4a00928b4a0e4eb69babbc5cc6d3a5af3e12111f55a1efdeac2c1dbd99e8aaabc711dff1f030734b76cbec6f99abe558b0604b3e9b5e4795361f6db1561f192d228f1fe7c8daba681cd326dff3de4979c9ff6708e5ee76fd1fe25196139157c721cb557b3dad3a9485bfdab468476fffc1efb8c9ab21902d3344eff4c93012ecd3ba5fd6f6b1e646d7cdb266526a2db09c0c2e5ef696711e909f9a025619a8dc10450b5c2f82a7d4642dd8cd8f3b0a672faa23fb8de635e837fb90e03e2be3d3c06dc61ebb916cdf708f2a4a2419b66d7e55d3e660915cc79afd65f4233a8d0ea64013d0e6d58bc8022c6a246de37fe68fb62833723fa159e8cf8affad6310c2526e25b7c94b6c93fe1c3de9fa78dc2567cd1be37160e087597ded6e4f56249f7b8f3009e998b5b7c3128c6a9abd4cae6cff7ea723a6434e0e94ef845bea9b03acb4851eff9b76c2db0243875327a11ebf02d2388369d285ed012b2f66df9ac137e42a3b78ef93a412292b04a5fd29d8151d0b77f22735c49b88a2a2b0ac2e3e2311dc0f1bf61fc71d169904e769dbb4a9aef14c36b21545a6bacf4159e24f3afb514eb50415371bb4d5aa3094b54f4313718d7b0959a44a312076b4ce4eafc2766ac058d6b33d77776395ec2573ff742a74193834a52169ef956770f64039a9688c7201160de71058eb048643bf78fc53", 0x1000}, {&(0x7f0000005080)="177e12760bee03163bc2d439a754f6006ab883af200f49779380d87e358349ee124726b157901612f7db8789cd6376ea98e2113e4c92fcf8e81c7e75bbb9be572e93d0fcacc8d8d6c6047ad68a39c8e9df666902919e4a05e477d331994fcb973d7336af61f9b296733095ec1e518e1d47d21f6e30a95df2020c8ed9d349037fdc67ce40d12fe6c5ed4fa9f1e9f50efba76673ac8f87f73c4d9505de9e6e50786e638c56e68ac7f0230096fd43c895ba26f11a3118cc99c21fa35c193a635a33a37a1257fd066bbec1eb7c700e69eccb2944ee2a090bd5dffb3e4e70b12e336c7967e171bc66585f1c3860", 0xeb}, {&(0x7f0000005180)="4b0fea1becf937a1fbb9da23f1d6b596eb6997872b77aff2ed5ba0eb9b89425e570b6dbf5377a3e4bb9251452903e3cb5083e6a0a1bbabb0ef88a3765499ebfca2057f7e26974082da3b2bad4806dea149d67bf4aaac3bb1862032752a25b5cf89a42cb95cd32916ec46b946eb098cb36d3b2981bf52d21b9ef769f539259fbe0795e2aa0735cb9ee2", 0x89}], 0x3, &(0x7f0000005280)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x30, 0x8000}, {0x0, 0x0, &(0x7f0000005400)=[{&(0x7f00000052c0)="81407f0c5326e999b193248c5013e425675929121b17c51e56ff16011923f976083244fc00a1ba6493fe649ed223371f2481290b10bbebc3928d1ae1dff35f088ab2acae858b297c71828d3e4f62982efe87566a3fc8f8ed0a8120d582c2ff6193b307e2559c2a5dec28044cef7ecfa2e04d5a238210ef2eaefad0da61651209859819988ae10007a06da42327372418181f419c15fca2ea7e0d0534d7aba1e8152ca7f2d17c6457b19351a25fe3620503974038c9", 0xb5}, {&(0x7f0000005380)="7d2091baa1233f2f67c12c2c27088d7f935e83b3d8f3ac30e0611c93317841746fa9e9ac19dc095b5ec5e1b0da8896da23613024cde29066a60be81600c9c79c67c3275b8180e88ecb5a2b346085fd108850b9517c980ced46208b84f1cafa1b32015ebbcac44a9386610bc0864badb23da7", 0x72}], 0x2, &(0x7f0000005440)=ANY=[@ANYBLOB="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"/528], 0x210, 0x42800}], 0xa, 0x100) socket$nl_crypto(0x10, 0x3, 0x15) 03:07:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:04 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:04 executing program 0: r0 = memfd_create(&(0x7f0000000140)='GPL\x00', 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r6}, {r7}, {r8}], 0x3, 0x0, 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r11 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r9, 0x4}, {r10, 0x1000}, {r11}], 0x3, 0x0, 0x0, 0x0) r12 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r13 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r14 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r12}, {r13}, {r14}], 0x3, 0x0, 0x0, 0x0) r15 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r16 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r17 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r15}, {r16}, {r17}], 0x3, 0x0, 0x0, 0x0) r18 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r19 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r20 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r18}, {r19}, {r20}], 0x3, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="7e750e70569319249636732abfc55bb8e3bf08355ab825657c", @ANYRES64=r1, @ANYRES16=r19, @ANYRES64, @ANYRESDEC=0x0], @ANYRESDEC=r7, @ANYRESDEC, @ANYRESDEC=r5, @ANYRES64=r16], 0x4c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 03:07:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0xffffffff, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_map={0x1000, 0x9, 0xfff, 0x7, 0x6, 0x81}}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101000, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000000c0)=0xfb, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000200)=0xffffffffffffffff) 03:07:05 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x50101, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000000c0)={0x2, r2}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = accept4(r3, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000000)=0x80, 0x80000) getsockopt$inet6_dccp_int(r4, 0x21, 0x19, &(0x7f00000000c0), &(0x7f0000000280)=0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r5, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 966.183165][T11826] usb 4-1: new high-speed USB device number 93 using dummy_hcd 03:07:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e22, @loopback}, {0x6, @local}, 0x18, {0x2, 0x4e24, @local}, 'hsr0\x00'}) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x4, 0x1, 0x9}) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000340)=0xeb43) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @raw_hdlc=&(0x7f00000000c0)={0x7, 0x1}}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='!\x00', 0xfffffffffffffffd) [ 966.263547][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 966.263562][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 966.264022][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 966.269746][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 966.323763][T22410] usb 2-1: new high-speed USB device number 84 using dummy_hcd 03:07:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800000, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x204000, 0x0) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000140)={0x1}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000200)={0x18, r7, 0x1, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x108, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe65}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb43}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc93}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x25000}, 0x80) [ 966.424177][T11826] usb 4-1: Using ep0 maxpacket: 32 [ 966.543835][T11826] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 966.552186][T11826] usb 4-1: config 0 has no interface number 0 [ 966.558758][T11826] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 966.568039][T11826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.577190][T22410] usb 2-1: Using ep0 maxpacket: 8 [ 966.584220][T11826] usb 4-1: config 0 descriptor?? [ 966.773892][T22410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.785557][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 966.796003][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 966.973645][T22410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 966.982918][T22410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.991364][T22410] usb 2-1: Product: syz [ 966.995802][T22410] usb 2-1: Manufacturer: syz [ 967.000562][T22410] usb 2-1: SerialNumber: syz [ 967.293392][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 967.783562][T22410] cdc_ncm 2-1:1.0: bind() failure [ 967.795703][T22410] cdc_ncm 2-1:1.1: bind() failure [ 967.807631][T22410] usb 2-1: USB disconnect, device number 84 [ 968.883281][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 968.914485][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 968.926361][T11826] CoreChips: probe of 4-1:0.159 failed with error -71 [ 968.938648][T11826] usb 4-1: USB disconnect, device number 93 03:07:08 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:07:08 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = socket$inet6(0xa, 0x4000000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg(r3, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2=0xe000000d}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500), 0x4ad}], 0x1}}], 0x400000000000058, 0x0) 03:07:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000000)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:08 executing program 4: r0 = socket$inet6(0xa, 0x80000, 0x43) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:08 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:08 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:08 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x96d, 0x80c02) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='\x1ce\x98\xbf\x00', 0x802, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 969.727203][T11826] usb 4-1: new high-speed USB device number 94 using dummy_hcd 03:07:08 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xe4b3, 0x84000) read$eventfd(r0, &(0x7f0000000100), 0x8) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}, 0x200}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r4 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x9, 0x2000) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) ioctl$TIOCSCTTY(r7, 0x540e, 0x5) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="3cad618e051665675812235f1bf049eb1340158fe8c0be377bc7c95cb452b3b87af8470046f531eed90a929b78e3dca45c9b93cc095b57319f3ab8cdfcc8648507baeef46c759424ca3b88bdbebdd9c7c809c1e3752be13af39570a6c962cfc6e3a448f7781e29458a2239b03b3aa09bba42f5ead0e58851f56379b0475e1ae902d88b4b9598ca0ac12ee6630220490e2c97cf01a86952c2553ef4f12247e1b5123ce233c8977333627f5868f1dbdba2a7c54ba74344b067bd0b2b878779c0fbce0a4ddc0000000000000101c17ce323d00b502b4f35ad144f89d889496d91", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r10 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r12 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r10}, {r11}, {r12}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000003c0)={r9, 0x90, &(0x7f0000000300)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0x9000, @loopback, 0x7fff}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e20, 0xfffffffd, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e21, 0x1d, @local, 0x7}, @in6={0xa, 0x4e21, 0xfffffff9, @remote, 0x4}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f0000000440)={r13, 0x560, 0x0, 0x8}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r9}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={r9, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x1}}, [0x8003, 0x102, 0xfffffffffffefffe, 0x400, 0x8, 0x5, 0x2f, 0x9, 0x1, 0x108000000, 0x8, 0x5, 0x5, 0x8, 0x5]}, &(0x7f0000000100)=0x100) write$FUSE_GETXATTR(r0, &(0x7f00000001c0)={0x18, 0x0, 0x1, {0x80000001}}, 0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000240)={r9, @in6={{0xa, 0x4e20, 0x3277, @loopback, 0x2}}, 0x80000001, 0x80c, 0x9, 0x4, 0x40}, &(0x7f0000000180)=0x98) 03:07:08 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3, 0x4000}], 0x3, 0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) truncate(&(0x7f00000000c0)='./file0\x00', 0x7fffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:08 executing program 0: ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0xf3d2) syz_usb_connect(0x0, 0x42, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x14, 0xa8, 0x3, 0x40, 0x4d8, 0x83, 0x930d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbd, 0x0, 0x0, 0x2, 0x2, 0x1, 0x0, [@uac_as={[@as_header={0x7}]}, @cdc_ecm={{0x5}, {0x5}, {0xd}}]}}]}}]}}, 0x0) 03:07:09 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@local, @ipv4={[], [], @empty}, @local, 0xffff8000, 0xe02, 0x8, 0x400, 0x8, 0x400000}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) write$UHID_DESTROY(r2, &(0x7f00000001c0), 0x4) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @raw_data=[0x80000000, 0x4, 0x40, 0x3f, 0xc16, 0x0, 0x400, 0x59de, 0x8001, 0x7, 0x9, 0xc3f6, 0x10000, 0x32, 0xb147, 0x8, 0x1, 0xfffff001, 0xd6f, 0x3f, 0x0, 0x2, 0x9, 0xdaa, 0x8, 0x4, 0x5de, 0x4, 0x4, 0x40, 0x80000001, 0x611b]}) [ 969.913158][T22410] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 969.973295][T11826] usb 4-1: Using ep0 maxpacket: 32 [ 970.144972][T11826] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 970.153442][T11826] usb 4-1: config 0 has no interface number 0 [ 970.159687][T11826] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 970.168952][T11826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.185127][T22410] usb 2-1: Using ep0 maxpacket: 8 [ 970.193670][T11826] usb 4-1: config 0 descriptor?? [ 970.333223][ T3379] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 970.383419][T22410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.394832][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 970.404835][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 970.423560][ C1] net_ratelimit: 20 callbacks suppressed [ 970.423581][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 970.423970][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 970.429761][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 970.435831][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 970.453201][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 970.573474][T22410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 970.582861][T22410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.591068][T22410] usb 2-1: Product: syz [ 970.595672][T22410] usb 2-1: Manufacturer: syz [ 970.600537][T22410] usb 2-1: SerialNumber: syz [ 970.693495][ T3379] usb 1-1: config 0 has an invalid interface number: 189 but max is 0 [ 970.701808][ T3379] usb 1-1: config 0 has no interface number 0 [ 970.708390][ T3379] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=93.0d [ 970.717713][ T3379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.727362][ T3379] usb 1-1: config 0 descriptor?? [ 970.768601][ T3379] ims_pcu: probe of 1-1:0.189 failed with error -22 [ 970.893553][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 970.966184][ T5] usb 1-1: USB disconnect, device number 36 [ 971.223252][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 971.229539][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 971.235900][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 971.242223][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 971.403785][T22410] cdc_ncm 2-1:1.0: bind() failure [ 971.414477][T22410] cdc_ncm 2-1:1.1: bind() failure [ 971.424721][T22410] usb 2-1: USB disconnect, device number 85 [ 971.743066][ T3379] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 971.863443][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 972.053438][ T3379] usb 1-1: device descriptor read/all, error -71 [ 972.504473][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 972.534575][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 972.546543][T11826] CoreChips: probe of 4-1:0.159 failed with error -71 [ 972.558786][T11826] usb 4-1: USB disconnect, device number 94 03:07:12 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 03:07:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x8800) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f00000000c0)={0x8000, 0x4, [0x5]}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:12 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b0001760000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:12 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000e79ff0)=@in={0x2, 0x4e20}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10d}, 0x45) 03:07:12 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:12 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x2f, &(0x7f00000003c0), 0x4) 03:07:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000100)={'veth0\x00', @ifru_ivalue=0x200}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:12 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x18}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000000080)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1c0}, 0x48) 03:07:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x10c02) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f0000000100)={0x1, {}, 0xda3, 0x5}) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r7, 0x400c55cb, &(0x7f0000000240)={0xffffffff, 0xffffffff, 0x7fffffff}) r8 = socket$netlink(0x10, 0x3, 0x200000000000004) r9 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) sync() socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000340)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$KVM_SET_ONE_REG(r9, 0x4010aeac, &(0x7f00000001c0)={0x1f, 0x8}) socket$bt_hidp(0x1f, 0x3, 0x6) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x0, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 973.414995][ T5] usb 4-1: new high-speed USB device number 95 using dummy_hcd 03:07:12 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000002140)={0x14}, 0x20002154}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 973.536467][T12200] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 973.671229][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 973.803206][T12200] usb 2-1: Using ep0 maxpacket: 8 [ 973.813356][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 973.821819][ T5] usb 4-1: config 0 has no interface number 0 [ 973.828450][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 973.837775][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.847951][ T5] usb 4-1: config 0 descriptor?? [ 974.003355][T12200] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.014846][T12200] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 974.025023][T12200] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 974.203552][T12200] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 974.212909][T12200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.221246][T12200] usb 2-1: Product: syz [ 974.225658][T12200] usb 2-1: Manufacturer: syz [ 974.230719][T12200] usb 2-1: SerialNumber: syz [ 974.543471][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 975.013638][T12200] cdc_ncm 2-1:1.0: bind() failure [ 975.025285][T12200] cdc_ncm 2-1:1.1: bind() failure [ 975.037173][T12200] usb 2-1: USB disconnect, device number 86 [ 976.023451][ C1] net_ratelimit: 23 callbacks suppressed [ 976.023475][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 976.035514][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 976.163463][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 976.193386][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 976.205619][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 976.218042][ T5] usb 4-1: USB disconnect, device number 95 03:07:15 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)="72ce8501", 0x4) 03:07:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x412044, 0x4) getsockopt$inet_dccp_int(r4, 0x21, 0x10, &(0x7f00000000c0), &(0x7f0000000200)=0x4) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r7, 0xc0485661, &(0x7f0000000240)={0x3, 0xfd2343ced6a0bf71, @start={0x8, 0x1}}) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setlease(r4, 0x400, 0x2abe362ed416b25e) ioctl(r8, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x40) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:15 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b0001760000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:15 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 976.663389][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 976.663533][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 976.669550][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 976.675617][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 976.687703][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 976.694018][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:07:15 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:15 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") syz_emit_ethernet(0xc0, &(0x7f0000000600)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x54, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x4}, @window={0x3, 0x3}, @md5sig={0x13, 0x12, "d31c8190da8dfe461d135b075be2c1c4"}, @md5sig={0x13, 0x12, "5b3b4bc0ca96fcedefad47a621547516"}, @exp_fastopen={0xfe, 0xc, 0xf989, "908fabfe9a69b583"}]}}}}}}}}, 0x0) 03:07:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000200)=""/108) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:16 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:16 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffe, @mcast2, 0x1}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000000), 0x0) [ 977.083350][T11826] usb 4-1: new high-speed USB device number 96 using dummy_hcd 03:07:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000006780)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000200)="a6716a4ba04d073e66a45ec554a3439b3057449d5e9f6bf816b687c1ceb3025e0ae3eed6626f4267f51201d1b8907871b8582debc0803f24516a3a9c04c3386aa0890293218d01f5b18d8458afd36b5c0d9c1f9b3bd7ad909242b65845f819b3023ddda02fc643afd401", 0x6a}, {&(0x7f0000000280)="f82f84fe3f88fb5e51f2c4c23c8b3fe994c59604d2d20a92d35d1febd90f270fbb685db4b883b997b8274a23f3622299c094a6defe69f9e565026222daec3734b907885afa254fef358e3e704e66a8b69f1c124dad8178", 0x57}, {&(0x7f0000000300)="973a8b304158e8f3d016780108ab8e920bd181a341fdf32f19b6ba1323d2c9f8d048f12d390ee76980c3d08de7d856dfbfbbf3b5173bbf77e9c6f955dcfd5ed209", 0x41}, {&(0x7f0000000380)="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", 0xfb}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000000)="7b24072ee21c3d1a35b1b6a20709", 0xe}, {&(0x7f0000001480)="d87690c1ff6c02a8449c75b41b5a5bb4d8c5468f65a790643b9dc6dcf91f9ebb45b6abf5ad4821cea35b641f36538d66f955a88a19fa1908be7018e7cd581dfde3acce3e1b7c4b9ac8333104ec00e15acb6cf0490681b794aca3589581f18fe8bb5af2da649c1a438e9c81fdf3b4770675b0127feffb573490c7cc108bcde9c9ef44d732aa5f3e4683c117dc3d488ac7ce2250e0e0886a658545a96c85e5cd185ec635f6b7e6b8cde8471b93160deb9775f046062885aebef96c6c38a51bdd613a", 0xc1}], 0x7, &(0x7f0000001600)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x28, 0x117, 0x2, 0xf, "fa0859dbfd5725df7330a946877496"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x2}], 0x88, 0x20000000}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000016c0)="3a9d7a34bea3130bf0e78751f5cedb5636a00f9ca2749449af3ce4a75e492a2bf2226a16b578493f37bb7126cd91e467c458752fcaefa3bfcad2a2c3533bcfd51a85adfb409f4c67f00721c665c7edb6fe228690b7885e9d0b2b24dd61d14f83898e91e979b5cf698deb11c8b0c687b1428d1c50319fa9dfda802aba72bc9467ab7072b507f9075ac95f457fb81589e8d0d113a207cac8aec263fd170fcc5cece8fadc67a90c2e60cc4e02b4157d06e1b63f1fa6c6833236a654148aa5e5550583658fff6dc68f6f733e2ccb0496ccbe06d9b33cf38eb2da143ad793e2c32ff40152a4b1ca84ee0af01db26e8dca6dd8292d1e", 0xf3}, {&(0x7f00000000c0)="6421f313142a785cf0c53cb17f0156daa4ac903793b27df804eeb9fa1288af", 0x1f}], 0x2, &(0x7f0000001800)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x78, 0x117, 0x2, 0x5e, "4030a35e7bea240aafa8e750a2e59fe00e7cc5cb8e3e8fcf9c62018a092eab43be7814eb10a64fb5771bc491f79733f551d93b6139f5f4f20a013acf2438069ecb7aa38d9a342ddc26a86f7829058087768e73444422bfb2936dc95c5d69"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x3ff}], 0x10c0, 0x4001000}, {0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f00000028c0)="0ddfbaacaf17f0c6059b5ae024629d5b111666b1f2b5794c69e291594b0bcf235a378c2aa802ea3726871de794681682da9d38595dfeb51faddd0cd42da1324729f37ab597dc9e9b9af99ff6ef42e3585eba5a51eaa1694649dc97ddf016094cbaaab3fcdb9bb12c", 0x68}, {&(0x7f0000002940)="931ef90dc46acfbba64416c61c979f3f3adb30acc362744a94057bc01e485109bfdf1deac2a947d8677f74deed1da5a7f3fd6108909f6640ea4fc96c3c22b7b2c4b24b5d", 0x44}, {&(0x7f00000029c0)="acce8c66db2d3b89ca1ab99f9b45184d57a830a8a49261aad90931ce2e9c47cdfc2338ba2d94", 0x26}, {&(0x7f0000002a00)="52edc5945c710749736ad4f938971c43b2c40ef7fb91b6a509d5bb7155643dc68ac9b12b9f06685ddb0f74e31c32d731a637f8e7741c4beaf41a2da958da4c8ea085d0f1f9ac17f4b59b324b7adafde1352c508075ca00528958aeec621f1b60ae61c0ce2f15cb06a1082c039159fa7d420f0d1183feec4e309694cace5ab297d6e9dea5e6ac71116b430745ede560dcc2b60e5a3c0bd072e21ea1e20c988699948566bd991a435f3d7b5b231433f01e79c3d20116867e9e7a4f12aeee467f567486b815789e8d60ddcfb4a217b42265edb006d363b2f13522aafd7e33eb92b711afa0117339a0a54f6914", 0xeb}, {&(0x7f0000002b00)="b13500e90b8e09431b3e9ae614fda14bbc039aa75da2f91576e26f8c074876d3e18b48d32419ec85f179a0e7413805a085d2ca3f17c4208e3b18", 0x3a}, {&(0x7f0000002b40)="a6b844fba382e5fdad4da502ed655b8be65c201a00232802ba5536910811a03051b9a5ca9f64c6198b0179e5938e3a98683ed789548fbb19f661874592e9feab9a3571749eebed3792909a15603378d3de2cfa1b3ea90398751e62b999fe47875bcf69b593bc39863ab7fc12220420bc53afcf76b927cd8632b47397fa1ae508d90893b66d2efc9ce99736539dbc3b307bd0f140c54c1af61a2b0901343657edad49e7e67546b66a117432f9df4a7e38fbecf34b005604ba53", 0xb9}, {&(0x7f0000002c00)="ee11be5c2a8f882f26d60abc657c42f547ea652f30b3317aec103195cef07e8eb04316a63246f3557ce2b891204c41eedd62e36bf4661c7ad589aadbb5b853c6dbc869537d5bbc534a84159ca656473a0aa4a90ee7e2420f165d218142c59bfdaa1e0eff1d", 0x65}], 0x7, &(0x7f0000002d00)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0xe546}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xa0, 0x117, 0x2, 0x88, "172c4e68a47001fe7238ff679d19d699f8f7f170a75bf011042cc176a2eb0c926a4dadb42bf1e0351cf855188c2b7fe7cef0c8bd366c372dacb1abe6774efcfcb4c52153c9d26af924f364ceeecbcbfe633df4a5e93fc2d4cb6f82d4592c7a18175831cbca22bc08fc7fbd5f255b50bee544642252c425e04ccf0eb7655ff65e5d81480cb3a068c3"}, @iv={0xd8, 0x117, 0x2, 0xc3, "ab3cc75580bfa232c245884464a44ff3b0e332ac556f1d08ff56c59579c54ac9039bce0abedaa1cbac178682a888816886907d3f67aa88e886c6e88768ed7464f925270fdff7ec8a74b8c5a0229377100068af8a86e1da9890320ca069050a94cb8f9450b47705a242481444982301d8f0b14348fced8263403e9c3971852de57a3162d4a3c32f7081214b2946fa16bae5654a667b9be65d4cfb8eb8102c044fe9785c404324725f4ee57caa8500bc5c1b32172cf9cc617f02569eaa0eb6014067006e"}, @op={0x18}], 0x208, 0x84010}, {0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002f40)="866dce4adcd2b056785326f225bd8f3bf7e55f134cd1074885", 0x19}, {&(0x7f0000002f80)="f45606f6dc3d971469f6589c2d158ca9fc798250c047265f8cd35d5f6ef3c15935a46a9b0ea6fd5db556a35360ed030e7c5f3b917f6dac423cb7b9ec49e4137376f488d86d41e30a4ecd999aa6e2f0781098134b6eb68aa352d43ed7f0a3e979d29c8088419637a00914911daf37655294be82", 0x73}], 0x2, 0x0, 0x0, 0x44060}, {0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000003040)="f7f6c4cfb1fa17d7b91cdeced41a8f092d6b551173db66a810027945046b4b19d7be0a50364140175d6276d9b42b1baabe20151d488777a91436bc255fe337279e0429f21bde1b15f6c7b090af5390006279146d2a7c6adb19545e043418c86ad870e9b17fbb717a60b42a7f658169335b0f1e13a8c7226546e13d99c57ff115d31fa502ec6e2a3993c92f17ac65007f86cdf0dd513e8b1324c3c9c70348adb69624a5263ff53a2015750d876f1e82a90c0bfb1c9ab6dbbd6b27811c", 0xbc}, {&(0x7f0000003100)="0af3bf46033f3dcc384268cf16a6", 0xe}, {&(0x7f0000003140)="b48e335bbf87360c0b63f407011d79e74d1d218f306c74428c0f261d917374ccde17de8785881a676ebb346d007f0d30e603e27c7f1b000bcda724ab4f10b51c25e56a28c9d72227b7b008", 0x4b}], 0x3, &(0x7f0000003200)=[@assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xf0, 0x117, 0x2, 0xdc, "8af12ef2dc11d53677ec82dcc89f1cc6d591cbd467191cfc3f6043e122ee0efacbbfa502b81f659e7f709823320f6d4c41efb9baf72012d19fb9465d8fce5290c7d157b43abb502fa7807b0475399bf817b1bd85278acd4afe14b85ccb7a2edadf4f5e1343bd9c1b1e9b248a21e66aecdddabdd510de38abc9075bf490cf2e56bfe779388739347c0f1a73862dbeacacc384fde8266300c24474cfc99b37138016ee0a3c2fc9a1bae481ff4ac63ddf7dd4e0a238c16b44bbdaef472d10831c07ae9699dec05375f5ded21df287bd9dd769d2f8e3b37a7e7e7783483d"}, @iv={0x1018, 0x117, 0x2, 0x1000, "f2355ca4257420b7e59280a6db8bbae9c1fe0b599b40be5132012e2cbdf8b5967f61c6798cefdf59e6775902c7416ca7a8142afa4383fac00c9cc980405eb5ec7975b6236e29cf9fc939bac156daad71da60c75a68cb02edf95a77665cf3e3098524fa0b9888cc3ba1dacd259c6f03a9b838d8d3d1f93f269c497e3f8654ac7bdc0f7513335edbb5e9f4bc35ce791401a684f4851b38a2a1d342bca04e7c3cc58502d3a26d66bf32c8ab2c806f61ba4c9932d93cd73cbb52fde7e78a5d37ad791d26243928678be56af5a083eddc43ff36e55ccf48d6f44992d0b7a1a54cb2ab0ab768a9d1506dd0443b60bd370a62c2a81ad25962a6c39b23ab74f6c219c7b2d8f77f47066b22980027838e445aed25e2b0a0842541505fc6ef8540eddecbf8b5f9417429b1e60c987db5bc5f19b83dcd8c6c296e93f0fdd2cec576245772d81beaa1392161156d35d87ae15fc8e43d07e1e37258dc294eadfa1fbda3d35ac972e62e6f7e131b12a315805cd185bcba2cacdbaa1401ca5a1bd1058f090281df33a966caafe2cf769e89cb5b08257072516edb4a7b4d7ad8f54a389e57bc880ecd652af63d3b9e402044dae0d25dea880675bc8d9a8d7891d182f289103db34a146a8a8d77928debf97e62ec0097d3a591cfe4a961b235d6e37faefc4f680b1ede8544701206720f672ef441c28bb79f89e4743eb9b08819994b96544d0739b98290930ae09cdb40ab3d1efa2481c573765cf5676e6a6be4dc75f64d2a7b6d6d3bd0bbdcb3eee30a4447eed0062abe49cd969b793694f5a1e688c4e2cde336bfeb63254beac108e5dba4ebb7fee2f54941ede384ed9bdf93e5b820b835cecfd672648509e679940fe02da1fb495ebd1cc87e40caaf3d654d14d1423d54871c3c1cf226689af45bb0d174d4cdd075a929f35ea4aa4ea9a3db1268090cbabe11eae8089249734aec4412af0b8f79052e626f95bf92c24028979b97aa37d3b6676fad0080551566c81a6b9fa88ff913e76b83ed3d5b87b6b92a3478bee840ac12afb406e218083d671fcb9fb47c766369b1a2d30b60a9b5a7465224cf42beff503ca25c87e1a579e250c4c5cb06b60854d2eb5bcd6b479beed92792c77c32d2fbe39a9b961ecffa4fd6da7cf8e42a6d7aa35398a004b3a73875dafce9931db9d6c800353f6dc9a36439dc4745fced2fa6ded9bebc88f2ae5d2b91509baed0c595cd41c135e9ef0f33dfbb6947651222f4b18712e8aa4b36d95afe666d8ed91556721509f2697b9649fdcac98da2570cc5e9c8891c95fb8af12d7f97eaf825424ec5149498c50b6317d8b38d4968d49efb19cbcb7aea269c999a3e326dae62d3cea1489d043ea6de53cbad1cf47cbd8f71931c88ab9556e0c0e3ec712eb1917bf21b15e9b8ed3e562c57b300d4c70db11e641d8f505e6583155c69033d0b39fe713717ccca499b47f6c88a2d05a1a0a88857b25fea216f1d0ab4d3b74fdb446953683d76e844fed586e857897ec71306778cb37e44f7d004d032558879474c368c59299809b30a25b79fa4ce3eac1fd4595fad7474f91e52bcfe85739c920327e8286f6dc99c24cdef0868af4bc02f96390b2a3628a4535bf41054b2b771e07f902f8142ef9b992e411da2ed3674b8975e2309b18228fd713830858eac5a868dccb14ceed506570470cdd26b4ee9db1b8c90b3f7198560eaf7fd91d4457e37a4756e7d51d56163baac79c7df2db70d1fef961f8967b47b0b2b679def594803d9cb8e8643f14589b2919258c03fff273ba5e679b9940697e1313fbfbd0c8e851f9b066cb0d9c4a852c7270c7492b7106760e0ccd75f8c8ac3df92603564d8580718355733b40087383776537b4649ef2bd5d6567ad170fbb700ba611671bf7425b62c9395964d3438249bd20904efabb6e82f2c35f8b268b26c09c47311fcab7011fcbb3456197300a381c4507a529a57fad4843cd8113813a6169b302c7d922b7ad3a7c154f79ea232ce8d4d96e1df5a23e3c82246a243d1a41b198b81542e8e605f59481f4ccc62aa1478cb8a99892c6ca56f0976c7b5b430011d6e191fae70e8cd51e8e1089594c9b266d93957a12b55fc8165fb20973c15aae0356e06cc6392059f12f2e34ac508f5302b92b155c8c39418a2d8edd07bdf102942b964427500b97a127f9f6aafbae5cc0926e12d803867d2e69a006141ec06597923f48ade09a97ed015056add8f8cae54b12268c99b35be03c80be0481c23e7822cd8c4e247ebc00e6810c6280fb3ba35dd7f70928ad4bce4f3fcd04a958d9e0f153ded1cedfffcf67e93f95f7af736c915b2a533c7c35ba555c5377eb57638142cbebbedc0374a6d81d7e6bffcfea01af83f840ab72d52ecb825fc6ed587570695e2186cb34d7cd1d551c8fb7148ea5837a12887ed0ed3cd423e9e89602f88145d8ec17255db1339a69b94a4bd99b1682e49b6e87c13037a8c346489a41e641e4b19d7315bd73f7001954fd85ab89817aa269e2b879bb7223bf05482f58e84dc85183e22790f82eda830f14048b27b782c9480ce06b4b19397df8961ac4cba11885e85a2efb5b8a747fdba0dbbb4e6863130147a752932e684911096442c7c089db4fb34582178af4952bd72da74e42781541369c8c1a55415fff1f867cf71c7c3629f0c99f68496a89c4e9871a10231c625a54dfdb9d75b830857d9f1db2c9ba26db9be681ff610a5ddfd6ef409f17f5d1cea91c416b21cdd7c8ee6795d1412d96c653a374bc3e939ed5d200aa7915cf54098019be08274843d03350436bbfc55e3113983a9422ae6b53e410b24800266f8e6bb46d917ec4adeaf3bba58c9dde6c17430bc23d458712bd79658316cfbff2b74fb1524f985134467f3f47443196bd8b5ff8be0e4d76e0852ff976d590f760f44aac7e919f9b45de4214266209598db04689b579c929c2d7353141325f3692a89db9f701bb3c8df3ad0b79cea548dfe94a780143b25c9cf56198c75570eb9f37dbec970c3519c1acd9d8204b79d8cc4ca142343d324f37faeacde33d997a9f1e3d8736bdd1e9609de3a9eca1b26265104aff77b89ed61ede6e765a02fdebd0a3755f32623be1b86261a92dc8b1e5721fe317c84251a2ca4a49e9a3492f1924affef0ef42fb7e50937f2aea8b7a69ae25d850198d601087e9c7e2c3bffd1aefa16d8fddf4f98ef1d33f4b84438adc122e6a6f2904698c3319dab395b72c21d6acc2c5e0e0f8d7d6e99ac1db03802dd1897284891f6ced6db3fd93cdecc7bba945fa30d5fae27150d91b22e1f81b79e38819a85db22bf944902a2bbf4ce4fdf4ec3807c9ed229c700b718727931700d405be5b2dee11c4918b894884fb4947a2c2a1b43383677151d514ca71152dd26f715f6ce4b5d6c818e5a164ffe7ce3310c92d0c8d4d76b047de15af8984561f52f93d28d2b13241c511699ee84514c573acc7ad82a610e7e71842a14e2a8cd92b93e90766cd66c11d8f8008e77030d726b8bc6f321d83a191d9d0c6e0cfc5653315698e5928ad85434a1a994b1d97ecc40305a3fd8f459095f578e5959d7a13f68b97ff8f3eff576ed8c28fda9c395c9abb4aabda4ac2415521817084d6e4c2f82a4037722f8487bdb8ea453af0c2d4376193308ca067a0cda11440ff8db215ecccde34d508995dd544f9cd6af22e8af84f3c8749dc76d9e4385bdfa84d1b511547f7fa350f743549e97104ade74319c823b7109ab64f460b00cac08cc691f6c302cb5fc270fa57f671ce9b90120c9ed6ba2dde0e84512ca66b09d7c709414be35742d286567739878d0f66e1e8cae8b7f0a3342a8dfdc045622ce36d9d8df4aebe14d8e144f2bddd58a10a06bf062c10f78070039be7286de757b0445148fd13c80ae09c645ccb9c7ca7b4047a3a5473709ca04c2b021e2326e4074afd700cfd0ef28d6c9c55547ef47bc2e893795ac76bdaca51bb20a7c9c071f0488c81bb7c7dd302ee2bed8c9baf0b34c9b3f00972f71b2f8a7d9de52b2cd3d4c0a55a610a0fc1acbdecb0ef8a8583d7f0ec9891c75a4cac39ce879b2114807e00f5de30b962ae658bb368a9f3befbe186d47ee1fdd80de8eb3dd74b1ee4bb5c082e0524933aa8403007a3bd0a089488bd54724b4ccd33914aa4f24b311194b083bb8bf016f0527b803a7da5ccc086b914bc0736382b6f1ccfa8f2e744f90426f9f8f9aefe765bd1123c428f4bcebaa1eea6d530b74072485c58b64482f213221f249175ad60646535ea64001e1f4c57a8129459c640c4983e1314a499b22c21485a999d5db0997f517e7cd73f8cb5dc4c6fc2f3a9c4bc75238d743c6cb1a5b9fd657c94eeb0633197c88c3e3759c969608963a87428ed052071cd8f666c65ebf49f19332eec75744827f2d12f45c62ee268821e641fb3bf2bf38d56e5036b29657b008f1d5f49dbeb2925f673f3945b1a4a5268ebf40e88b05df4bdcb753f80c86ba7671c4e1f80086fb585040929e64ccaf23c86367b24e097a8615e1e4994066f6a6f081b020899e3f2c7803aef0fb2a246843f5377ac58070451de18903f06300d1c7e2015941c43ee4cd0c5fda21e3d02b1d2b596f68751825d90069f477870ada84372a034c946b0acc6518db3342bb3782fcb4e72f997070a6b17f71360e95e77b119135aeea55cac21a9190e1a1343519df0e4c40d5f4ec2395c702369da5471a1ce9d9dca163b51951dbbac78f3818d9c6f3076dd7ef0ea259f1a1dbab98677707f1979798d3d6a0c1e206a563ef39ca3bb8cc1af5a4625f8134d011c62658f2d669d204b8157fc5b50d643bcdec5c7faf829ab870bd0efb6e5f3ece7ac05cee6cf06fcb4adea806cd6b9f934c8751a5e376d9a0d9644e0b1d7ddfa9b973c0c4c47e33911917732e6d1e64a809f0121c954c73bd7217f23dc10b8eff580d30fe6edb9035fb0b0f810da0a27137521faf48c0900d1f38f0d218c1205c02361a5fc7af5c6fe3b1e8c56349f5c9bfacbea757713eae9bb91f1be6b12117ec01bca688246dead673cd3daf1d10bcf682f86a31025e2f3e19ca1a525d002f703b241c7e9c207005fee8a90f40e5eca4f1b0bb22416e9f6706abe43b84fdac10a792efe00d46651418f0f0971f6b2205f134cb83517478c9e21c72c284f68c4ffdc414d4d3aee402c2175a2bdff9970df561f53d9ebb0adbfcdb4bdf10ac3b92973a4786e39b164034a0839805f64764b4479f7c3d4276e822d50fcc2c2ae885dfb93f6d3bbb5c20077742687f6c0632db5a01c0ff70f3caef86c3651fb5bb5812e2e711320a264fd27e327606bc33a47f9cef3f5666961547e8c7d505ac292caec3e49041c0160978893065b725ed0c25fe7dc67afd65ea69c6caa9fd895bbf659c405778fbdcedc83222c9d6ac4b3c5444b1de03e9ed5b1c91aec6b30d74bcc84adb6c8b43226d22e6d6792d7ee4009b584f75ee0596892ad8e91203b76df67e75e8e6268e030b72d311fd16b83f6847298fa3c73ce0d684bfa26f08557ab8ec6c455db9ff5fce93a43703526597c18417a323211383d8eee6ad212d16963c55107ede177a5d6d91152d279ad73b74aa71013a8d5173064fd6fa743ae1a1dfcc2b4f9114d5da4abec296f1d3d28dd8bfaaf5f83955b1008267f8773991322d8bce306a9204290849b43bd0ca5b82a8b4919169abeb7be35ecded91b5d436f3016e09e0af22b074be4db5327499f9b07d53a65b6ae19a7b5783a6ae4560df60cceac3fbf90c177d5e9834e80ea5934bd282318ccb366df4e005f32d58d605596c52b28d6f38e5f8"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xe0, 0x117, 0x2, 0xc6, "dc78929cfc98635b5df5fe979a89801a1afa20fed15de84772ef3b3207cc7619b425cd5925d42abd2a8db9c21e2ea44025eeb2b310b21353a4c26ec080c44cfcb1579e47bce83e7898adf7940482d5d3e5a0964043921882c197f5ed071aba87ec1132bf4db7e164197650b22447e8e2079a510f81f3658bf63f6d19e05de6921398afa0058d9ebc6630851be760218b9cd37fc9a71d587318dc93d770d09f288f800bcf259ce025e395944b7d05ee1ae2fc177505c22baf83e266f287fc39eb3aa1ea472226"}, @assoc={0x18, 0x117, 0x4, 0x1f}, @iv={0xf0, 0x117, 0x2, 0xd8, "6abdc1e216c601a2f39aec261b4c93bbbbcdaac36cecd6070321fe549ec9fda52eb9936497f1853f72127cfaea8c7b84f65c9209f4054e2de03273a4fb9251f389c009d35d12a1dbe48e5ab5bd8795a61998c19bfc3747520d3c9939bc638bdcb5f47d455401c2f2f04c57906e6a6af885d7cdb59cfd0d30e4528822cdf48114468dc3298bde56605e6e272413e883702c34168446da1b435aaaaaf8a4741039fcd5f7594d51c253372a73676a64af2f0c963d194c61caea4a99af766e5b15d3fe59f568a0655b31619e34d7807f21a5a23ff7a0dc2af647"}], 0x1320, 0x4}, {0x0, 0x0, &(0x7f0000006700)=[{&(0x7f0000004540)="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", 0x1000}, {&(0x7f0000005540)="e4e71b2b0de116546ff7298eb13b0e9be6ebb1ed6fb4e29ce6e3abdfb285cf8cde3e1d3a5a11c578b4538a5135b697939fc2e3759f7fd353fff21c9557adb07683152d8b7925d522fbf625be2bd9a22f63682d67e57a599799926baf859dded822a7a046510a73d68f39d341f9cb96e8e05f6b8f63efec22b77d2c1a37ef2254effb2b7dee83546df7e69382889f275a7540de89a9cc7471c0", 0x99}, {&(0x7f0000005600)="9510d6aeea024cf9d7f330728e56e94248847392035afdb571921ac2d2c7d2334aeb98cd460aedfe4fde9eedd9f4bb388ea551028bd63027a255e29387bcc1b4febd260862b51442a87a2c612b03f22334975016735187cc3d036c057df955022b3bbc390c5de29e50246b4183704421120e9bdcb6d94ecdbbd45891fedf9bd2b55e4553bd7bd4bc3cf8b93c1d4726c8b5e97d17518513d50e1ef5f0352eacacbe05d1fa8f01ee15e13519b69fea9cb7a96ac971f4a8136b2540ac56ba13df6faba68b85531eeac88216ccc156086adc632c227ff51c013081d214279d236e9c1e2b7623f7fc98f82159a62ed52e01c73895adabfac60bf3058ae952cfa026b93d84b7ea150abedb7ce27a218edfd87f728586bfb5decd2512d85f96b34320087ba0da9f4f82c1dd1a9354f27942a2d225fed8431456c75dd5bb174e85cf662f36196cc48dc5145f49d5271591ddd5f0c10c3b23974ba31ec5f6061942fc61bfdcba6b381cf61c5ac208c0c3400e3c94cd1683c2bbcbc1c9000066f12d385c5fb6658ab337d7dae96d3f158d8df5aa37f87bdb681d6a9e1cc87efb312aa64b9d73520eb147e890cf3a67c43953594a360d12d5d47d41fad671965a76af4dfcd4846f03ae5910d4214d3b951c4ee3a190abba427271050b597d65b3b2a401e71d6132b801be12575b41464ac87a2874a353b6be16e5db713877f4ada520f1c45975e80c30c127528518dbace449f45f5293dfb31b524371a456d67914b4f98f5e1d515da86656251f3085afeed0878419d31189bafebb1224cc06b50c70a55ddac24852c83f3fd4b5e02a280e351951eece5d74e2046b4ebe2cbe47e7f319c36b0098ba2625e4457b11f56995702b3eaa43504d6f9219ab8deddcca938b1241868065e3c9cca8ca11a89eee3fe5e970eb040867168968ff7d3f4fd29d4a4faaa8f41f833d1e31ad4796f4df26341cca8034c3688103ceb5ced2a76d4132a85b7671ca4ce1325fe04afadcd7dde6f36e0ee31f4cba87a8dd8ff5a6cd94fce9b656eff10dffed46c1485236a1d0f9cbca9c07df490986d2e8657a36377ff627d432a824b04e17d4f1536d91ab4c90bda96ec33e5a00d9d59377c6c53266f728640bf81e6507393c0bf3ba2297cf1c1ed5f28a40d053c46786a6f244ac4d123e23a2444a3480b797b3337d73348b3a716d966f6ff34d8f4b32d93fca7cf8af5bd28e73864889ecc347caa0a6dfd5c6cc9936f187577005f30a5754718c1dd89133b94b1eef9cf253f6c52041cf44d62de5668559a8f81f93069fccbfed730e4b18a70471ccf5db9ec748536665647b1f406cb52f421b89c14f723d9d0e222296dca73aa0fb84771f2877d6926bad4f6f3c288cf48c07adf429e04b60ce0516435325746ed2839162914ace0b335a89a620aed2ca592b6a8c638ac64e67cb7745683def159091f217a122cd3e6f8ad9415de2457ef92d8f11aa62e9c7085a998c922eddc7ecb411adf6e1b35be1804a99b90fc53b91d70c459688586dd53cd1033b372543418f661cc3c8ed3d0c277586e1765803601a5b28cf2b272b19557dffcbe27f7ca0b575e2d04bb5ecaec5ed0fad666e27a19acd5d679ea019ba93cf552ab6874f2fbec72a133adc035f5ca45daa07cbd4d8ee580478c3ccd64d3fea3407a8aed821e838f349e7c9f5ce228c603ae7057953d161295cf3069a4e597d3e8b41046f5668ffce3d6168a7327f4d614120f788108e9e22ac1554a126f6c091f6bd8e70be59b07705d17f39a0b3ee872e582ddb845ceb90dfd19aa0a87daa334f15ce5507775c17d3fa7fa6759ce841c59d005896935fa8e573c93a80a23235b7cfac91602c8c705ca53ec0a5ee4e089b754d2a81745cef3ceb8780efde6900efa801d33a7e1dce8de9bffa3dce079ba043166e4dc8614e823dfe24bc034f49b98a9b095178ef4c7b3cbcd277aa12266d8e20d97d798a09599711e752a5ee521aa685d42edbd6d85121c138e8d6b2a548b5f758a2f4264ed1057f8950719ac800ef5200558f850b37f537016188b157ca7718a225b0336bcd88b146ee7e7d5feead6d4d033f94a8f4fc99e670152616747dc85ce05b5b0a2591d2f4c40b10811b8c3ee72502e295e8cd5724e6fc24a6f77b163769deecb617d2906cadafff062e33c9fad15ffab3d93237ff05249dea9f044510719139ac8a11978ec89833c5e9003dfcdd0eb38820bc0635e7d0116f5d44c439980d20b650a7060cc5bc31a12e0fe420ae13d6ee390af7bbdb79858aaec2725afea40b8058543727c5b41470d99058a7ff40df03704f7c6dae9644ac2cfe089537e18a99af6504c52d1136a5554b550d8d8e2680ea0cf3f3679c3ea762e0e116ab3a216d61aa8e9674bad9eddd6df838e70910e916be428bb1c6f87c3e59f3b21bb1b855365f205056de887c3949f4b8579a9204b78374600cdb8d2bc65cd50fe7d09dfb47951554793f6a50cdfcccf71aa8866f44029432516868bb88e66117d67d075a58b5a4a563d0302c4ea654371fa1d2359ee1c75f8e3a0f3aed34ac1ccb328957a7dfcd86598363292ba4749b78715f760df2b9ca0d15f974e5e1884e8a7b315f9e745e2c2ba861082cecb5829248852687cfe1a6c0b3435ff95ceb687d9aa3b6bfd4aba03885add49f7c177ad25bbcde7ad7faadc3aef6da0ddae8ef3b5fe8c5763a89fd10e0cbfc7cd98f69c2c451e63eed25aab37b19d21ba275d681ea7d626c728de3d1d19d2e5063b31b95c809ae5620a4cc657b567a30f3dc46014957922714e2ff8f0010b206da62452b0afe3491f33198fa6905f50b5a237131e2a3ec9bc86bc705fa2da8d14c3003ebbea8ee1d08cdfe2a2be5b306c4546feb40f65875c38be5a4eb3069aadbe6b7a65b883e508fb6052e1527fba3664979e8520ca0be5027b5dd0c9afde85b81af5c5fda7e5341c53d9b7f9ad7a6f30055f6d47b8507e0e77dd51d96150123c8ad506d101a2df6994429504e598442231e617fff9cf8183c8e56bfba7292c356bcc8784d7ce8f7d4b1c4d6704dd9e58d890b0c0746f01266c345f773dfda4bd6c6feeee808827d6f71cd224f294140122876e27aa28e45faeb66e51d48e2ffc323e958d8b76d632d695c565c4bf0c2bdb2c0a04861038e47698179ec2f0a899bdc86e14cc8e1a4829195d4ad3cb00f709927b5a3ad9996b85fa9310e5a406068b1ff58628ef98fbcd26444a28f88b262dc3e0c2b0a98ab9f41b80419c220fffd3c78fb2a0d16b74f3dab9c686fc29e8e01685fb1be9d70e00de4b6926145971fa1147b56c32333b033916a37605abd6b6980f95b221368953f7d06d067d372eb1afd7d43bf889c1238e63ed81ffb633a9e2a57c769cfd19bfc14597c9d00d87a42c033b59d7dbf77cac865faa8a63fe022ee51cff45cb67d2d3427ff9cf14e8005fa6b821439a9dc73d93f6c58c0639961422f4e877de1aa9b1a2f2a7c15f6c3a570fc0801726fecbb9fa94417a4cd6741bd8d0e978b190466ef0a2bfbc8083d900d7c7fc339fd3b0b187853f90af378d63c6ea7c3036ba1937160d129154078325d799ce29bbf406bdac30329fdb637ea9b7dbbcf0087728da40173f2f23ccef8a447bb812a3c7804bd0f7f4ab5fc45fe86d08d5122f9b7df3dbb4f6f4a25e3b90b679343b2cf08da77eaab9dbb68095183b868f28c8efab62ebe1209ac8bc0562828e8782ae167c06b62b9d62c28e2d65bf3d5b8831482b72417a883fae21ae1fab39617f986d7c9123c55200449516395cdd373eda57554d66263e20428ef3c81c9d0223622f318acceffa58ff1a377da75f18af52027b2906f546d7c8911eace534a7b7d1626d3ec6888aebf381524256f980019aefd427b591cd7dafb8a2fb90b0af78f60cac93d5f5705e15592499c14c270d59fc181028b572e45e1ba77c524772a4073dd6fb5c18912692769ef15d81b2b2896aba651f70be629c1da2142733528332ef0cfe4004d64b5b0ee8e98eda9be1072a6f97ea93f8ad351d8cbe0d3996ff6a58b4db3eaf8007ebabe0a6faf142dd96a2eb20b8545ecfe241a09a9e646628148615ffad14e9bbb0f67ff6253328024c92320c48424d9d529655bd18500ec70d3512d548c866a2188e38341ab713488d993bb7fa49d9ab823ea66dfec90f7a79ed806bf0ec3bd9f6f926f36ddebe38bcb62701e7c35d3187a0ca0f41e357a2707580df1698f50d1b7283c4296bc194d19133b2d680689863a7bd557da0d16c09179c6a77501c216ba1d7881880067ad0c8dfef03dfb4953615b8cb51f29fb19b2129ac16ee41892de42fca613abf50beb0ff79edf3e9f092ccdd9eb1dd98e9a14514a50950eb0b4900298af500bc1423795dfd910fc166df341fb0b18b1e2bc4b7ebe71d2a3497d4c28143a87969cda9738fcad84130d40f7ed1c830c92b0ed1ad609760faf42a2360eb58664b547e9f4d605616ec341d78a070b461dd55dbd9ccee12f44cfdad61b28eb2c5fd722e628b28ee9a3fbd18f0542efead5ee230491b30aa62b425903c1746d1e48de1d85a25407c5d217704860c5ba971e5516c5f28ccdd2d85262fcfb516894c9d6b98ea9bf7d2499ec8a32eb9923efd8adb5a024e2267782890ad2d89d10a32b4efbbb35e650290a5705eb05f79e4251ab368aa02539cdf0e38b3af6d83602a7aa1e1c4064a30a16dc60a2a4c81150f18f290b31befb5f278dfdd81e50f249841ef33d9856cca46c6de9ab3ec0bba3ba479a210c00d33e3115dd6cff3cdd10cd8886827dcd814ac900e82a38c3ed39b2b1d70fb706edbe37977d35aae702f49f37ba4698c0270081f6d8037c585029bc8de876d9c3bb06afd279f2c619a0f9efdce5cf63954c8a6ecea32bafe608bec5cecdc771756578e1a37a8b4e0fb19efe03c88e3343bf90eb17417d1dca1e5464aa6066e7014fd8136dd380af5f280eca9f79e0e8125052f6b1288c615723ed95b5478cdfd71309aa030d13166fdace610d368f33e062cb141c412ebc3e7dfd3422f599943ca65eedc8f6757d742e7c2e353702ec1144b503c3fc064797cc543821d126754d550c9966ad18cae00aa80c0bdc421f6ceb6465b0143753f4a8cd579bdf85b65efe41a52f84a3c8b74244a421f4a6ae0bf1103a7a683ec78cf2fc39c9a23895178ef02ee193c76d356a00e5a7bcc21fafa5ccfdd7a0a90384d320ce2ed1ce97e311bd0f32aa69061407a0347dcf200cb89dcb02c53f6c33c224b9aad298314e22071e2eb84cf053c421905561a965006e23ea8cefe472786b93be30aff0e2653cb9cf402dba778bd3518209ac93543ced63bd9c55455d87bba546e3285c16aec9429521d08744b44c8382c5b79b6f3e6dc0b6057c9313550559b0bd8511c7423e868e0d6e2003a32a5dc5db51a898ed9c0178765d11573b370c4cd144fa298eb9e31c0865bff757af2b962bf1af7be5f272eff9249999b1edd0e355c2ab012545e46ded7083ecd56498d31c5257156b06880999ab1a899b67f994f0dbac95cce7d8e1f3c5b45f17fd8f99a757e6e29d3821a4cc8f84378f7f855b900fb3ee811a0ecd5afaafbffaf6cd583fc26b6a2464877d2af8dee82ac2b8c2e8cf9edc20dff7cee0df313fa911d2f241305415fecf6dd01f17e284b441fdd3412c71616ced2c5b8109248e597b6033f5ebf589a38c3d3bc5193137cfdcfc0d10f2226d17f7f3128f15480b7728b49522c9f8c0abfb54b063c4fc372bbd0b4851937f0ce5a4e6a25a7f07e22307a458b38513440b02cf72a64fec3ecd", 0x1000}, {&(0x7f0000006600)="6f3cb78f993c7415e649ddc0b66346d7ec4b25e33cdf0bdace31f1214e7a9dc04c727e8f52f8fc1df20737af088cbc31f08c51dee28710f98a2e9e402b5261ccf512ebec51116575d1902197fec9e328c927de98a6109ddba5efcbfcf6e452c7ba787d5b30f245bb0a7aa74e189a2792666d51d25b6c7e747e6f3202b4a2c324f31e4722c923a62dadae9ca69f6c065de3dc764ce812f03148491ef9cb9b0d0bbce469e92d8cbf9bb2b2de50b91e41e37bfeef901011ba293222b227122c9b2e61", 0xc1}], 0x4, &(0x7f0000006740)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x30, 0x4000}], 0x6, 0x40000) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:16 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x48, 0x4) bind(r1, &(0x7f00000002c0)=@in={0x2, 0x4e20}, 0x80) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x18004e20, @multicast1}, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 03:07:16 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r0, &(0x7f00000023c0), 0x1) [ 977.203315][ T3379] usb 2-1: new high-speed USB device number 87 using dummy_hcd 03:07:16 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 977.323366][T11826] usb 4-1: Using ep0 maxpacket: 32 [ 977.443566][T11826] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 977.451955][T11826] usb 4-1: config 0 has no interface number 0 [ 977.458559][T11826] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 977.468341][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 977.468787][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 977.482069][T11826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.491294][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 977.528354][T11826] usb 4-1: config 0 descriptor?? [ 977.693358][ T3379] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.704962][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 977.715006][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 977.883333][ T3379] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 977.892561][ T3379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.901957][ T3379] usb 2-1: Product: syz [ 977.906241][ T3379] usb 2-1: Manufacturer: syz [ 977.910870][ T3379] usb 2-1: SerialNumber: syz [ 978.233423][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea 03:07:17 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b0001760000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0xfffd, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 978.693589][ T3379] cdc_ncm 2-1:1.0: bind() failure [ 978.705754][ T3379] cdc_ncm 2-1:1.1: bind() failure [ 978.754025][ T3379] usb 2-1: USB disconnect, device number 87 [ 979.323074][ T3379] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 979.563053][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 979.763374][ T3379] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.774609][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 979.784577][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 979.833613][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 979.864069][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 979.875962][T11826] CoreChips: probe of 4-1:0.159 failed with error -71 [ 979.888246][T11826] usb 4-1: USB disconnect, device number 96 [ 979.963457][ T3379] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 979.972766][ T3379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.981133][ T3379] usb 2-1: Product: syz [ 979.985495][ T3379] usb 2-1: Manufacturer: syz [ 979.991220][ T3379] usb 2-1: SerialNumber: syz 03:07:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:19 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x85}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 03:07:19 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:19 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 03:07:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4, 0x0) sendmsg$inet6(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="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", 0xfd}, {&(0x7f0000000300)="009728d19896540e2d547b9170a8eb700f8926b2371e8e31f1ccf3f7080dcf002fd8f1a78da064781a4ef6f8f4c761e3b60980a1683d9358baefffcb465e97ecdbbc6d54e9ff02ea4a8779d52e4416fd677025b0a39ebf15e3020192a78e4c5d64fbd73286359d49e2c7ef38f9455b4ac0d44616531de5f81a6e09a6f051fe2939659b8341875bc8186cf3623784c48ec7fed0f95f3700f2c1ca1f16281852d29d99d3c3f99f1a4822ef2de1fef7f9670a3c07d3850208f6d0e13f430148", 0xbe}, {&(0x7f00000003c0)="5d8457e49650e10478f837effb019820df23e2f3f81900627d427676a546ff4fcbecf402dac69aac4a08f9a5fd86d5eb35ec789bed87d3dc9b8e7dad6c7727d196332fdedf7797dc4c82798a99bf4f0b6e07ab09e46ed13fb8348ec0955dae66e759a82e05ba70905987ee3eeac0e9839887a6f788ecb2d9c549f0786fcff05648477121b5f4582dc2936744c72469fc7b1c34cc", 0x94}, {&(0x7f0000000480)="72b98a0ac9ab41100ed29ccc1620fa6a3fe24a6266540dc18a0f514dd8f4089aac5baed2f5f6590a4b595b61a3087f2172d1705d3b0eba1448a110cdc5ac107305360a9d3bbfd6", 0x47}, {&(0x7f0000000500)="e1b8562f4316a82e8f71837aa27f78deffbae7a5c196c6dc5921444c9bdba7e9e01b2cc1ea857425f3aeba1a89b796795ee05f4be3c6c27bc32cea184d2ed8f9a75b1901911af89a0db4b9ab663ae247c8942af835fa4f0fedcf00c74cb762176bd6e66a2c02a5cec97bed588c563df67816dcfcbffc72cc1ab4577d8df1c350bb605903e9083740e2f1c2cfb3e1513cf068d3baa54894201558", 0x9a}, {&(0x7f00000000c0)="43221de3bb0f89810d4266e1a655e6163302d3ff14bc1d63de13edbfc07249862401244db5cb20094c9bee4afab3b51c519a3484d4eba451ec36", 0x3a}], 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x128}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:19 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6d}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 03:07:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000000)) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:19 executing program 0: syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x20805) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x5, 0x1b, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x1, [0x0]}) syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x1, 0x0) [ 980.703108][ T5] usb 4-1: new high-speed USB device number 97 using dummy_hcd 03:07:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) r5 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000200)='/dev/uhid\x00', 0xffffffffffffffff) keyctl$revoke(0x3, r5) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x1e) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:19 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = msgget(0x1, 0x100) msgsnd(r1, &(0x7f0000000240)={0x3, "204de2c53abe9842412f30c44d8837a9ce063cb330109805f5479fd9e266c4a34d593173a1de2d78a7745387d99a9b766ac20d23d431f0d26a62d4d827c82730835818753ca9375205d15cbda1af4f07b9f170407c634301dace96f58f2d5aa2bf062dd7b97635a98b6769ee589b9b04a708466cab3eff1c6b4298d7cb9581113b1ef46c2eaf76fe5a8dadf4e455475c1c021b001d3c69014ecfe7bb672b15b7f20b07"}, 0xab, 0x800) r2 = socket$netlink(0x10, 0x3, 0x200000000000004) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f0000000000)={0x6, 0x3, 0x8001, 0xfffff5ef, 'syz0\x00', 0x5}) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:19 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) [ 980.803451][ T3379] cdc_ncm 2-1:1.0: bind() failure [ 980.815868][ T3379] cdc_ncm 2-1:1.1: bind() failure [ 980.938409][ T3379] usb 2-1: USB disconnect, device number 88 [ 980.976688][ T5] usb 4-1: Using ep0 maxpacket: 32 03:07:20 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7b}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 981.184450][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 981.193054][ T5] usb 4-1: config 0 has no interface number 0 [ 981.199358][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 981.208644][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.229857][ T5] usb 4-1: config 0 descriptor?? [ 981.513108][ T3379] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 981.623358][ C1] net_ratelimit: 22 callbacks suppressed [ 981.623372][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 981.635642][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 981.642202][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 981.648616][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 981.773171][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 981.933408][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 981.973317][ T3379] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.984687][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 981.995092][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 982.163280][ T3379] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 982.172553][ T3379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.181012][ T3379] usb 2-1: Product: syz [ 982.185360][ T3379] usb 2-1: Manufacturer: syz [ 982.190190][ T3379] usb 2-1: SerialNumber: syz [ 982.263397][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 982.269550][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 982.903568][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 982.903583][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 982.903979][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 982.909782][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 982.983847][ T3379] cdc_ncm 2-1:1.0: bind() failure [ 982.994968][ T3379] cdc_ncm 2-1:1.1: bind() failure [ 983.006025][ T3379] usb 2-1: USB disconnect, device number 89 03:07:22 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:22 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x79}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 03:07:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0xac) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x375) keyctl$get_persistent(0x3, r11, 0x0) lstat(0x0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r9, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)={{}, {0x1, 0xe}, [{0x2, 0x7, r11}, {0x2, 0x1}], {}, [{0x8, 0x4, r12}, {0x8, 0x0, 0xffffffffffffffff}], {0x10, 0x2}, {0x20, 0x2}}, 0x44, 0x2) setgroups(0x3, &(0x7f0000000440)=[r7, r8, r12]) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="fcce5c1819981d2a"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r13, {}, {}, {0x3}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x3}}]}, 0x30}}, 0x0) connect$can_bcm(r3, &(0x7f0000000000)={0x1d, r13}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r15, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 983.471045][T23446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 983.536736][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 983.573467][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 983.585498][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 983.597922][ T5] usb 4-1: USB disconnect, device number 97 03:07:23 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:07:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0xffff, @local}, 0xfffffe5c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:23 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:23 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x75}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 03:07:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) socketpair(0x0, 0x6, 0x6, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000002c0)={@initdev, @dev}, &(0x7f0000000300)=0xc) rmdir(&(0x7f00000000c0)='./file0\x00') r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r5, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) r6 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x8000, 0x800) ioctl$VT_DISALLOCATE(r6, 0x5608) write$P9_RFLUSH(r6, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f0000019ac0)=""/102400) 03:07:23 executing program 0: 03:07:23 executing program 0: 03:07:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 984.448295][ T5] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 984.543225][ T3379] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 984.723278][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 984.783136][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 984.845225][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 984.853751][ T5] usb 4-1: config 0 has no interface number 0 [ 984.860055][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 984.869503][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.882620][ T5] usb 4-1: config 0 descriptor?? [ 984.984578][ T3379] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.995763][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 985.005774][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 985.173949][ T3379] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 985.183316][ T3379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.191528][ T3379] usb 2-1: Product: syz [ 985.195945][ T3379] usb 2-1: Manufacturer: syz [ 985.200670][ T3379] usb 2-1: SerialNumber: syz [ 985.573334][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 986.003733][ T3379] cdc_ncm 2-1:1.0: bind() failure [ 986.016456][ T3379] cdc_ncm 2-1:1.1: bind() failure [ 986.089328][ T3379] usb 2-1: USB disconnect, device number 90 03:07:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:25 executing program 0: 03:07:25 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) unshare(0x400) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 987.063393][ C0] net_ratelimit: 20 callbacks suppressed [ 987.063416][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 987.063504][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 987.069443][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 987.075403][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 987.081301][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 987.098929][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 987.193518][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 987.225656][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 987.237691][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 987.262100][ T5] usb 4-1: USB disconnect, device number 98 03:07:26 executing program 0: 03:07:26 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000100)="f444fd09eabcd045b8f1b54ea980b78abcbd31384f327759699b2bee27660a9c98f336e51bbba56aece96abcf6adc58fc6570a90c0463b1b5553779b9b8d8c32ccd24034ae35d009", 0x48}, {&(0x7f0000000180)="cc8ba4d578d8ea8bdb0444bb701089afd93a538d5704c5d35b984b26824d0e88b8b62171d17460961bb9eb74b86dcdc4ac690a09e337b52a05cfe300f591b71fa6c3a500a3dd00475223a17bbdd1163ce46b4463859ae426a1c3aa4b6d5ab0b8262863d616b7e763ffcc4f8f290e97f67a68fcbc00"/127, 0x7f}, {&(0x7f0000000240)="37881b0afb688edd20fce26cb1e199d5074d8c8c1165a15a6fa50bdc0d7074e895295cf90fdde2ab9c72658b4b0d6777c2d22ce69e9c482bffe8149dc15917a3697814850621aede0408961c04b3c04ec02f3504299ebc730c4ec02fe7ff2fc905bdb053ff3f9bb60605de187a1c43918eed6284c5f477d41d9796980ae5996f1309f29537ea9a0708bd595aabc5f9bb0b4979049bdb338e61efa7af315009", 0xfffffffffffffca4}, {&(0x7f0000000300)="dba139182a4321cd8b5214c5b33abd794f830e622f8420b3641bfef3a5d5cf6cdcb142fd4063ea6620832bf5f73d4fddd6a26b2d85701c72d238ef44a7db976e9fafdb", 0x43}, {&(0x7f0000000540)="9556698da1dec0b484a5f775a90655acabf920ed1e4d91d27f4fbd3eeb7c87bd2113172d276e34857cf6cac69d8c19941a5930a9c295c9b3e4da998869d05cd33081be27f1bcb18e1b8b0209a1a994a50c558c877ea1fc", 0xfffffffffffffec6}, {&(0x7f0000000400)="76e504ae1ae0104f77a97c670ce27fc49658e8d768b54f8df79192158925c581964c2bf124fc7300c82a47615c8e0a1b57d53740415192e04fce237baa9d73618aea2886c60f4bdefb458fccb84c8e5cfe369341d456d84d754b0ffa6f7a7396063635d32b6505bb5943da1f7870daa6dccfd71e33e6e88bba75bcd0bb60004c40a78d9f2376bf3b09b7929a8f32620139aef276ac7534f4879f03f8819b12c7", 0xfffffffffffffe25}, {&(0x7f0000000000)="4732c92b7f835be8c97ffa68ef73648237e97e7d17a378155994e126561a580cc4c040216366eeb2cab79cdc63", 0xca}], 0x7) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x365000, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000080)) 03:07:26 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:07:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x2, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x24, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6255104002000000000002db0609d2fc0000000000000000", @ANYRES64=r3, @ANYBLOB='\vc\x00\x00'], 0x65, 0x0, &(0x7f0000000380)="9cb2b1abf53262464a4593c78368053efb3c2997cec99a4ad6a2c07e5fc33647d96ba70fd3af6fce76edac3feb2e6e76f35f5a7ea7011ea6d214e01f6b0f58a8785a19b9c1d0ba6fccee17e2adc77c8aabc575d3912c2ec49db624ca53c979236eccd87ad7"}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) lsetxattr$trusted_overlay_origin(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='trusted.overlay.origin\x00', &(0x7f00000004c0)='y\x00', 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xf0f, 0x40) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)=0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x583, 0xffffffcb, 0x8, 0x489279e5, r8}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000280)=0x5, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000002c0)={'veth0_to_bridge\x00', {0x2, 0x4e23, @local}}) 03:07:26 executing program 0: 03:07:26 executing program 0: [ 987.863591][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 987.869976][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 987.876695][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 987.883150][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:27 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000e79ff0)=@in={0x2, 0x4e20}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom$inet(r1, &(0x7f0000000240)=""/142, 0x8e, 0x82, 0x0, 0x0) [ 988.025192][ T5] usb 4-1: new high-speed USB device number 99 using dummy_hcd 03:07:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x100000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x800}, 0xfefe) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xc2080, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 988.193161][T12200] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 988.273341][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 988.413501][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 988.422256][ T5] usb 4-1: config 0 has no interface number 0 [ 988.428773][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 988.438221][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.447368][T12200] usb 2-1: Using ep0 maxpacket: 8 [ 988.453264][ T5] usb 4-1: config 0 descriptor?? [ 988.643379][T12200] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.654693][T12200] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 988.664675][T12200] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 988.843570][T12200] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 988.852784][T12200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.861832][T12200] usb 2-1: Product: syz [ 988.866206][T12200] usb 2-1: Manufacturer: syz [ 988.870878][T12200] usb 2-1: SerialNumber: syz [ 989.145293][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea 03:07:28 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x7, 0x1c9882) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000280)={0x1, 0x0, [], {0xda4c55a469973c9e, @reserved}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000000)=0x800, &(0x7f00000000c0)=0x2) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r5, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) r6 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r6}, {r7}, {r8}], 0x3, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x19, &(0x7f0000000200)={'filter\x00', 0x4}, 0xfffffffffffffe1f) 03:07:28 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0800b5055e0bcfe87b2071") r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$unix(0x1, 0x3, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r2, &(0x7f0000000140), 0x1236aa6efce153, 0x0) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 03:07:28 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, [], 0x15}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0)='\t\x00', 0x4000000008000073, 0x484900) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x4f, 0x101002) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f0000000140)=0x3) fspick(r3, &(0x7f0000000000)='./file0\x00', 0x1) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) read(r7, &(0x7f0000000180)=""/61, 0x3d) r8 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:28 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) [ 989.693607][T12200] cdc_ncm 2-1:1.0: bind() failure [ 989.705707][T12200] cdc_ncm 2-1:1.1: bind() failure [ 989.766242][T12200] usb 2-1: USB disconnect, device number 91 03:07:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000), 0x0, [{}]}, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 990.273163][T12200] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 990.513358][T12200] usb 2-1: Using ep0 maxpacket: 8 [ 990.713344][T12200] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.724494][T12200] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 990.734566][T12200] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 990.773393][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 990.803419][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 990.815364][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 990.827999][ T5] usb 4-1: USB disconnect, device number 99 [ 990.903364][T12200] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 990.912911][T12200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.921208][T12200] usb 2-1: Product: syz [ 990.925796][T12200] usb 2-1: Manufacturer: syz [ 990.930495][T12200] usb 2-1: SerialNumber: syz 03:07:30 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:07:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = open(&(0x7f0000000000)='./file0\x00', 0x40200, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x3ff}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000180) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x2c) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_buf(r6, 0x107, 0x16, &(0x7f0000000340)="2379121b8aaa7d798f702127d86e885ecdd1fc75ddfc8802c51ddc900b6bf76d4016233f2df3232ebfc044a98f86cbb749363aeaec62e1a0ff2af0e691e9e53c6ddfa950cf75d7c0af33f1f40db2163f481c80ebf08a2b9c205916886fcadb0e5220f76ea9367742cfc0b28e16f0944c", 0x70) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r7}, {r8}], 0x200000000000026f, 0x0, 0x0, 0x0) ioctl$PIO_SCRNMAP(r8, 0x4b41, &(0x7f00000002c0)="df1896a21903bb39e09de05b086f") ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f00000003c0)) 03:07:30 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x35, &(0x7f00000003c0), 0x4) 03:07:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040), 0x8792d320b473401) 03:07:30 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x1600bd59, &(0x7f00000003c0), 0x4) 03:07:30 executing program 4: r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x2100) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000240)='\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x3}, 0x28, 0x3) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000280)=0x8) [ 991.633338][ T3379] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 991.733390][T12200] cdc_ncm 2-1:1.0: bind() failure [ 991.745545][T12200] cdc_ncm 2-1:1.1: bind() failure [ 991.799635][T12200] usb 2-1: USB disconnect, device number 92 [ 991.883232][ T3379] usb 4-1: Using ep0 maxpacket: 32 [ 992.003509][ T3379] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 992.011931][ T3379] usb 4-1: config 0 has no interface number 0 [ 992.018431][ T3379] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 992.029725][ T3379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.084240][ T3379] usb 4-1: config 0 descriptor?? 03:07:31 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:31 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @empty}, 0x0) 03:07:31 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000000)=0x5) [ 992.663725][ C1] net_ratelimit: 24 callbacks suppressed [ 992.663749][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 992.676215][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 992.774188][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea 03:07:31 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b0001760000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) [ 993.233322][T11826] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 993.303381][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 993.303535][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 993.309528][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 993.315608][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 993.321458][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 993.332979][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 993.405063][T22410] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 993.473054][T11826] usb 2-1: Using ep0 maxpacket: 8 [ 993.653174][T22410] usb 1-1: Using ep0 maxpacket: 8 03:07:32 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000240)={'raw\x00'}, &(0x7f00000002c0)=0x54) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x2b, &(0x7f0000000100)="05be9695f48a7a59e23f58da3e0eca6315098cb3e46705b458a98bc7653b440743f3e785f74de3ec78ed4c7f70aba4be913619324f67ddd444f7b15e15f476b6c7efe573952610c371ca773e0b2a227be5564b87db0dd7cc77d6b66d345f543a0a8ca41455a0ca70f0a06a019f7523a375bac468858904ab5b8851842b9f06f84095f273f1cc352be4ed7765bae186f475f55b8671bbf354e9074b2fc8f93e0ac4a89decb1d637ff3b7f8f1a662a429ee8cdeb497bfe98ee0ef4234eaf0cb0f73edfa86a19c38ba7737415b9f7c2ba4abeed57f7cf06cdb2a8eb4fc59fab833d84", 0xe1) r5 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 993.673503][T11826] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.684863][T11826] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 993.695432][T11826] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 993.865488][T22410] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.876891][T22410] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 993.887186][T22410] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 993.913615][T11826] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 993.923064][T11826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.931172][T11826] usb 2-1: Product: syz [ 993.935570][T11826] usb 2-1: Manufacturer: syz [ 993.940283][T11826] usb 2-1: SerialNumber: syz [ 994.103466][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 994.109740][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 994.133401][T22410] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 994.142691][T22410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.151016][T22410] usb 1-1: Product: syz [ 994.155385][T22410] usb 1-1: Manufacturer: syz [ 994.160068][T22410] usb 1-1: SerialNumber: syz [ 994.383552][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 994.417318][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 994.429408][ T3379] CoreChips: probe of 4-1:0.159 failed with error -71 [ 994.447124][ T3379] usb 4-1: USB disconnect, device number 100 [ 994.793740][T11826] cdc_ncm 2-1:1.0: bind() failure [ 994.805542][T11826] cdc_ncm 2-1:1.1: bind() failure [ 994.815660][T11826] usb 2-1: USB disconnect, device number 93 03:07:33 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:07:33 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:33 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) write$FUSE_OPEN(r3, &(0x7f0000000000)={0x20, 0x0, 0x5, {0x0, 0xf}}, 0x20) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r5}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x1}}, [0x8003, 0x102, 0xfffffffffffefffe, 0x400, 0x8, 0x5, 0x2f, 0x9, 0x1, 0x108000000, 0x8, 0x5, 0x5, 0x8, 0x5]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={r5, 0x6, 0x6, 0x400, 0x0, 0x7fffffff}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000002c0)={r6, 0x7, 0x9, 0x2e}, &(0x7f0000000300)=0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r7, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r8 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x400) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000200)={r9}) r10 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r12 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r10}, {r11}, {r12}], 0x3, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r12, 0x4018ae50, &(0x7f0000000240)={0x4, 0x100}) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:34 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b0001760000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000200)=""/4096, &(0x7f0000000000)=0x1000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 995.064773][T22410] cdc_ncm 1-1:1.0: bind() failure [ 995.076535][T22410] cdc_ncm 1-1:1.1: bind() failure [ 995.185764][T22410] usb 1-1: USB disconnect, device number 39 [ 995.286559][T12200] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 995.413498][ T5] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 995.543827][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 995.663052][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 995.673770][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 995.682085][T12200] usb 4-1: config 0 has no interface number 0 [ 995.688567][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 995.697797][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.708407][T12200] usb 4-1: config 0 descriptor?? [ 995.765141][T22410] usb 1-1: new high-speed USB device number 40 using dummy_hcd 03:07:34 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xbb}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2040080}, 0x4008800) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r5, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x40c842, 0x0) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x200000000000004) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x3ff, @remote, 0x101}, 0x1c) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000140)={0x3, 0x4, 0x6}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x2a}], 0x1) [ 995.888939][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.900122][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 995.910130][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 03:07:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x400, @remote}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 996.053109][T22410] usb 1-1: Using ep0 maxpacket: 8 [ 996.115796][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 996.125244][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.133497][ T5] usb 2-1: Product: syz [ 996.137893][ T5] usb 2-1: Manufacturer: syz [ 996.142638][ T5] usb 2-1: SerialNumber: syz 03:07:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) r7 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x0, 0x464480) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000003c0)={0x2, &(0x7f0000000380)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r7, 0x40086424, &(0x7f0000000400)={r8, 0x2}) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000069c7bb830c4e757bb137d53194b6f6aafba63df8fb20a96853c6413400c015b4f130bfe1db29b0c732dc53cb2d9c9531603541c1b1e36b50e9c99ba680c7cd7c1729fcb2145ff541bb856b223453e1d782d9e0bf9cf032b02b5b", @ANYRES32=0x0], &(0x7f000095dffc)=0x2) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r12}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={r12, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x1}}, [0x8003, 0x102, 0xfffffffffffefffe, 0x400, 0x8, 0x5, 0x2f, 0x9, 0x1, 0x108000000, 0x8, 0x5, 0x5, 0x8, 0x5]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r12}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={r10, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x1}}, [0x8003, 0x102, 0xfffffffffffefffe, 0x400, 0x8, 0x5, 0x2f, 0x9, 0x1, 0x108000000, 0x8, 0x5, 0x5, 0x8, 0x5]}, &(0x7f0000000100)=0x100) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000200)={r10, @in6={{0xa, 0x4e20, 0x800, @mcast2, 0x2}}, 0x5, 0x2}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={r13, 0x7f}, 0x8) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r15 = inotify_init1(0x0) fcntl$setown(r15, 0x8, 0xffffffffffffffff) fcntl$getownex(r15, 0x10, &(0x7f0000000140)={0x0, 0x0}) pidfd_open(r16, 0x0) r17 = syz_open_procfs(r16, &(0x7f0000000000)='net/anycast6\x00') ioctl$PPPIOCCONNECT(r17, 0x4004743a, &(0x7f00000000c0)=0x3) ioctl(r14, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="9ab1915f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r3}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x1}}, [0x8003, 0x102, 0xfffffffffffefffe, 0x400, 0x8, 0x5, 0x2f, 0x9, 0x1, 0x108000000, 0x8, 0x5, 0x5, 0x8, 0x5]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000600)={r3, @in={{0x2, 0x4e21, @broadcast}}, 0x5, 0x3, 0xdb3, 0x7fffffff, 0x2}, 0x98) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r6, &(0x7f00000005c0)={&(0x7f0000000340)={0xa, 0x4e23, 0xffffffe1, @dev={0xfe, 0x80, [], 0x20}, 0xe14}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000380)="9a8adb7e5abb82e808ccffe45c8d5efc3514995953c2efc7780c474942f623b54dce26eadb4c81c8e9b3e376ddc048b6ae353acb2dfbada17b207b36de6a4e7c61a6369a1b7d2794331730b11404be8ff7be11f5cc08ccd4b98c751b423007f73fa69d17c9e0655778c45718ef427a6cdc223001bd2ac247d299be8038e4c408d1b7c5826b155249ffa66ba6ed00cc7eeca34ece19a61c289f00ce4e3b16aebc201bfee81c31fd45aede", 0xaa}, {&(0x7f0000000440)="e67b625cc5af9931173054049f3450d88277f551fde8cd8933364516e196d26884ac15951c2099464a8a50ac9738ad627f1d8b3e8d02fe34cb516591a2190eb9ae5c0e4bd0", 0x45}], 0x2, &(0x7f0000000500)=[@hopopts_2292={{0x80, 0x29, 0x36, {0x21, 0xd, [], [@jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x81}, @calipso={0x7, 0x28, {0x101, 0x8, 0x6, 0x5, [0x0, 0x1, 0x6, 0x8]}}, @calipso={0x7, 0x30, {0x7fff, 0xa, 0x7f, 0x2, [0x5, 0x80000001, 0x8, 0x6, 0x7]}}]}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}], 0x98}, 0x4000000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x1, 0x221, 0xffffffff, {r4, r5/1000+30000}, {0x77359400}, {0x4, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1}, 0x1b, 0x1, 0x0, 0x0, "657b53cb45255a67a343d33567d377814817a6d93eb5d261b52fdfc8b28614173135751397d913795993540a777a10534254360c8d4d626782ed3cc27839a1bd"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0xa032a2b4b25b4d50) r7 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x89, 0x2a002) ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000300)={0x58cbaf65, 0x0, 0x1, "be2e303079798d55a254ae9c17b0ea2199997d8365cb8ce23ec132edf8e14132", 0x32314752}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000280)=0xffff) [ 996.273356][T22410] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.284761][T22410] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 996.294740][T22410] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 996.405611][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 996.531233][T22410] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 996.540566][T22410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.549388][T22410] usb 1-1: Product: syz [ 996.553737][T22410] usb 1-1: Manufacturer: syz [ 996.558544][T22410] usb 1-1: SerialNumber: syz [ 997.013967][ T5] cdc_ncm 2-1:1.0: bind() failure [ 997.024176][ T5] cdc_ncm 2-1:1.1: bind() failure [ 997.063955][ T5] usb 2-1: USB disconnect, device number 94 [ 997.403592][T22410] cdc_ncm 1-1:1.0: bind() failure [ 997.413881][T22410] cdc_ncm 1-1:1.1: bind() failure [ 997.423926][T22410] usb 1-1: USB disconnect, device number 40 [ 997.963273][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 998.173539][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 998.185522][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 [ 998.198226][T12200] usb 4-1: USB disconnect, device number 101 [ 998.263513][ C1] net_ratelimit: 22 callbacks suppressed [ 998.263578][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 998.276589][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 998.282742][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 998.288915][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:37 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:07:37 executing program 4: r0 = socket$inet6(0xa, 0x4, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = inotify_init1(0xa7b73480bb73e719) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) pidfd_open(r5, 0x0) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000300)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r6 = syz_open_procfs(r5, &(0x7f0000000000)='stat\x00') getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000100)=0xd6, &(0x7f0000000140)=0x4) r7 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) fchdir(r2) ppoll(&(0x7f0000000a80)=[{r7}, {r8}, {r9}], 0x3, 0x0, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, &(0x7f00000002c0)=0x10f4, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x200000000000004) tkill(r5, 0xb) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x1f7}], 0x1) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x109000, 0x0) getsockopt$bt_BT_VOICE(r11, 0x112, 0xb, &(0x7f0000000240)=0x9c, &(0x7f0000000280)=0x2) 03:07:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000000)={0xf7d3, 0x3, 0x3453dfb4}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:37 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf67"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:37 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b0001760000"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000000c0)) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) fanotify_mark(r7, 0x10, 0x40000001, r4, &(0x7f0000000200)='./file0\x00') write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x2, 0x186, 0x85d}}, 0x28) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 998.903524][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 998.909881][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:38 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:38 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x200000000000004) 03:07:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x10) ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r5, 0x1, &(0x7f0000000840)="b5050090ed104d4901ffd1ccb60bcfe87b007100007942c12a3e3b29b9af6a9d8ba4e21c4ecdb910c0202cdaab3b794637a88320a55fae0047a7cb441bb35bbbd2e41023055596e3d56c2077ae2b877e131c4e09c7a02416cce5e41d5847f7") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x99b43c044d3b0306, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000800)={0x0, 0x7f, 0x2828, 0x1}) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40040, 0x0) sendmsg$inet(r7, &(0x7f0000000640)={&(0x7f0000000200)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000240)="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", 0xfc}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000000680)="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", 0x67}, {&(0x7f00000003c0)="4c92367d49a358ab4ffa8b19b3a6666d5fb3a29612d54d8326e1c3e05d652d0451fbe2446ddc343840e94e18c1c67f38d60e734e180953ab", 0x38}, {&(0x7f0000000400)="317d36f3740e610125835a9d6ac1a6187f8de6255d07264c13375438690bf1b6736bf4ebe509fd6276ef8570865cbd83668af2e8534d06040ffd261dda7646138457804e21caf0a20273642f65c45257fc050897b8711f4715ffc104123662c5c7a846c204875e886fabfc9e5aeaecee8fec28d6a8310497d4b44040957dce", 0x7f}, {&(0x7f0000000480)="4255f6820da4ac2723e96bfcd31551a53bdcfed29b4fe27b07f70bde8b360c62c0322ba389babcf13cf928a44d172b75535cca748d9bdf", 0xff31}, {&(0x7f00000004c0)="b0b9972e82e61c0f17f2a117368e392ccf9f8f9215ec6e6a325e4dcd721b5f5587f6b54a2c9efa8e6dbf2f871e1abeb80e15b60cb0aadbbe4a89aa0666f44d5f572e6997fa6a8693e44da2791ad1e30c771cb5c71fdf81d1a0e753f1234a19e8f2dac4d0c49df274fce9fa1bd08ab8569a8b94bb5d2d9661e6a54086859ed691a8712c2142271e6994c1acbef9f5586a0b0c2a793fa34b21cd80ef11bdb76345cd3d96db61b09d0de1e7b8a638027780cb9a8b852841910385df8b5effb3ed5b3e91ba4effc726ba1ed2f2d6cea14246c3fdc2", 0xd3}], 0x7}, 0x10040) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 999.023457][T22410] usb 4-1: new high-speed USB device number 102 using dummy_hcd 03:07:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 999.213479][T11826] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 999.235267][T12200] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 999.263247][T22410] usb 4-1: Using ep0 maxpacket: 32 03:07:38 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xffff, 0x8}) r4 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) dup(r6) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14) ioctl(r1, 0x1000008912, &(0x7f0000000200)="ccf4fc20360c298cda7fabb9038e61deeb8827967b07fa28caf12161e234532ba817f2a6774223b06e39068a3577a629c77f318b244af6886dfeb29fbd1b06f83d044a62eb5a629112b62b1524e29f9755b114f83ce32be0b92c8625ff8f40c60495ff6c7dd09f95f6be75ca48dda4a576f8e213b357375a83c0d54873f10288beae122c5c80d0a9eabc9ded7c470b0a0ce9073a7111559485b1771defc80fe49074b184150c2996397b8f4217937a394e44dc614a27f100000000000000") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) r8 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r8}, {r9}, {r10}], 0x3, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r10, 0xc0505510, &(0x7f0000000380)={0x3, 0x3, 0x4, 0x3f, &(0x7f00000002c0)=[{}, {}, {}]}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) lseek(r7, 0x0, 0x0) [ 999.383744][T22410] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 999.392183][T22410] usb 4-1: config 0 has no interface number 0 [ 999.398648][T22410] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 999.407949][T22410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.435977][T22410] usb 4-1: config 0 descriptor?? [ 999.464040][T11826] usb 2-1: Using ep0 maxpacket: 8 [ 999.503188][T12200] usb 1-1: Using ep0 maxpacket: 8 [ 999.543749][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 999.550201][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 999.557094][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 999.563546][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 999.694024][T11826] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.705717][T11826] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 999.715747][T11826] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 999.733682][T12200] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.745543][T12200] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 999.755490][T12200] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 999.883626][T11826] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 999.893109][T11826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.901354][T11826] usb 2-1: Product: syz [ 999.905769][T11826] usb 2-1: Manufacturer: syz [ 999.910488][T11826] usb 2-1: SerialNumber: syz [ 999.953918][T12200] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 999.963437][T12200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.971487][T12200] usb 1-1: Product: syz [ 999.975805][T12200] usb 1-1: Manufacturer: syz [ 999.980514][T12200] usb 1-1: SerialNumber: syz [ 1000.143392][T22410] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1000.714005][T11826] cdc_ncm 2-1:1.0: bind() failure [ 1000.724365][T11826] cdc_ncm 2-1:1.1: bind() failure [ 1000.734821][T11826] usb 2-1: USB disconnect, device number 95 [ 1000.813551][T12200] cdc_ncm 1-1:1.0: bind() failure [ 1000.824018][T12200] cdc_ncm 1-1:1.1: bind() failure [ 1000.834407][T12200] usb 1-1: USB disconnect, device number 41 [ 1001.693347][T22410] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 1001.903364][T22410] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1001.915906][T22410] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1001.927568][T22410] usb 4-1: USB disconnect, device number 102 03:07:41 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) pipe2$9p(&(0x7f00000001c0), 0x84800) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e23, 0x1d, @remote, 0x24ea}, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x2, 0x0}, 0x6}, 0x8, [0x3f, 0x874, 0x1, 0x92b, 0xffffeff7, 0x80000000, 0x6, 0x401]}, 0x5c) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r5}], 0x3, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x1000000, @ipv4={[], [], @empty}, 0x7e1a4671}, 0x1c) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0xcb, &(0x7f0000000100)=0x4, 0x4) r7 = socket$netlink(0x10, 0x3, 0x200000000000004) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x3, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r8}, {r9}, {r10}], 0x3, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000000)={r9, 0x0, 0x5, 0xe9, 0x3ff}) ioctl(r1, 0x8, &(0x7f00000003c0)="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") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'ip6tnl0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) arch_prctl$ARCH_GET_CPUID(0x1011) 03:07:41 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:07:41 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf67"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:41 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, &(0x7f0000000380)=""/251) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 03:07:41 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:41 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)={r7}) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x19, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:07:41 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x38, 0x0) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r0}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x200000000000004) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000000)) 03:07:41 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) pipe2$9p(&(0x7f00000001c0), 0x84800) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e23, 0x1d, @remote, 0x24ea}, {0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x2, 0x0}, 0x6}, 0x8, [0x3f, 0x874, 0x1, 0x92b, 0xffffeff7, 0x80000000, 0x6, 0x401]}, 0x5c) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r5}], 0x3, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCARDURB(r5, 0x550b, &(0x7f0000000140)) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x1000000, @ipv4={[], [], @empty}, 0x7e1a4671}, 0x1c) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0xcb, &(0x7f0000000100)=0x4, 0x4) r7 = socket$netlink(0x10, 0x3, 0x200000000000004) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1002.783700][T12200] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1002.953237][T22410] usb 2-1: new high-speed USB device number 96 using dummy_hcd 03:07:42 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000040), 0x4) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x244900) ppoll(&(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r7}, {r8}, {r9}], 0x3, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000240)={0x7f, 0x4dcd, 0x8, 0x0, 0x0, [{r1, 0x0, 0x40}, {r0, 0x0, 0x3}, {r0, 0x0, 0x6}, {r1, 0x0, 0x4}, {0xffffffffffffffff, 0x0, 0x3}, {r3, 0x0, 0xff}, {r6, 0x0, 0x80000000}, {r7, 0x0, 0x3}]}) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000200)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffffffffffd}, 0x1c) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 1003.053292][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 1003.183570][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1003.192139][T12200] usb 4-1: config 0 has no interface number 0 [ 1003.193524][T22410] usb 2-1: Using ep0 maxpacket: 8 [ 1003.198716][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1003.212620][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.225149][T12200] usb 4-1: config 0 descriptor?? 03:07:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dhid\x00', 0x802, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000000)=0x30, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa982}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000200, 0x0, 0x4], 0x0, 0x206}) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000001c0)={{0x0, @local, 0x0, 0x0, 'none\x00'}, {@local, 0x4e21}}, 0x44) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r6}, {r7}, {r8}], 0x3, 0x0, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r8, 0x80404804, &(0x7f0000000040)) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1003.404395][T22410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.415803][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1003.425836][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 03:07:42 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="f60000008e32f720f00a57d2874e9902000109021200010000000009040f0000ffa52c000effffa13e0b81865a5dc3"], 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000000)=r6) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="000011000000851049e21f09001367f2e157ed8c3a09"], 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1003.615325][T22410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1003.624875][T22410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.633357][T22410] usb 2-1: Product: syz [ 1003.637644][T22410] usb 2-1: Manufacturer: syz [ 1003.642357][T22410] usb 2-1: SerialNumber: syz 03:07:42 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000), 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1003.703637][ C1] net_ratelimit: 20 callbacks suppressed [ 1003.703661][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.703675][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.704155][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1003.709819][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1003.716140][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1003.739051][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1003.953631][T11826] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1003.953933][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea 03:07:43 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r0}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1004.294260][T11826] usb 1-1: device descriptor read/64, error 18 [ 1004.503624][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.509937][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1004.516615][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1004.522957][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1004.603591][T22410] cdc_ncm 2-1:1.0: bind() failure [ 1004.617751][T22410] cdc_ncm 2-1:1.1: bind() failure [ 1004.678302][T22410] usb 2-1: USB disconnect, device number 96 [ 1004.703422][T11826] usb 1-1: device descriptor read/64, error 18 [ 1004.973513][T11826] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1005.243142][T11826] usb 1-1: device descriptor read/64, error 18 [ 1005.500644][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 1005.633243][T11826] usb 1-1: device descriptor read/64, error 18 [ 1005.704843][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1005.716744][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1005.735942][T12200] usb 4-1: USB disconnect, device number 103 [ 1005.753491][T11826] usb usb1-port1: attempt power cycle 03:07:45 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x1, "a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:07:45 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902640002010000000900000000020d0000052406000105240000000d240f0100000000000000000006241a00000004241300042413000905810300000019000904010000020d0000090405820200000000000905030200000000000000000000000000cadf5338a8bf"], 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 03:07:45 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf67"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:45 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) r5 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200006) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x10240, 0x0) r7 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000240)={0x20000008}) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4000, 0x11, r5, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r8}, {r9}, {r10}], 0x3, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x4}) ioctl$TIOCLINUX7(r6, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) r11 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r11) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r11) 03:07:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:45 executing program 4: r0 = socket$inet6(0xa, 0x7, 0x8010000000000084) socket$inet6(0xa, 0x80c, 0x9) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x16) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1006.473311][T11826] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1006.523408][T22410] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1006.573222][T12200] usb 4-1: new high-speed USB device number 104 using dummy_hcd 03:07:45 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x8000, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:45 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1006.775446][ T5] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1006.793628][T11826] usb 1-1: device descriptor read/64, error 18 [ 1006.800058][T22410] usb 3-1: Using ep0 maxpacket: 32 [ 1006.815357][T12200] usb 4-1: Using ep0 maxpacket: 32 03:07:45 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) socket$bt_hidp(0x1f, 0x3, 0x6) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1006.933714][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1006.942163][T12200] usb 4-1: config 0 has no interface number 0 [ 1006.948694][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1006.958024][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.974392][T12200] usb 4-1: config 0 descriptor?? [ 1006.976124][T22410] usb 3-1: config 1 has an invalid interface number: 5 but max is 1 [ 1006.987771][T22410] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.998654][T22410] usb 3-1: config 1 has no interface number 0 [ 1007.004962][T22410] usb 3-1: config 1 interface 5 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1007.018216][T22410] usb 3-1: config 1 interface 5 has no altsetting 0 [ 1007.030443][ T5] usb 2-1: Using ep0 maxpacket: 8 03:07:46 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1007.194938][T22410] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1007.204270][T22410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.212343][T22410] usb 3-1: Product: syz [ 1007.216847][T22410] usb 3-1: Manufacturer: syz [ 1007.221506][T22410] usb 3-1: SerialNumber: syz [ 1007.234027][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.245698][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1007.256034][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1007.268305][T22410] cdc_ncm 3-1:1.1: bind() failure [ 1007.443266][T11826] usb 1-1: device descriptor read/64, error -71 [ 1007.463759][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1007.473144][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.481323][ T5] usb 2-1: Product: syz [ 1007.485701][ T5] usb 2-1: Manufacturer: syz [ 1007.486326][T22410] usb 3-1: USB disconnect, device number 2 [ 1007.490441][ T5] usb 2-1: SerialNumber: syz [ 1007.653855][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1007.713276][T11826] usb 1-1: new high-speed USB device number 45 using dummy_hcd 03:07:47 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f0000000a80)=[{r5}, {r3}, {r1, 0x188}], 0x3, 0x0, 0x0, 0xffffffffffffffed) r6 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0x101002) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000140)={0x9, 0x2a, 0x1, 0x16, 0x1, 0x0, 0x6, 0x8b}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000100)=r6) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r8 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r12 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r10}, {r11}, {r12}], 0x3, 0x0, 0x0, 0x0) write$cgroup_subtree(r12, &(0x7f0000000240)=ANY=[@ANYBLOB="2d7c8c607f8f2abeb607d4adf04ba1d4f36ed8ccf74c68a99deb0f40cd668000000000000000028c6c8d1e967f33756f30ef9485837211b218967222396cc6bcf1df2d1055118704d81823417f0dbb914c5702efc38560eab255e3d439fa1f7336c4109e27f3bd3efb6183dec4c36515f4e6d2a8d4235c88f5a22c9132d8581f7e8f3d45437e0186b7624b05800de4f2060177d50bfeca035e3ed000f17e19ac937d7ea71c4fe9f4ed922782016eb25607c04434bd16f7c75b1f007e1edcc0b944b94fb88d435091a32794c6c7da76cf20b0a78d651b4a5b697a8f19cf171dbf6ac365e24b017f5b3f6624a6c52b62040bdb"], 0x24) r13 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r8, 0x8}, {r9}, {r13}], 0x3, 0x0, 0x0, 0x0) fdatasync(r9) [ 1007.973120][T11826] usb 1-1: Using ep0 maxpacket: 32 [ 1008.115494][T11826] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1008.123912][T11826] usb 1-1: config 0 has no interface number 0 [ 1008.130144][T11826] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1008.139661][T11826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.154489][T11826] usb 1-1: config 0 descriptor?? 03:07:47 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x4440, @empty, 0xcc6}, 0x1c) [ 1008.303693][T22410] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1008.371346][ T5] cdc_ncm 2-1:1.0: bind() failure [ 1008.384341][ T5] cdc_ncm 2-1:1.1: bind() failure [ 1008.412720][ T5] usb 2-1: USB disconnect, device number 97 [ 1008.543190][T22410] usb 3-1: Using ep0 maxpacket: 32 [ 1008.665168][T22410] usb 3-1: config 1 has an invalid interface number: 5 but max is 1 [ 1008.673605][T22410] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.684112][T22410] usb 3-1: config 1 has no interface number 0 [ 1008.690402][T22410] usb 3-1: config 1 interface 5 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1008.703829][T22410] usb 3-1: config 1 interface 5 has no altsetting 0 [ 1008.823583][T11826] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1008.873379][T22410] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1008.882694][T22410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.891179][T22410] usb 3-1: Product: syz [ 1008.897551][T22410] usb 3-1: Manufacturer: syz [ 1008.902411][T22410] usb 3-1: SerialNumber: syz [ 1008.945181][T22410] cdc_ncm 3-1:1.1: bind() failure [ 1009.164528][T22410] usb 3-1: USB disconnect, device number 3 [ 1009.213405][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 1009.303519][ C1] net_ratelimit: 24 callbacks suppressed [ 1009.303543][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.315793][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1009.423382][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1009.435855][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1009.449360][T12200] usb 4-1: USB disconnect, device number 104 03:07:48 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x1, "a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:07:48 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) lsetxattr$security_capability(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v1={0x1000000, [{0x3, 0x58bad272}]}, 0xc, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000003c0)={0x8, 0x5, 0x3ff, 0x2, 'syz1\x00', 0x81}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000002c0)={'veth1_to_team\x00', 0x2}) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0xffffffffffffff81, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) r5 = dup2(r2, r1) ioctl$USBDEVFS_GET_SPEED(r5, 0x551f) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000240)=0x8) write$P9_RLOCK(r5, &(0x7f0000000140)={0x8, 0x35, 0x2, 0x3}, 0x8) 03:07:48 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:48 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:48 executing program 2: r0 = syz_usb_connect(0x3, 0x2, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESDEC], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0xac, &(0x7f00000003c0)=ANY=[@ANYBLOB="0004fff20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) openat$capi20(0xffffffffffffff9c, &(0x7f0000000300)='/dev/capi20\x00', 0x202200, 0x0) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000000)={0x8, 0xc684, 0x6, 0x4, 0x1, 0x2}) r4 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)="a490369e49584a778154fed271b6e21207b749b2c6de507f106a737a13f31fe8155ab293d99e584ffc74fe97f2cd625d64a985362f1da17139e6b0f9df95ce4b7acbd594fcccd69d24c2a003e137ebcce0734cf726ff9f760f043b21107884de40ccb44894c45813586b40e881f3ac3398c83083e61a10598a775c8b7c78d3076fd915aa6709a1dfbf3227557c7880f97c71d3cceebfee8653fa025e126157fdf6dac661e6a9781ee0886507deeacb9bed4f455bf1fe73deec0e7fe2f13f1c77b673d6b10cbaa99229d15cc1a13add4e10cf13f8a72353e9cfa9", 0xda, 0x0) keyctl$read(0xb, r4, &(0x7f0000000100)=""/128, 0x80) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x470, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x126) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="fcce5c1819981d2a"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r11, {}, {}, {0x3}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x3}}]}, 0x30}}, 0x0) ioctl$TUNSETIFINDEX(r7, 0x400454da, &(0x7f0000000340)=r11) [ 1009.943503][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.943623][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.949751][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1009.955647][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1009.968045][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1009.974343][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:07:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1010.163044][T23862] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1010.334062][T12200] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1010.423707][T11826] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 1010.463433][ T5] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1010.593295][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 1010.653816][T11826] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1010.666172][T11826] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1010.679866][T11826] usb 1-1: USB disconnect, device number 45 [ 1010.723202][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 1010.743512][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1010.743528][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1010.743918][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1010.751982][T12200] usb 4-1: config 0 has no interface number 0 [ 1010.770395][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1010.779651][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.791506][T12200] usb 4-1: config 0 descriptor?? [ 1010.943614][ T5] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.955494][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1010.966544][ T5] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 03:07:50 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:07:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x90000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x1f8000, 0x8, 0xc7800000, 0xf6, 0x8}) fallocate(r1, 0x41, 0x8, 0x6) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000100)={0x5, "bd130c8203c6ffc48030e184fdbb5395701fcca837e9a9e81fc9f3e43fb98c8a", 0x3, 0x400, 0x40, 0x3, 0x4, 0x3, 0x69, 0x1}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) modify_ldt$read_default(0x2, &(0x7f00000001c0)=""/38, 0x26) [ 1011.133875][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1011.143594][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.151758][ T5] usb 2-1: Product: syz [ 1011.156211][ T5] usb 2-1: Manufacturer: syz [ 1011.160972][ T5] usb 2-1: SerialNumber: syz 03:07:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) [ 1011.513855][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1011.526666][T21718] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1011.783492][T21718] usb 1-1: Using ep0 maxpacket: 32 [ 1011.905469][T21718] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1011.913997][T21718] usb 1-1: config 0 has no interface number 0 [ 1011.920329][T21718] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1011.929729][T21718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.976169][T21718] usb 1-1: config 0 descriptor?? [ 1012.003500][ T5] cdc_ncm 2-1:1.0: bind() failure [ 1012.015948][ T5] cdc_ncm 2-1:1.1: bind() failure [ 1012.125550][ T5] usb 2-1: USB disconnect, device number 98 [ 1012.663547][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1013.083510][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 1013.315336][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1013.327303][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1013.365378][T23900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1013.376072][T12200] usb 4-1: USB disconnect, device number 105 03:07:52 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x1, "a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:07:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 03:07:52 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:52 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) syz_usb_connect(0x0, 0x33, &(0x7f0000000040)=ANY=[@ANYBLOB="120100010001000000000000000904c2fe00a044e200"], 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000080)={0x6fd5e1ece4a7068c, {0x7f, 0x733, 0x2, 0xa670}}) 03:07:52 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 03:07:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1014.223226][T12200] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1014.243515][T11826] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1014.263776][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 1014.393165][T22410] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1014.473091][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 1014.493318][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1014.505180][T21718] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1014.513176][T11826] usb 3-1: device descriptor read/64, error 18 [ 1014.520179][T21718] usb 1-1: USB disconnect, device number 46 [ 1014.603401][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1014.611807][T12200] usb 4-1: config 0 has no interface number 0 [ 1014.618147][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1014.627324][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.637416][T12200] usb 4-1: config 0 descriptor?? [ 1014.643377][T22410] usb 2-1: Using ep0 maxpacket: 8 [ 1014.843524][T22410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.854962][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1014.865062][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1014.903364][ C1] net_ratelimit: 22 callbacks suppressed [ 1014.903378][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.916077][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.922270][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1014.928581][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1014.934858][T11826] usb 3-1: device descriptor read/64, error 18 03:07:54 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:07:54 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x180000}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x2, 0x8002) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={r4, 0x80000, r5}) r6 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1015.078903][T22410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1015.088375][T22410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.096707][T22410] usb 2-1: Product: syz [ 1015.101002][T22410] usb 2-1: Manufacturer: syz [ 1015.105910][T22410] usb 2-1: SerialNumber: syz 03:07:54 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1015.177727][T23935] ptrace attach of "/root/syz-executor.5"[23934] was attempted by "/root/syz-executor.5"[23935] [ 1015.263167][T11826] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1015.343653][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1015.356319][T21718] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1015.543300][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1015.549524][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1015.555841][T11826] usb 3-1: device descriptor read/64, error 18 [ 1015.623215][T21718] usb 1-1: Using ep0 maxpacket: 32 [ 1015.743514][T21718] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1015.752003][T21718] usb 1-1: config 0 has no interface number 0 [ 1015.758311][T21718] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1015.767565][T21718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.777425][T21718] usb 1-1: config 0 descriptor?? [ 1015.913802][T22410] cdc_ncm 2-1:1.0: bind() failure [ 1015.925900][T22410] cdc_ncm 2-1:1.1: bind() failure [ 1015.937568][T22410] usb 2-1: USB disconnect, device number 99 [ 1015.953568][T11826] usb 3-1: device descriptor read/64, error 18 [ 1016.083590][T11826] usb usb3-port1: attempt power cycle [ 1016.183538][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1016.183553][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1016.183987][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1016.189769][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1016.473367][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1016.803101][T11826] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1016.913275][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 1017.073320][T11826] usb 3-1: device descriptor read/64, error 18 [ 1017.133700][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1017.145428][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1017.160316][T12200] usb 4-1: USB disconnect, device number 106 03:07:56 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0xffffffffffffffa4}], 0x1) 03:07:56 executing program 1: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c1207849bd070") r1 = socket(0x1, 0x2, 0x0) write(r1, &(0x7f00000000c0)="1f0000005e000d0000000000fc07ff1b070404000d00000029030100010039", 0x1f) 03:07:56 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1017.725382][T23963] ptrace attach of "/root/syz-executor.5"[23962] was attempted by "/root/syz-executor.5"[23963] 03:07:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000001c0)={0x69, 0x2, 0xff, 0x55, 0x20, 0x20, 0x9, 0x4, 0x40}, 0xb) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r8}], 0x3, 0x0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000000)=0x87f) r9 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r9}], 0x3, 0x0, 0x0, 0x0) bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e21, 0x3, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8f5acd7092263027) r10 = msgget(0x3, 0xf9ee3eab3d059f2c) msgctl$IPC_INFO(r10, 0x3, &(0x7f0000000100)=""/80) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:56 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x2) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='children\x00') r5 = gettid() getpgid(r5) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000040)=0x5, 0x4) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1018.034239][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 1018.153221][T22410] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1018.183183][ T3379] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1018.254081][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1018.267900][T21718] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1018.282313][T21718] usb 1-1: USB disconnect, device number 47 [ 1018.393261][T22410] usb 2-1: Using ep0 maxpacket: 8 [ 1018.423084][ T3379] usb 4-1: Using ep0 maxpacket: 32 [ 1018.543315][ T3379] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1018.551610][ T3379] usb 4-1: config 0 has no interface number 0 [ 1018.558144][ T3379] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1018.567337][ T3379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.578369][ T3379] usb 4-1: config 0 descriptor?? [ 1018.613532][T22410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.625525][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1018.635724][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 03:07:57 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:07:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f00000001c0)=@random={'security.', 'self\'!mime_type/bdeveth1\x00'}) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000010a55278610000adda799b056ab65e8b0c4dde82321ef8824aeb80ea3f1614d9660e2f9e6a8291077bdc201b50bdbb56930b4f5c9d45fc8b5bb120e78e8c37e00b7cf1d1532d2b113e2e72f8807b2f43fc55919bd3b6f574d64d3cfc8e3819322a92d6a947c4cbcb26fd647134baa13c947e77bc377305ae", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4], 0x1c}, 0x0) quotactl(0x6, &(0x7f0000000040)='./file0\x00', r3, &(0x7f00000000c0)="18ae6b73b4e74e9435ae574fd0f2997e8332e80a6535f52709732957ac0c8a58611593ad5a133a84aaff6811edce13f19363a75b81e763d8c531f2d28badbe85b54aa88c976d0a21f9097f789a726ae6fb18cb94b01e9da2e68cfc4ecd1738c9714feb4af8d177cdd5e964e3c487289cf29873aef970dd3adcb2d4f773535705b15a9c8331eb5c5a65c85b3704649242be") ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x43, 0x0, 0x37}) 03:07:57 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r3}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x1}}, [0x8003, 0x102, 0xfffffffffffefffe, 0x400, 0x8, 0x5, 0x2f, 0x9, 0x1, 0x108000000, 0x8, 0x5, 0x5, 0x8, 0x5]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r3, 0x8, 0x6}, &(0x7f0000000140)=0xc) r4 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:07:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1018.803593][T22410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1018.813168][T22410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.821336][T22410] usb 2-1: Product: syz [ 1018.825943][T22410] usb 2-1: Manufacturer: syz [ 1018.830822][T22410] usb 2-1: SerialNumber: syz 03:07:57 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:07:58 executing program 2: capset(&(0x7f0000000000)={0x24020019980330}, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') 03:07:58 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1019.125259][T21718] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1019.313646][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1019.413177][T21718] usb 1-1: Using ep0 maxpacket: 32 [ 1019.543199][T21718] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1019.551503][T21718] usb 1-1: config 0 has no interface number 0 [ 1019.558064][T21718] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1019.567255][T21718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.577421][T21718] usb 1-1: config 0 descriptor?? 03:07:58 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:07:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/udplite\x00') mknod(&(0x7f0000000000)='./bus\x00', 0x100c, 0x0) r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0)=0xb6dc, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000000080), r1, 0x0, 0x1000000007ff, 0x0) 03:07:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1019.734085][T22410] cdc_ncm 2-1:1.0: bind() failure [ 1019.746524][T22410] cdc_ncm 2-1:1.1: bind() failure [ 1019.809738][T22410] usb 2-1: USB disconnect, device number 100 03:07:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1020.215073][T22410] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1020.273416][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1020.343373][ C1] net_ratelimit: 20 callbacks suppressed [ 1020.343398][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1020.343488][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1020.349475][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1020.355277][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1020.367286][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1020.378670][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1020.494951][T22410] usb 2-1: Using ep0 maxpacket: 8 [ 1020.613273][T22410] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.624608][T22410] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.636332][T22410] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1020.645635][T22410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.695097][T22410] hub 2-1:118.0: ignoring external hub [ 1020.716776][T22410] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1021.103578][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1021.115834][ T3379] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1021.143399][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1021.149974][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1021.156412][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1021.162583][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1021.205776][T22410] usb 2-1: USB disconnect, device number 101 [ 1021.216482][ T3379] usb 4-1: USB disconnect, device number 107 [ 1021.853115][T12200] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1021.863378][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 1021.903409][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1021.915366][T21718] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1021.953356][T21718] usb 1-1: USB disconnect, device number 48 [ 1022.123065][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 1022.243259][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1022.251581][T12200] usb 4-1: config 0 has no interface number 0 [ 1022.257919][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1022.267261][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.279394][T12200] usb 4-1: config 0 descriptor?? 03:08:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="000000000000000024cf09ddfd80c2001200140001006272696467655f736c097665000000000c0005000800"], 0x44}}, 0x0) 03:08:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:08:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, r6}) r8 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r8, 0xc0086420, &(0x7f0000002840)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r8, 0x40086424, &(0x7f0000002880)={r9, 0x3}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r7, 0x4010641c, &(0x7f0000000100)={r9, &(0x7f0000000240)=""/4096}) r10 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:08:01 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb9, 0x1e, 0x65, 0x20, 0x763, 0x2030, 0xc404, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xff, 0xbd, 0xbb}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000051c0)={0xac, 0x0, 0x0, 0x0, &(0x7f0000004d00)={0x20, 0x81, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb9, 0x1e, 0x65, 0x20, 0x763, 0x2030, 0xc404, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xff, 0xbd, 0xbb}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000051c0)={0xac, 0x0, 0x0, 0x0, &(0x7f0000004d00)={0x20, 0x81, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x2, 0x86, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0x9, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x85, 0x3, 0x2, 0x6, 0x0, 0x1f, {{0xb, 0x24, 0x6, 0x0, 0x0, "4869c324b653"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6b, 0x8, 0x8001, 0x90}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0xda}, @mdlm={0x15, 0x24, 0x12, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x7f, 0x0, 0x80, 0x28}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x1e1, 0x3, 0x7f, 0x38}}], {{0x9, 0x5, 0x82, 0x2, 0x176, 0x6, 0x9, 0xa4}}, {{0x9, 0x5, 0x3, 0x2, 0x230, 0x2, 0x80, 0x3}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x1, 0x40, 0x5, 0x40, 0x8}, 0x3b, &(0x7f0000000040)={0x5, 0xf, 0x3b, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x25, 0x4, 0x6, 0xf47}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x6, 0x40, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "d360548fd8f072e532333611af130d53"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x9e, 0x8, 0x7, 0x6}, @ptm_cap={0x3}]}, 0x5, [{0x18, &(0x7f0000000180)=@string={0x18, 0x3, "4d802c5dc8b7084c40b79dd9c4844c25aed6b93750ee"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x40f}}, {0xbe, &(0x7f0000000200)=@string={0xbe, 0x3, "3823b93abdb410a6ee025ca8761617792b8bb0ecd773392fd75c2ced686f1f8bf31d5a5130741be2a375df032ee1e731fe9bf504cb4a3d33eeebe3d61879a93a1d5b5bff37858282fab258e515812222621e47d887347f4683ef39b0b1c92a5cdd13a8dd6d6c1abddaa1c82f365b4d8d563dd753a082692ae5464497bad8b3b47b8b434b4dc1a31f81d1300b07534e07f1bd3c3e1b552c345b7228ec061b068d7782572ad9d63aa444e9b79a4f66a7a944b6663568be2b9b6a13e7bb"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x421}}]}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb9, 0x1e, 0x65, 0x20, 0x763, 0x2030, 0xc404, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xff, 0xbd, 0xbb}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000051c0)={0xac, 0x0, 0x0, 0x0, &(0x7f0000004d00)={0x20, 0x81, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb9, 0x1e, 0x65, 0x20, 0x763, 0x2030, 0xc404, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xff, 0xbd, 0xbb}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000051c0)={0xac, 0x0, 0x0, 0x0, &(0x7f0000004d00)={0x20, 0x81, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:01 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) [ 1022.645075][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 03:08:01 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) [ 1022.733893][T24043] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1022.743794][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1022.802294][T12200] usb 4-1: USB disconnect, device number 108 03:08:01 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:08:01 executing program 2: r0 = semget(0x0, 0x4, 0xa) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05840000000000000109022400010000001009040000090300000009210000000122220009058103000000000032e9f8c2940c31938905be9104f64c71e4e6b54295221f1e9f2c770b35c5a72601735a07aafcc65b99bbdd8d7b211448b8f98fe7af324136f2d26afdf0f29f4e58265c1f8205cbab209a08e47205ad78f7bc79a9a0c53303633a2f61f61ff81e03a0"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0x0, "cf87f96f"}, @local=@item_4={0x3, 0x2, 0x0, "c4eb48fd"}, @local=@item_012={0x2, 0x2, 0x0, "8c93"}, @local=@item_4={0x3, 0x2, 0x0, "af9db9b5"}, @local, @global=@item_4={0x3, 0x1, 0x0, "d9c68a50"}, @local=@item_4={0x3, 0x2, 0x0, "18c1187b"}, @main=@item_4={0x3, 0x0, 0x0, "4ba4cd92"}]}}, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1023.026716][T22410] usb 2-1: new high-speed USB device number 102 using dummy_hcd 03:08:02 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1023.073185][T21718] usb 1-1: new high-speed USB device number 49 using dummy_hcd 03:08:02 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4f21, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000040)=""/89, 0x59, 0x3) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000240)=""/227, 0xe3}], 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1023.203161][T12200] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1023.275235][T22410] usb 2-1: Using ep0 maxpacket: 8 [ 1023.295410][ T3379] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1023.333074][T21718] usb 1-1: Using ep0 maxpacket: 32 03:08:02 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}, 0x1}, 0xd357ccd024557cb9) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x4000) write$smack_current(r1, &(0x7f0000000100)='@trusted\x00', 0x9) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x200000000000004) socket$packet(0x11, 0x3, 0x300) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1023.395981][T22410] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.406599][T22410] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.418102][T22410] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1023.427393][T22410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.455745][T21718] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1023.464208][T21718] usb 1-1: config 0 has no interface number 0 [ 1023.470401][T21718] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1023.474553][T22410] hub 2-1:118.0: ignoring external hub [ 1023.479663][T21718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.494702][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 1023.521877][T22410] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1023.531265][T21718] usb 1-1: config 0 descriptor?? [ 1023.553145][ T3379] usb 3-1: Using ep0 maxpacket: 16 [ 1023.613412][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1023.621821][T12200] usb 4-1: config 0 has no interface number 0 [ 1023.628485][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1023.637751][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.648884][T12200] usb 4-1: config 0 descriptor?? 03:08:02 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @bt={0x1c729c2b, 0xd4b, 0x1000, 0x9, 0x400, 0x1, 0x1e, 0x6}}) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x6f, 0x98500) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r5}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x1}}, [0x8003, 0x102, 0xfffffffffffefffe, 0x400, 0x8, 0x5, 0x2f, 0x9, 0x1, 0x108000000, 0x8, 0x5, 0x5, 0x8, 0x5]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0x2}, &(0x7f00000001c0)=0x8) r6 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1023.673576][ T3379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.685107][ T3379] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1023.698276][ T3379] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1023.698353][ T3379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.762816][ T3379] usb 3-1: config 0 descriptor?? [ 1023.979177][T22410] usb 2-1: USB disconnect, device number 102 [ 1024.223730][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1024.244325][ T3379] wacom 0003:056A:0084.000B: unknown main item tag 0x0 [ 1024.251642][ T3379] wacom 0003:056A:0084.000B: unknown main item tag 0x0 [ 1024.262872][ T3379] wacom 0003:056A:0084.000B: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.2-1/input0 [ 1024.364988][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1024.445216][ T5] usb 3-1: USB disconnect, device number 7 03:08:03 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:08:03 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='$\xe7\xc2S\x96\xb3\x00\x00\x00\x00\x01\x00', 0x8, 0x849e7595f762854d) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2, 0x3008}], 0x0, 0x0, 0x0, 0x0) write$P9_RMKNOD(r2, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x12a, 0x3, 0x4}}, 0x14) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e1f, 0x0, @loopback, 0x2}, 0x1c) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x52) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f00000001c0)=0x3) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x400}], 0x1) [ 1024.823293][ T3379] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1025.063434][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 1025.183686][ T3379] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.194301][ T3379] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.205763][ T3379] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1025.215031][ T3379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.224260][T22410] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1025.274816][ T3379] hub 2-1:118.0: ignoring external hub [ 1025.292659][ T3379] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1025.463271][T22410] usb 3-1: Using ep0 maxpacket: 16 03:08:04 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8006010}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x94, r5, 0x103, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x303b}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x42a06286}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4004090}, 0x400c000) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1025.761740][ T3379] usb 2-1: USB disconnect, device number 103 [ 1025.790805][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1025.801796][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1025.811930][T21718] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1025.831620][T21718] usb 1-1: USB disconnect, device number 49 [ 1025.857121][T22410] usb 3-1: device descriptor read/all, error -71 [ 1025.943603][ C1] net_ratelimit: 24 callbacks suppressed [ 1025.943626][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1025.955818][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1026.003326][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 1026.034938][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1026.047360][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1026.065961][T12200] usb 4-1: USB disconnect, device number 109 [ 1026.583532][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1026.583569][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1026.583951][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1026.589751][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1026.595998][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1026.613482][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1026.763239][T12200] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1027.003202][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 1027.123414][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1027.131723][T12200] usb 4-1: config 0 has no interface number 0 [ 1027.138147][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1027.147493][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.158113][T12200] usb 4-1: config 0 descriptor?? [ 1027.393479][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1027.399714][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:08:06 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000001d00)={0x0, 0x13, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) 03:08:06 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {}], 0x3, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xf000000, 0x11, 0xff, [], &(0x7f0000000100)={0x990a75, 0x0, [], @p_u16=&(0x7f0000000000)=0x9}}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1027.503696][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 03:08:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:08:06 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:08:06 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 03:08:06 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) [ 1027.561535][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1027.608228][T12200] usb 4-1: USB disconnect, device number 110 [ 1027.833335][T22410] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1027.873300][T21718] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1027.873357][ T3379] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1028.003204][T12200] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1028.073269][T22410] usb 3-1: Using ep0 maxpacket: 8 [ 1028.113597][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 1028.123221][T21718] usb 1-1: Using ep0 maxpacket: 32 [ 1028.194014][T22410] usb 3-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.204818][T22410] usb 3-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.216248][T22410] usb 3-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1028.225745][T22410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.243678][T21718] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1028.252358][T21718] usb 1-1: config 0 has no interface number 0 [ 1028.258797][T21718] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1028.268032][T21718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.271177][ T3379] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.278810][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 1028.286830][ T3379] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.286951][ T3379] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1028.308291][T21718] usb 1-1: config 0 descriptor?? [ 1028.312349][ T3379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.334667][T22410] hub 3-1:118.0: ignoring external hub [ 1028.352373][T22410] cdc_wdm 3-1:118.0: cdc-wdm0: USB WDM device [ 1028.406077][ T3379] hub 2-1:118.0: ignoring external hub [ 1028.435630][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1028.444452][T12200] usb 4-1: config 0 has no interface number 0 [ 1028.450703][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1028.460041][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.474580][ T3379] cdc_wdm 2-1:118.0: cdc-wdm1: USB WDM device [ 1028.533469][T12200] usb 4-1: config 0 descriptor?? 03:08:07 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x200000000000004) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) writev(r5, &(0x7f0000000040), 0x10000000000001a3) [ 1028.774027][ T5] usb 2-1: USB disconnect, device number 104 [ 1028.826524][ T5] usb 3-1: USB disconnect, device number 10 03:08:07 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @rand_addr="38de91c490836ff080876184a76d6b2b"}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x9, 0x2a, 0x1, r7}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1029.043500][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1029.223345][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea 03:08:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3804d000000040c4d5415a871b0f015c86fbf2f8ab451b452165d8d00463b12104d7d798b5683e13ec70f18b8c5316"], 0x0, 0xe}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x100000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e23}, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x2}, {{@in=@empty}, 0x0, @in=@multicast1, 0x0, 0x0, 0xc351c9e8ba10239f, 0x0, 0x0, 0x6}}, 0xe8) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000013000/0x3000)=nil, 0x3000}, 0x1}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0xd, &(0x7f0000000100), 0x8) r10 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r12 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r10}, {r11, 0x4000}, {r12}], 0x31b, 0x0, 0x0, 0x0) r13 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r14 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r15 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r13}, {r14}, {r15}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r15, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r16 = dup2(r1, r9) dup3(r16, r8, 0x0) 03:08:08 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:08:08 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x9, 0x0, 0x5, 0x2}, 0x10}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000040)=0x7fffffff) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}, {0x20, 'em0{systemi*-%#trusted'}, {0x20, 'vmnet0self'}, {0x20, 'wlan0'}, {0x20, '-#keyring#'}, {0x20, 'keyring)usernodev'}, {}], 0xa, "108ba0e88df0fd56827095b1ded2e3a70d409dbd8e4beb072f3cb96d07fe730eac70c1364b1c5ea5f0617f4e9091cb1f7feb7fdca0197ea845a4742a43b4887db5e1bb4c8c82bb7433dc735e3d6ce23bf2999cbe0caf017dcf9faf33767c7fe122dac4e1b4663193e893dbb455d7f5e2b1f427d8cf84e0137aa78ceb9bfeb8f72473181479dd5dda6495c71acfb6e7bbc3a805276d8559632e87fa8896ac1f66a8ba9dec9df36f7011575f5e907e3c658910ec513c5b6ea19e7449b09107e5cf5f0a79"}, 0x115) 03:08:08 executing program 2: set_mempolicy(0xc002, &(0x7f0000000140)=0x103, 0xfffffffffffffffe) r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge_slave_0\x00', 0x1de) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 1029.740044][T24161] IPVS: ftp: loaded support on port[0] = 21 [ 1029.752611][ T5] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1030.053184][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 1030.183378][ T5] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.193948][ T5] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.205257][ T5] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1030.214504][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.265300][ T5] hub 2-1:118.0: ignoring external hub [ 1030.282713][ T5] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1030.573347][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1030.584639][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1030.594626][T21718] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1030.617859][T21718] usb 1-1: USB disconnect, device number 50 [ 1031.013377][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1031.025506][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1031.038139][T12200] usb 4-1: USB disconnect, device number 111 [ 1031.543235][ C1] net_ratelimit: 22 callbacks suppressed [ 1031.543250][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1031.556114][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1031.562309][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1031.568676][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1031.753186][T12200] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1031.993160][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 1032.123364][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1032.131966][T12200] usb 4-1: config 0 has no interface number 0 [ 1032.138353][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1032.147671][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.157512][T12200] usb 4-1: config 0 descriptor?? [ 1032.183386][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1032.189538][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:08:11 executing program 3: r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0xfffffffffffffd0b, 0x3f}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:11 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 03:08:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000000)="83f340a294d673a52358bfd1a0fc938d96c903", 0x13, 0x84, &(0x7f0000000100)={0xa, 0x4e20, 0x20, @empty, 0x5}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:08:11 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa9, 0x8c, 0x78, 0x8, 0x2040, 0x4902, 0xff51, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x1, 0xf, 0xa0, 0x63, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002000)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="00002e000000e7dc40edac96b90f019567a1a760e44a198c1e5df704c775d33346ced2d92e2c7eddabe2eec9e80f119e763687ae8955fa6b62a4c8c3f50d6932ee2bd05c513f792993d398e4139eb0fabd20c554bd29a3721d1a703ffa18d9ae9f68d604bbaa1a8b5e05fa467131e224956a1b3aa1ceea598af28f91a55343be7d5575cd5371754c0269d1cc6c398d40729581010e0092f2364e941370f36145f6c1b5f8ebd1e5a25cd42b71112e0a682054a0456bee87aaf414d5ded3964fd8d5bc06c37ad592cf6ca0fe52fa6572e11f5b1ed057c2c9d60e3dba0a7d4642ba59524556efaad663e2ebc0466910dba090cc40"], 0x0, 0x0, 0x0, 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x400c0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r6}, {r7}, {r8}], 0x3, 0x0, 0x0, 0x0) ioctl$PPPIOCGUNIT(r8, 0x80047456, &(0x7f0000000280)) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r9}, {r10}], 0x3, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r12 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r13 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r11}, {r12}, {r13}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x4b9, @rand_addr="d1e2b74ab77547cb1d294a4ccb8ba9dd", 0x8}}, 0x9, 0xd4f, 0x7, 0x1b50, 0x10}, &(0x7f0000000040)=0x98) r14 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r15 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r16 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r14}, {r15}, {r16}], 0x3, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r13, 0x894b, &(0x7f0000000200)) r17 = dup3(0xffffffffffffffff, r16, 0x80000) fsync(r17) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x40010, r1, 0x0) 03:08:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1032.513672][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 03:08:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1032.572134][T12200] usb 4-1: USB disconnect, device number 112 03:08:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0xb83d, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1032.823648][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1032.829932][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1032.833580][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1032.841956][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1032.853766][T22410] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1032.874858][T21718] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1033.093394][T22410] usb 1-1: Using ep0 maxpacket: 32 [ 1033.113104][T21718] usb 3-1: Using ep0 maxpacket: 8 [ 1033.223424][T22410] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1033.231851][T22410] usb 1-1: config 0 has no interface number 0 [ 1033.233395][T21718] usb 3-1: config 0 has an invalid interface number: 26 but max is 0 [ 1033.238329][T22410] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1033.246292][T21718] usb 3-1: config 0 has no interface number 0 [ 1033.246394][T21718] usb 3-1: config 0 interface 26 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 1033.255472][T22410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.261623][T21718] usb 3-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=ff.51 [ 1033.279579][T21718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.294772][T22410] usb 1-1: config 0 descriptor?? [ 1033.363824][T21718] usb 3-1: config 0 descriptor?? [ 1033.633430][T21718] hdpvr 3-1:0.26: firmware version 0xdc dated @í¬–¹•g¡§`äJŒ]÷ÇuÓ3FÎÒÙ.,~Ý«âîÉèžv6‡® [ 1033.643707][T21718] hdpvr 3-1:0.26: untested firmware, the driver might not work. 03:08:12 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1033.995439][T22410] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1034.861581][T24151] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1034.871661][ T3379] usb 2-1: USB disconnect, device number 105 03:08:14 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) [ 1035.373468][ T3379] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1035.533252][T22410] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1035.544359][T22410] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1035.554197][T22410] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1035.578732][T22410] usb 1-1: USB disconnect, device number 51 03:08:14 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0xb83d, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1035.643157][ T3379] usb 2-1: Using ep0 maxpacket: 8 03:08:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1035.783523][ T3379] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.794153][ T3379] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.805466][ T3379] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1035.814669][ T3379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:08:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcff87b0071") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/de\x1c\xe3\t\xbcw\x83\x88\x92ot\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f0000000080)={0x6, 0xffffffff, 0x3, 0x4}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x32e) [ 1035.914625][ T3379] hub 2-1:118.0: ignoring external hub [ 1035.941550][ T3379] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1035.988145][T21718] ir-kbd-i2c 0-0071: IR for HDPVR is known to cause problems during recording, use enable_hdpvr modparam to enable [ 1036.064985][T21718] hdpvr 3-1:0.26: Could not setup controls [ 1036.071824][T21718] hdpvr 3-1:0.26: registering videodev failed 03:08:15 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1036.126299][T21718] hdpvr: probe of 3-1:0.26 failed with error -71 [ 1036.180199][T21718] usb 3-1: USB disconnect, device number 11 03:08:15 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="240000005a001f00ff03f4f9002304000a04f5110800010002010002080002", 0x1f) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x7fff, 0x103cc2) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000340)={'syz0', "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"}, 0x1004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r7 = dup3(r2, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 1036.543433][ T3379] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1036.803127][ T3379] usb 1-1: Using ep0 maxpacket: 32 [ 1036.923470][ T3379] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1036.931946][ T3379] usb 1-1: config 0 has no interface number 0 [ 1036.938278][ T3379] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1036.947533][ T3379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.958522][ T3379] usb 1-1: config 0 descriptor?? [ 1036.983435][ C0] net_ratelimit: 20 callbacks suppressed [ 1036.983464][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1036.983566][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1036.989593][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1036.995570][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1037.001446][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1037.019058][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:08:16 executing program 2: open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = mq_open(&(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2c8675df0054278c, 0x54, &(0x7f0000000040)={0x7, 0x7, 0x80000000, 0x9, 0x1, 0x1, 0x3, 0x100000000}) sendfile(r1, r0, 0x0, 0x2000000000000002) 03:08:16 executing program 2: r0 = getpid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) pidfd_open(r2, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000040)) sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x111002, 0x0) socket$inet6(0xa, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2493a8b749aec38b}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MODE={0x8, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x80000000) [ 1037.521685][T24236] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1037.689027][T24236] device bond1 entered promiscuous mode [ 1037.701681][T24236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1037.737383][ T3379] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1037.783414][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1037.789597][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1037.795995][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1037.802166][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:08:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x32, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:08:17 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8c}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5}, 0x48) 03:08:17 executing program 2: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x8) 03:08:17 executing program 2: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x1b, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) [ 1039.223281][ T3379] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1039.234342][ T3379] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1039.244183][ T3379] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1039.265633][ T3379] usb 1-1: USB disconnect, device number 52 [ 1040.377730][T24206] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1040.384097][T12200] usb 2-1: USB disconnect, device number 106 03:08:19 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:08:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 03:08:19 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:08:19 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:08:19 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x53}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 03:08:19 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)="215d2c4b8c1513169088af4362c58fbba6abb838ac72916735c868650907e4b4ab28e1f570ff07cbda7530ff3d305db1010400000000000001") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:08:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="bc612a112065b92040106eb46c4295ee6ff64838aff8b65b46f2a2a2cf7d97e8664f31fa1e16f8ca8497fcd4571d054dfdffad478e672f28026643ef3ee20bd401", 0x41) [ 1040.833135][ T3379] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1040.883064][T12200] usb 2-1: new high-speed USB device number 107 using dummy_hcd 03:08:20 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x20000000080002, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x10001, 0x4) read(r1, &(0x7f0000000080)=""/132, 0x397) shutdown(r1, 0x0) [ 1041.073245][ T3379] usb 1-1: Using ep0 maxpacket: 32 [ 1041.144652][T12200] usb 2-1: Using ep0 maxpacket: 8 [ 1041.193508][ T3379] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1041.201901][ T3379] usb 1-1: config 0 has no interface number 0 [ 1041.208304][ T3379] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1041.217513][ T3379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:08:20 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 1041.265522][ T3379] usb 1-1: config 0 descriptor?? [ 1041.273418][T12200] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.284392][T12200] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.295705][T12200] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1041.305028][T12200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:08:20 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000000071180200000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00'}, 0x48) [ 1041.424521][T12200] hub 2-1:118.0: ignoring external hub [ 1041.449333][T12200] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device 03:08:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$unix(0x1, 0x1, 0x0) fstat(0xffffffffffffffff, 0x0) fchown(r2, 0x0, 0x0) 03:08:20 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8afa", 0x84}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1041.947903][ T3379] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1042.093260][T24258] usb 2-1: reset high-speed USB device number 107 using dummy_hcd [ 1042.333149][T24258] usb 2-1: Using ep0 maxpacket: 8 [ 1042.373987][T24258] usb 2-1: device firmware changed [ 1042.380398][T24258] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1042.387506][T22410] usb 2-1: USB disconnect, device number 107 [ 1042.543162][T22410] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1042.583395][ C1] net_ratelimit: 24 callbacks suppressed [ 1042.583417][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1042.595420][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1042.804840][T22410] usb 2-1: Using ep0 maxpacket: 8 [ 1042.925141][T22410] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.936310][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1042.946358][T22410] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1043.113447][T22410] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1043.122732][T22410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.131116][T22410] usb 2-1: Product: syz [ 1043.135461][T22410] usb 2-1: Manufacturer: syz [ 1043.140144][T22410] usb 2-1: SerialNumber: syz [ 1043.223500][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1043.223612][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1043.229689][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1043.235609][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1043.247272][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1043.253353][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1043.413468][T22410] cdc_ncm 2-1:1.0: bind() failure [ 1043.423943][T22410] cdc_ncm 2-1:1.1: bind() failure [ 1043.433851][T22410] usb 2-1: USB disconnect, device number 108 [ 1043.494898][ T3379] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1043.505889][ T3379] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1043.516243][ T3379] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1043.528699][ T3379] usb 1-1: USB disconnect, device number 53 03:08:22 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:08:22 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000e79ff0)=@in={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom$inet(r1, &(0x7f0000000240)=""/142, 0x8e, 0x0, 0x0, 0x0) 03:08:22 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) write$rfkill(r3, &(0x7f0000000400)={0xfffffffb, 0x4, 0x0, 0x0, 0x1}, 0x8) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x24c800) r7 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r7}, {r8}, {r9}], 0x3, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x8104}, {r8, 0x10000}], 0x0, 0x0, 0x0, 0xfffffd45) r10 = syz_usb_connect(0x1, 0x1, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES32=r4, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYPTR, @ANYBLOB="19f8de2a09df02d8582e45cce028a75c6fc1a97e3fc66ddcd3cda479de7eeb9a84ad41a7af8c83f5c125904239316090cb95e53ca6fc975c03efe3c15e9aee6b7cd0ff72be5ff699a84941e58c3209b19d08f021528e98d61399bc0dbe991bf7909436c51c6d0f0116350628e3a1bf14087a387ddfcfdfd30bb771c8d692af57e337e2557570bb06e1d915a8e4c5371ff8b4"], @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYPTR, @ANYBLOB="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", @ANYRESOCT, @ANYRES16, @ANYRESOCT, @ANYPTR64, @ANYBLOB="42be9744093a289ce9a7e248bc0957cd758a02deb38de89c06494c9c04a365c41d6265ed32a3b9", @ANYRESOCT], @ANYRES32, @ANYRES64, @ANYRESOCT, @ANYRES16=r6]], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb9, 0x1e, 0x65, 0x20, 0x763, 0x2030, 0xc404, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xff, 0xbd, 0xbb}}]}}]}}, 0x0) syz_usb_control_io(r11, 0x0, &(0x7f00000051c0)={0xac, 0x0, 0x0, 0x0, &(0x7f0000004d00)={0x20, 0x81, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r11, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r10, 0x0, 0x0) r12 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r13 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r14 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r12}, {r13}, {r14}], 0x3, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r12, 0x800c6613, &(0x7f00000003c0)=@v1={0x0, @aes128, 0x1, "8e1ee1bd8e455f80"}) r15 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10321, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x4, 0x0, 0x10000, 0x3}) ioctl$DRM_IOCTL_SG_FREE(r15, 0x40106439, &(0x7f00000000c0)={0x9, r16}) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="003e3b9dc027d110010068dfb4e03a9c6f553ffa65a807a9c90d0555b2952c079cd0452eb9a17c8214d052b7373e6adc71cbc3b7cccf8dbbfa9d7bdb20040014f1ec2725ca0adeb40fbfceee1516fd2b53b33a3572ca41be02032043a0e19cb4402bacdc5d1c07899cfcae35d461c2069504dcd25a23d9d95deadd2ead08fb6ebb17281d357dacb4f5e6a4bc50aa9e1d9fbed9b11b7452665123e2ad0c677a953255152db18c2568cdd313fe1f91efbaa8969d0ba1dd2566ac315ffa6bb86314f1d60029"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1043.936948][T24306] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:08:23 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:08:23 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f00000003c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_ADD_MAP(r6, 0xc0286415, &(0x7f0000000100)={0x0, 0xfff, 0x2, 0x26, &(0x7f0000ffd000/0x3000)=nil, 0x3}) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000240)={0xb, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x5, 0x1, 0x261d, 0x400, 0x280000}, 0x118) r8 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x3f, 0x2}, 0xc) r9 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r12 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r10}, {r11}, {r12}], 0x3, 0x0, 0x0, 0x0) r13 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r14 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r15 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r13}, {r14}, {r15}], 0x3, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r15, 0x10, &(0x7f0000000580)={&(0x7f0000000480)=""/249, 0xf9, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x10, &(0x7f0000000600)={&(0x7f0000000400)=""/106, 0x6a, r16}}, 0x10) ioctl$KVM_SET_CLOCK(r12, 0x4030ae7b, &(0x7f0000000380)={0x5, 0x100}) r17 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r18 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r9}, {r17}, {r18}], 0x3, 0x0, 0x0, 0x0) ioctl$BLKGETSIZE64(r18, 0x80081272, &(0x7f00000001c0)) 03:08:23 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:08:23 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xaa, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff8e0000000000000047e7777f18c984c5001a0000001800000014000a000000000004000000000000"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) [ 1044.023589][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1044.029946][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:08:23 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1044.243259][T12200] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1044.313606][ T3379] usb 4-1: new high-speed USB device number 113 using dummy_hcd 03:08:23 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x1) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1044.385526][T21718] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1044.493610][T12200] usb 2-1: Using ep0 maxpacket: 8 [ 1044.570435][ T3379] usb 4-1: Using ep0 maxpacket: 32 [ 1044.623905][T12200] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.634523][T12200] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.645772][T12200] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1044.655036][T12200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.664753][T21718] usb 1-1: Using ep0 maxpacket: 32 [ 1044.743699][ T3379] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1044.751864][ T3379] usb 4-1: config 0 has no interface number 0 [ 1044.758244][ T3379] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=c4.04 [ 1044.768086][ T3379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.785552][T12200] hub 2-1:118.0: ignoring external hub [ 1044.794805][T21718] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1044.803712][T21718] usb 1-1: config 0 has no interface number 0 [ 1044.809941][T21718] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1044.819181][T21718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.843698][T12200] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1044.865827][ T3379] usb 4-1: config 0 descriptor?? [ 1044.880411][T21718] usb 1-1: config 0 descriptor?? 03:08:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x1000000000000000, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000240)='kfyring&-\x00', 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000880)=0x826e, 0x4) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="31dd4716685defc91faf1b23c88eda517a62f85a360a5d947e75bb898f3e44e1c6fdd147162406b0cf9cfce97e6d223d52b02bc57ef9ce3a68cb44d820614f5434374e722a8244916e6d2a8a7c568d3e101d6da45a23b07f4036cccc437625f7d6396d8c1208aa01cdbfd75389c41f014df1bb910a6581e2406ed1e0733d5c411972231947f0885ede1093b24e760e782d0b96a36a106dc17fb58c39fe4e691cccf756316e58ac379f8a394953412716246c5c7a00cd8323cf42a5e5be20d2b0ebdaa554baa2c6d189a7ac03e9d80c6d6fc7cbdee992e85880abb0a5a522d3ff341c60e1861fb4", 0xffffffffffffff3d}], 0x1, r3) r7 = add_key$keyring(&(0x7f0000000800)='keyring\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000740)=[{&(0x7f0000000100)="6971697592928a7b08982c82fe9aae6f08aab7262c6826ba6a9725d52ea2d1ee7204aebd027d36a787024555c410b7792b48ec87eeed79", 0x37}, {&(0x7f0000000180)="b3c502a5d4dba7c9dcf6b8f89cb31baaa08cdc", 0x13}, {&(0x7f0000000240)="3ca028e811b35b6e297328e8def9ccfcb7089406c75fb03352ae31ad93e0a11b4590fe177818c4fa808adf518a562f0db0997a13c88f9390c756af0b3c1c261bbc30462e0fbda537cc8a77695d76155d7ee460292e9d0e8d2502551ca634fb352ee870e5216f99c516d5441271d5a43365f6f4eeaedff28b28339e7bd496315274088f6b69bf922b22b95852b8ea4620fa8481db2da1849f47885b8487c6c76ce1a7abcdb6", 0xa5}, {&(0x7f0000000300)="62dfdf65c39ca428db130860875b4d42739aaa322a6853cd63b3eb2802519451cf508881e581aaaa8e7b06cc1c053006caeadcabb181b99d21829611030c7c742edc636345d8ef3400e305fbebf40e7c6bc0b65b9bd16b007e19a160005b5141b0f6c0c30180116a166244d7b184c3982d5ea5e7376b434204b5e77d3c9929c02a8a3db42b974bbf856d68e53e531d4a6f0797", 0x93}, {&(0x7f00000003c0)="25eee33684fe8d39010e9c4276537ae593639fd692814b9be2895bab45b24394c4884508017c8ce691360dfa29a8483f96e867561f2af88f6506d61bf20c110694f12d16ac8b7e1639712d2e9d863f27144ae1665da8c14fab12e8249983cddfd3721a3d31d0b3e18b1db644828f17e94407eecd493df6e038fba017d284d6aa33c4e8ee1cfc60a843b753151853015fb71c2a1c83ad08577b769e4bbd6d4c27ae2f8b5db8099e7f8c826726613250eaad19bf6b47810f626cc7455fcd6826bddea574c107912284327e435618a8e81708d472e88f33f38ad65ad9dd79bf", 0xde}, {&(0x7f00000004c0)="1915ce887040d73e2d305333d38a085ab546b373eafa7241b1c270e002c4e210770772f557d3b758505e23cc9a7eacb9ccb7bf2c3df729ec1db83dcf53620a8bcf03c7bfa434a60a0cfc839424ac10907b91d90ec8db3c19e4e53ea7bc89e95adc78666e9743bd89e691b56c7c624114448aa72a741b12a600c7dc3adaa36543d17a28956d666686789d608df6f9e23d51577b67606dc26fb11f0b6129c3131e73f05fb26bac90a54ed0e529435a7ade99bbdcddcbdb52346ceaf291ecea33b22c25b988ec6d9a839e30f69e76589348a9b30c39e5aa221fd40ac2abe9f918568fc06b39fe8ecbf5cea725c59104cbe6", 0xf0}, {&(0x7f00000005c0)="228eec6fc7a618ed8942113ce56b885e11918587dba6aa625e5e40095b7f951b9aa47671dd08180dfee55543a67b38ddc477f676e66f8e26d326dab417115a0d6de04be133c410157e686be9ad38e559202c98496b9d137801d1d47375a232479f7128f83f376aa26bcb8fef52953179564b6205fc446e23f2d353d5", 0x7c}, {&(0x7f00000001c0)}, {&(0x7f0000000640)="eb6107f8ed298e455a872ff77b0ea6b8ad1c2043433d30b4bf36c8e2a80daae00848f0e223e213d18bbd6b825a58f8f346fff97cab49b4a9685afb86c90f89abfa12967b6ac3f13b4aee6b0bb068685be114c3619a8778d013ff7d94938262493c18ad6bc2ca7a6b552b0663e7e5dcecc73640d5188d52c2d23d20455c09a82fdec6c696e679a99c3b3890cea8d57982372f261abc31408aa1c9580f880b0b19e900fe7af167d0aa86ef38e6", 0xac}, {&(0x7f0000000700)}], 0xa, r7) r8 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x60000) ioctl$BLKDISCARD(r8, 0x1277, &(0x7f0000000700)) r9 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2, 0x2044}, {r9, 0x6024}], 0x3, 0x0, 0x0, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @mcast1, 0x10000}, 0x1c) r10 = syz_open_dev$admmidi(&(0x7f00000008c0)='/dev/admmidi#\x00', 0x6, 0x0) fchmodat(r10, &(0x7f0000000900)='./file0\x00', 0xb0) r11 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r11, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:08:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={r7, 0x40, 0x370, 0x1, 0x7, 0x2}, &(0x7f00000001c0)=0x14) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x4e21, 0x80, @mcast2, 0x5}}, {{0xa, 0x4e24, 0xf50, @local, 0x10000}}}, 0x108) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1045.403446][T24309] usb 2-1: reset high-speed USB device number 109 using dummy_hcd [ 1045.563909][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea 03:08:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1045.673246][T24309] usb 2-1: Using ep0 maxpacket: 8 [ 1045.713675][T24309] usb 2-1: device firmware changed [ 1045.726968][T24309] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1045.727174][T12200] usb 2-1: USB disconnect, device number 109 [ 1045.913181][T12200] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1046.153196][T12200] usb 2-1: Using ep0 maxpacket: 8 [ 1046.273435][T12200] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.284683][T12200] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1046.294741][T12200] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1046.463494][T12200] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1046.472776][T12200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.481223][T12200] usb 2-1: Product: syz [ 1046.485588][T12200] usb 2-1: Manufacturer: syz [ 1046.490255][T12200] usb 2-1: SerialNumber: syz [ 1046.783713][T12200] cdc_ncm 2-1:1.0: bind() failure [ 1046.794345][T12200] cdc_ncm 2-1:1.1: bind() failure [ 1046.805289][T12200] usb 2-1: USB disconnect, device number 110 [ 1046.940822][ T3379] usb 4-1: USB disconnect, device number 113 [ 1047.103403][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1047.114660][T21718] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1047.124729][T21718] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1047.136470][T21718] usb 1-1: USB disconnect, device number 54 03:08:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4], 0x1c}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x2000000, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x1400}}, {@max_read={'max_read', 0x3d, 0xac4}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions='default_permissions'}], [{@appraise='appraise'}, {@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, '\'^ppp1-user'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsdef={'smackfsdef', 0x3d, 'wlan1'}}, {@uid_eq={'uid', 0x3d, r4}}, {@seclabel='seclabel'}, {@obj_role={'obj_role', 0x3d, '/vboxnet1keyring-'}}]}}) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000003c0)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 03:08:26 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:08:26 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x9, &(0x7f00000003c0), 0x4) 03:08:26 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:08:26 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201d62fffff2720e60f0098b83c0109241200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x648040, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000140)={0x67, 0x0, 0x7, 0x1ff, 0x7, 0xb5a3}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x40, 0x13, 0x6}, 0x0}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r8, 0x42b, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0xb, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'c\x9at\xde\xd8\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x220840a1}, 0x8000) r9 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r9}], 0x3, 0x0, 0x0, 0x0) timerfd_settime(r9, 0x0, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000200)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x1, 0x0) ioctl$IMSETDEVNAME(r10, 0x80184947, &(0x7f0000000040)={0x7fff, 'syz0\x00'}) r11 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r12 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r13 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r11}, {r12}, {r13}], 0x3, 0x0, 0x0, 0x0) fcntl$notify(r13, 0x402, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)=ANY=[@ANYBLOB="000000000100a8a2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000003c0)={0x14, &(0x7f0000000240)={0x40, 0x2, 0xcc, {0xcc, 0xc1ef9ae7b18ac1db, "a660a8200e8952108f59ecc0277d879c3ff2ba7a50d0dbc31189927c4cac1400c7e4847bc9612108ca09e96f20581dab0b2e69b2d0bcad771184ef03aa390d20854da57935356e6b08ac0014e22998932e178974016e43e11395136eaf271a75c70f8e0fa87b1b34c502679495b2301dbfbe032b62cc88ae8b9c9e9283bb9da9f2f2a864643c3a54aced2db755bafec27d16bd5a0ed67b98c1e732f3318f457e915b8fb7bafa992c1f78045153192741b7464cbbdfdc36925637628cc092562b8084c89755f4d4878db1"}}, &(0x7f0000000340)={0x0, 0x3, 0x55, @string={0x55, 0x3, "a1b3753f6b0ef4a750f8dfe2efdcdcf0bf78dbe558ca4331471ff5c99fc5d851474da45109d22f7c23f84f39d22479fe6415adb7003881ed8914e58a2fc479e841f5e33b78b2eba7b629d236779876c556bcf4"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000400)={0x40, 0xc, 0x72, "64fffd3ee90c1f2f72c5c8133421904e7e95278c7e9ffe7124d3be705ab7dbb5efa8e533a45c139eb5a02996327fce12853c6ab53ef9d583dbaa484264cc66dc0f959d7aecdf54a80740c6ce1164c42b15325c9c31b40a9da05d89ae21c3a6225be11b4cc69f3ce23437df1919c149275ec1"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000540)={0x20, 0x0, 0xb8, {0xb6, "d54ee660f008daf6a08744111b36a952b5ec13e7e5dce61511986f5f2acf00a40be8794eec242cb4d28daff8c56bb388aa9dd6505b688710f333b73daa70724f7b62edac6bd9c379bf71a159d26053a1ec6cb1d4bbaed85805328885cceb64667e7094bb7351a9fb1d63b2dd84b3f8bdbd1e69f203d673d72f684cb67ce4def6520318b7faa1cac16ef82d395ad4c507a9014e2fada45c64f20aacb491adc08ef637e9cf997ab6b256dc42918c7f96098d53b2e566ae"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0x3f}}) 03:08:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x6a8, 0x92) 03:08:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:08:26 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x2, 0xff, 0x1, 0x1, 0x5, 0x4, 0x7f, 0x2c, 0x2, 0xf8, 0xff}, 0xb) [ 1047.623199][ T3379] usb 2-1: new high-speed USB device number 111 using dummy_hcd 03:08:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:08:26 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:08:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) rt_sigaction(0x35, 0x0, &(0x7f0000000280)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f00000002c0)) [ 1047.895412][ T3379] usb 2-1: Using ep0 maxpacket: 8 03:08:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1047.925267][T21718] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1047.986597][T12200] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1048.016408][ T3379] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config 03:08:27 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000440)='/dev/dsp#\x00', 0xeb, 0x84800) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f00000005c0)=""/247) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r7}, {r8}, {r9}], 0x3, 0x0, 0x0, 0x0) ioctl$BLKALIGNOFF(r9, 0x127a, &(0x7f0000000400)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000003c0)=0x14) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x200, 0x0) ioctl$SG_SET_RESERVED_SIZE(r10, 0x2275, &(0x7f00000001c0)=0x6) r11 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r11}], 0x3, 0x0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r11, 0x227d, &(0x7f0000000380)) r12 = accept$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) setsockopt$inet6_group_source_req(r12, 0x29, 0x2e, &(0x7f0000000240)={0x100, {{0xa, 0x4e24, 0x5, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x3, @remote, 0x8}}}, 0x108) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000004c0)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e0000000000009163c3923e8d2a8b8bbbad7b2380170781c87d6bdd98e7cd7478c0a3230c037ed7a073e324a7e7077d88ed9d28ad5a3e617125396deaa36d525f861cc1e95540c78346e074c0d1cde8f5ee8f3024080833ac75cd52afca9c4d98cf773064865de653d3416d784160d2c1b937e653e22bc49890e9a1fe0008be3afe62a4e4115b7b000000000000000000", 0x3ad}], 0x1) [ 1048.027589][ T3379] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.039122][ T3379] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1048.048502][ T3379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.194042][T21718] usb 4-1: Using ep0 maxpacket: 32 [ 1048.233602][T12200] usb 1-1: Using ep0 maxpacket: 32 [ 1048.238779][ T3379] hub 2-1:118.0: ignoring external hub [ 1048.248511][ T3379] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1048.257693][ C1] net_ratelimit: 22 callbacks suppressed [ 1048.257714][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1048.269750][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1048.276151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1048.282319][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1048.335904][T21718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1048.344211][T21718] usb 4-1: too many configurations: 18, using maximum allowed: 8 [ 1048.354091][T12200] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1048.363362][T12200] usb 1-1: config 0 has no interface number 0 [ 1048.369591][T12200] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1048.378961][T12200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.411287][T12200] usb 1-1: config 0 descriptor?? [ 1048.443576][T21718] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1048.454439][T21718] usb 4-1: can't read configurations, error -71 [ 1048.823533][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1048.829906][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1048.837979][T24364] usb 2-1: reset high-speed USB device number 111 using dummy_hcd [ 1049.103205][T24364] usb 2-1: Using ep0 maxpacket: 8 [ 1049.133521][T12200] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1049.146624][T21718] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1049.153699][T24364] usb 2-1: device firmware changed [ 1049.160504][T24364] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1049.166875][ T3379] usb 2-1: USB disconnect, device number 111 [ 1049.323086][ T3379] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1049.393137][T21718] usb 4-1: Using ep0 maxpacket: 32 [ 1049.463645][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1049.463796][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1049.469960][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1049.475931][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1049.563164][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 1049.563404][T21718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1049.576676][T21718] usb 4-1: too many configurations: 18, using maximum allowed: 8 [ 1049.643310][T21718] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1049.651166][T21718] usb 4-1: can't read configurations, error -71 [ 1049.659613][T21718] usb usb4-port1: attempt power cycle [ 1049.693567][ T3379] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.704813][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1049.714916][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1049.903270][ T3379] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1049.912740][ T3379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.921048][ T3379] usb 2-1: Product: syz [ 1049.925431][ T3379] usb 2-1: Manufacturer: syz [ 1049.930096][ T3379] usb 2-1: SerialNumber: syz [ 1050.213564][ T3379] cdc_ncm 2-1:1.0: bind() failure [ 1050.224171][ T3379] cdc_ncm 2-1:1.1: bind() failure [ 1050.234582][ T3379] usb 2-1: USB disconnect, device number 112 [ 1050.683453][T12200] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1050.694654][T12200] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1050.704657][T12200] CoreChips: probe of 1-1:0.159 failed with error -71 03:08:29 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:08:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigaction(0x35, 0x0, &(0x7f0000000280)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f00000002c0)) [ 1050.732520][T12200] usb 1-1: USB disconnect, device number 55 [ 1051.043204][ T3379] usb 2-1: new high-speed USB device number 113 using dummy_hcd 03:08:30 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:08:30 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x400) r2 = semget$private(0x0, 0x2, 0x20) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f0000000240)=""/4096) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000100)=""/219) socket$netlink(0x10, 0x3, 0x200000000000004) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xc00000000000, 0x400) ioctl$VIDIOC_LOG_STATUS(r4, 0x5646, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) 03:08:30 executing program 2: 03:08:30 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r4}], 0x3, 0x0, 0x0, 0x0) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000000)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:08:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:08:30 executing program 2: 03:08:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1051.333564][ T3379] usb 2-1: Using ep0 maxpacket: 8 03:08:30 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:08:30 executing program 2: [ 1051.485959][ T3379] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.496598][ T3379] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.507979][ T3379] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1051.517261][ T3379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.533426][T12200] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1051.535076][T11826] usb 4-1: new high-speed USB device number 117 using dummy_hcd 03:08:30 executing program 2: [ 1051.655086][ T3379] hub 2-1:118.0: ignoring external hub [ 1051.694496][ T3379] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1051.773907][T12200] usb 1-1: Using ep0 maxpacket: 32 [ 1051.793243][T11826] usb 4-1: Using ep0 maxpacket: 32 [ 1051.893428][T12200] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1051.902022][T12200] usb 1-1: config 0 has no interface number 0 [ 1051.908787][T12200] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1051.918323][T12200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.929981][T12200] usb 1-1: config 0 descriptor?? [ 1051.930320][T11826] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1051.943989][T11826] usb 4-1: config 0 has no interface number 0 [ 1051.950259][T11826] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1051.959712][T11826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.969807][T11826] usb 4-1: config 0 descriptor?? [ 1052.323253][T24421] usb 2-1: reset high-speed USB device number 113 using dummy_hcd [ 1052.593259][T24421] usb 2-1: device descriptor read/64, error 18 [ 1052.614892][T12200] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1052.673425][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1052.993254][T24421] usb 2-1: device descriptor read/64, error 18 [ 1053.263303][T24421] usb 2-1: reset high-speed USB device number 113 using dummy_hcd [ 1053.543554][T24421] usb 2-1: device descriptor read/64, error 18 [ 1053.623478][ C1] net_ratelimit: 20 callbacks suppressed [ 1053.623536][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1053.623662][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1053.629882][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1053.636274][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1053.655323][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1053.661598][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1054.123529][T12200] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1054.134894][T12200] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1054.144767][T12200] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1054.163214][T12200] usb 1-1: USB disconnect, device number 56 [ 1054.463460][T11826] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1054.475649][T11826] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1054.488924][T11826] usb 4-1: USB disconnect, device number 117 [ 1054.503683][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1054.509956][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1054.516699][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1054.523547][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1055.233253][T12200] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1055.493236][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 1055.613420][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1055.621997][T12200] usb 4-1: config 0 has no interface number 0 [ 1055.628763][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1055.638671][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.650256][T12200] usb 4-1: config 0 descriptor?? [ 1055.973670][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1055.998261][T12200] usb 4-1: USB disconnect, device number 118 [ 1058.663607][ C1] net_ratelimit: 20 callbacks suppressed [ 1058.669494][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1058.675601][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1058.682062][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1058.688217][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1058.983866][T24421] usb 2-1: device descriptor read/64, error -110 [ 1059.223412][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1059.229446][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1059.263359][T24421] usb 2-1: reset high-speed USB device number 113 using dummy_hcd [ 1059.473171][T24421] usb 2-1: device descriptor read/64, error -32 [ 1059.803240][T24421] usb 2-1: device descriptor read/64, error -32 [ 1059.863534][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1059.863629][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1059.869722][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1059.875703][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1060.073279][T24421] usb 2-1: reset high-speed USB device number 113 using dummy_hcd [ 1060.293304][T24421] usb 2-1: device descriptor read/64, error -32 [ 1060.623289][T24421] usb 2-1: device descriptor read/64, error -32 03:08:39 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:08:39 executing program 2: 03:08:39 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x200000000000004) 03:08:39 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:08:39 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:08:39 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb9, 0x1e, 0x65, 0x20, 0x763, 0x2030, 0xc404, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xff, 0xbd, 0xbb}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000051c0)={0xac, 0x0, 0x0, 0x0, &(0x7f0000004d00)={0x20, 0x81, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x0, 0x9, 0x3b, {0x3b, 0x30, "04b58d54415ed56160eeee8a6617fc818a655c9ced62a8d850410761d628c71ec51ba063412d0183ed1baec8fdf412cde31d29c58b67c35ada"}}, &(0x7f00000001c0)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "bc215da29e58895caf2efd273117d3b6d1299b8a911dab4ee7861a6485c02d912f9597865cb059efd1da1df00e8948f2ada03431287a836f1b343a622c8f9769d67e509cab8c1ca27d16c0f1372f4ea042e49ce3d0b578140709a5d6a243e189214f6a838044af436b41a226f4e8dff69776f3d70cef2ec165b602460abda972a608e507794ebc55002a88"}}}, &(0x7f0000000380)={0x34, &(0x7f0000002040)={0x40, 0x2a, 0x1000, "5877b163631e2adf1844c4cf857d744827e18ce9063716ae9d532bf877a8d9434b74cc99f3988d4ce0fe32534a9b2188f8d7944e365574a716e4fe0f6b6791dcdb940866a098d5574b75ec5117fe15cb1d70736ffbbb5d2878993989e3fc0409f1ed26c467cd784de0b5ed5ecc877ea263223820d781af24b1afe838588a64d5666f8b3b1d540a58b469aa7a67ea3f7c695048e1be360bb72db6d30562e5f6bc6a957ba0b4cd8e71aff49a4368b411d5ef7e7b03ca2725a9360aaae9a4b487fe7d0791a7d382317011eae40b581387476e9e7d978858171d0b70380ef5604bc9a4b5fff58d833b1c3bc842dd734130a0c55f20f5e75001275207f4d24836938010c5338c09dad787a54460dfa55b229e492836a651d4bb8f7036b562e205ab72c5c94537522d1a6237f72ef3fbf567547c21f8be015f906fce0b482a704cabab25fe69894328c9985459c96470581716c69df474071126aa4a5a412d8b1cb3a2205fce49d15ca94cb3dfb0360a6d6161a5df50cf9db70f80afb6ddb57d91a31e06a54f3aa4c59c5decafa3fa063ba88d9af2d74f95f88edf234025ccd809889806c50077dee568228be487fca1ec761468b97d01ba19534e9e402430dbee10c12fde505521bb35aef129b74b1ed6dc0182ed22c5e235afc1087ac1625bf4be1464101c94587a8f466babb21caad8300041b8bc089b63257ffdc5ea9247f6c1755009cb62970d45e906499e6ac5204382aed22aea8e4fe5953117eb69c4acd5715a9f28612e16d480a30a7239942d2c15e257fa8504fbd018ad2589a8a7951f5c24a5d1ce1d09475fb665eb00ba4c2668b5b68ae7b6177a03b2ec61fd3ecc0b6f8d7700579231f13fef0f29c6abff64db84ac49d580e80a46a0dfd728dee4b1acd5727843672a04ef7fe20928509e199cf69af38690186cb341eabe0f6297188422a35877e76a50d9550f923ccbedd4a6097935fb323c0ee1bcc56d6bf8a6f667018e7ee4ce336733048c9ff0b7599174e468ff28d6d0dfe65dd9610fd582ab42710d284019ec8e642ab2f5294c9b712865acf2dacb6332bdfc3fb11401a1949b96bc5971d629d4d5749808524659ccb1f4cb0d9689bdb67bf3b133421e4d1fc08a407afe6cc0bff7801523447c4cf34310d836b1b94533e0f0db18679adff7d0cbe14d870840170ce1f003fce9d835e4bb459bb81e1f319a66aa3734374dcc372ee84293c28d9e204713cb0658616a5498c41e522c4dc06275a4720bcc567229a4cae39b029b4b423eced3d31e46392dcdcd307aa2f89ad2fac80c7a74fc493e9a5f2437af59b0c10d0a4f2f687aadde21161760890e159a34963d1e587e90f405d8c20758dc89c1c06dfb77d95a079b46515d1b9cddb416eae1411d815b78971934a2a4ed732ecc9500d4684b7e104634485cbe38a7ccb1a44f7fcd33d53377ee6524d1c03386bda1843c520177b6fc5514be148a2978731698c8e340571afb9044202e51bf6ba8a5aafc5218fa4fa1adad055c341c82c77142777f393b6057542c6d8f2c498c9f8ca3f7c340cae0388987eae8ea2ebf15d1cb824af3ab4d86ed86a732c6630837e40514fd557ad07b0959d2d1e3a823cf38337c90b22ed3c5f4c1254c6801ce646de8de0639f86c54819e50e897d3b4f868c7777b683da25dd39e9b4d84ea575137e6c8c7c69a64fff52547da4f295d63ae6e088dfb73ea3b55226eaa917b4d05a95d5de81dbd5915a14ead43f0632329a09896da5c8a06dc0dbf95c546a0cd33f8f40a92bb9bf76f320dba33bc5a276fb754103700630232e98dc04429888121c1378c4aba087b3df12461570ece1542820ff035f8f7dfb78bd3f98d48f25c7cffb6887f3dd1cbfe638f6cf7ff30a6c98107bad2d4c43cc1afd5ed1f49c280ac7a666bc41aaa64c604460738f35e0689de3db7f965d56676f5e3f9c011bf0433add91ec8a3bf5c4151fa1c31f07ddffce91847324b743a5abb84573f92a39fa4e45b77f9dca671e39e2b72df929be1be3f854f78e530c93736ce265928afdf96e96bc360539e225da26e57ba6db585bdfb6e1aff1593d293e737b80a68ee4aa4777a7561ef66c782ff74749af852dec3aa1c69293e90e7fedf84eab0df3ba561f8746bb42095b8d4aa3e3938bde073c8fb056e7f8e05da92ce5745698d6d1c347a068378b1ad41244801ed4a523f23b5b7fe55e5c94bfd8115b42cb9339790d5af7e87c98f00932509e9ee966bfc08475e41d309dab669e53206335a6a2efc3cca556f0550e40a71090c9426c7157325fcfa349e9a4e21532b2918c76c791ca70e1a90b9701bd2bb8bb4f883e98a331acb75bd5e20bebbed8672296ef05c2584a7e66a602d9a15e808c1e18b5b146b11e65cdab0353cfec5100bba9f281f3b6d6137499043c56952bf20b71087e8c4b0626bb6b60ca12410e44aa11d1d75ed69c2106c6f79e50edcecba099cb28cbd82d8f30a288fc22cbb4325c0dd9bc7b64bac8822a321abe5689d306d818394340e286fefd4f2c3f28b73468cbe231431aaaec3cc351af304cfb716319493ead1caa383947feb9be99746b6ac7ec5a044cd1315e673a222609ecfc2f81c1d57c0316e4559e35396dda1e59fae35373830013b69d38ea4d2259bf3ed39f0b5919db390da8c6f685216f3fec950bdaf4837345c8845efa6158b13788d80269681bb9fb6fe4f89b14fd35d8f84424076460732d053f5fa30ebbd1e7df369299f9725a68b61b83e246a5bc5bdf5e02a4ddbc0e5775121f55b9902030c1744adfd2ea919ab1931af65a93c5f35b8e0c9d08b1c718a80345a7668e3760b017b919afc72d6820a43b7e4b440ca6043fa9b3f5130a2de4fede6cf01a6cae6b60453797d85f5d1fc0007d3eae21b37c3899631632a1d7aecd04272152195f9ca00f973a8d22d19c9c3e1c8ec86ec0770209a83de8e484519e483e5b31ee80bbb50a5d1a364efe97d3e25038a214023ba73d758c3b8b9a5dafa7a780b6a87df1fd76b15aa002b06a9e862947e64f4f23857c65ed1c618ba14533e1daa765ff5ec13a3fcd2feef33b26d0e3aa497a0c7a447b4bd26576b1e3dc7df8a4475dc467e1bad3d7e8d6574a45dcfb199d1f025b04dd3579cd3f0fcfa6609232edb65d1521ca740c100bde0acf0bb437ded2e2c24dfb0271ad6b7343cd3a1ca3865c7132d3cca5303a6e8e748df541831556ae8356f6cedbf8019bdec6b7051fa9c488b41cf55b0aa6216ffb9002223cdc6b6d6a1552d73b4ebe72d1a8c44cc3d3da23ceed4107ef5148d8930a3dce4962605df9ae71d6e6012943e85393dc7d7c873a7100cd2274161663c4f417446126f620dcc99ec6c87ef10780b2060d0e8f2be70903cf76c8dd1e12894aeed3d6b96ddcd6bddfa7f4754afefd2de0255984d1b0a24cdebb0309c6a9b4e943eda0642bd15a26bd94441a012041a2610319b426663bfc1640b7e58c6b077201b7567e65b7cf5b352e66d80c8ce473301a1d635c4dd5fa10365f55064cb896acf5c3a22da2f220fcbf078f55d45259b97d1ce9065bcad4a7532e2b98cb684c684f19e95f44c556eb2115a36763cdc430f40d550d25d515e0f0313660b7a762b8fdaadbf5a3e6c6c1c317190da6821ae5bbc26d0d3ce1b4f535b1cce97015ec9f2ed099c735a1db7a49c9b679f0dbd8a1945c80d31075b2b811ae137949f813c1df107a229b6a1ac4b2357e33fb62a351075ecdd56181220126af27dc00c7913f44bb3042a82f9266d5b97aa4bcdf9d721025e0090a7ce6551a352756d78b3b4a7eedc85558b2bbf50c93f79e18380d17af1f8ef4e7966473c7da9308a904340299a52db6621d6971a27c437fea0abf29927e0eec67a5360c9fce7998672b7a9c78005ca28fd352500d42c0d0a781ec7877ad39918c742c60b9eef672910b333d63b686e570a0461089c894dd8ca7e6350c9677bdc736703ac319ec0aa1a99acf4a911c67583ab25b6abd7036206e1804ebeb61390ac5b14addd322e708659dcf1d8aa55fdf8adcb766e32d302d3d500942a53d1b0a196e70ba842834ee7ec12a34a9a32f56677c819419afaf5800af18e178e502e6a85f75cf5866ee3f9b64d58de3ca3b3f76e3f93c655daaada99bde03188554019560aa5626f24337c70d5bcb82864e02a8febd3b1b6e6b3f3b1f07b7fb74f2c6597fde6912ba6b531c4f4188c615afd1a1252b4c36cbaa995b0a311128d114cf65dcd03a7f9a560924f982f04bebebc32584ee0115196895951b9ff60ce21d54ccb21d6307196a9580d5ca18ebc91aeba321c0b4c3f016c4336c464717ecfd116cc696d86f550fe4feb99d9b7b0c3f7d126b9e91ab1678ff24e9b4ecaded5a3d425ae8bacfb3bceeb70b1dc89e19142b3bc260425d390749521f0aebf681011aa4223fe5827be8a879959f232c0481d051049f966dfb9bf2b2afc52789a6d8f47c586cc2ca7a6756bac9acc3cd6e98f9ad7a228cd8560d704a7110a7fae0f71ce46c19baf94ecdc09a48babe9cdfcb05dd0fba641ca0f32f1078a1a84c55a6c3b561006b4e94b86342fcfe18321e006cd11e2213e756a5ce067d5690569b7730f3a24bca7402cc722a9a4eec416b893461dca289a524573596a719a8e054e658b97a9f23286bf0f3c0df9a7dbe523ac000c1ceb16a95319292a874e9a7d0b0a14026e99b47dc992af835f5fb74de4f0a8aee69031bef3f1a94185c0b9a6763d4a32f0b6d0b438da469c151b549506d3d9fa2583b8ba05b4edb3f82cb022f9588579c7c5f38dfda028c9f72c172ebf1a150c4bc088a6ff8908ebe9235aae9dbb8509bc7a98268ad458d71ea5633e10f13a6d7c31a33009ad57ebfb59834f6796eaae84805bfcf6e730e199e9b4d4ac071f9abd2fcd8396c0b10a38b6feba7d9d4645dca3e9c419f61e03aad4b5b6bbc0e3047051a0afdecc9026bde670d34f4a8bc46dd8a8ad5964132dc0b3a5a81daee14fceea1281eb0660e089d6771a56d1e950c32d98bf86c1e42e2629c3f3e679f5776b5ba81939b2c12c89785f2b118844fef2ad16bc5f85de1d4213aff57a251c67b631056f265f42539472edc899db4e76b18e8ad71e864142718a7e7763a89699120107673d922bff9c75e9756b539efad056f44f635dc14a5486e941d1b48aa1841404f5f940d7ec2e69aae600d6e67e79d2b5d8a54f75a1c4a1d31da56fe23ff2d62cffb57d22f425e98439e2e417e9f9282cdffff51d08c8843a14911a5211b3aa53ec708c0920905952c4e5564a429916578c0d1e5a0bfc6b7646d883ad903e4283a28444211a55236f2346028669d09cf9472449782af3f9bd5963ea222eed3b5e08845d0b25373f62b41aecf5a3eb7d7eff5ef5abec8b73a373cab4a2e4f704f7a7f177c86e49aaee1d5f22cf057d2045f39f6ee1900e0c993f31df9a2620312381193fecb487477d67688a6041245d7231364908e7415988a55cdff9189e4ce0cf4a78f0b2dc008fcdddee3f408b4588c6777aa025a7785b0d216c5fbae5e6ff48698c884899ef04f44be6b6f93a3991cd87a9c4364ce5b68fd7a884cd0faa90a8c94f91fa627e474a5bf0a1d2f5c38b64dafc19370f797f8a0cbcde3d6cb1e23293eca8163478a7346c169419d6a737518c9855014ca78712defb63950221bd57161509442f571913025e8d6a0ad6680d77dd1c40c0b9617f148170039b73cd02f47b357384764924ef4d98a6ae493754f0b43fa50fec130ebc3987b2d2b90015c00fffe4a28a2e211011f97e88e0c9109e107b7243fe61a9de43"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xe4}, &(0x7f0000003080)={0x20, 0x0, 0x1002, {0x1000, "08ffc8de7ce52c6dac672cef9a1649da2f2b37df5d38972991bdb973df764630bc46370b66912fa716dba0f47646d265aa9b345ec27838a7299d06a36d95656b5268fca35fcd47aaca5c49e47f19684e6c2b3fa9b82ccafc59a939ae506a261e365b9a82af2e0a910384e1f6aaf2f189b4d3fc2bc8f706fbb6adf9efeaddaab7af93610046905536fd9d1db979e9f7b7192dda9c31916385836af78e88e9c57adc68b8fa62a68bb7cde50374be82e49d7f4037d61e8b99d1412944f244642c6a692bc852ccf81284fdf7bf8ada3f415e4b510235a8e0f9d5cffe61b0f965067c20c92a460d341a1bfc4f18d106a5bea137c00b834e55bf2bd195b321a8ac65acf6dc5065f46d375a889934d843d3aceb92435dd163daf151a4ebc9e10a860cecc6acaa373e53e383b504612c3d93182a28c13edffdde599df0c1cabe539815d8e2cae028fd305ac9b5353745d44c308c8b838b7dbc9fb9fb3111d9b04c0a7aa972ca9d71e00134b23eb332de0a30633ebd823b69cc281fbc6e0413aed499323215f95bc3a243972ba32e080611573d649d9693a969d3189ed0eca111045f9ff0f253bfa724db569ad169208666306e928a87f960c3b23885194c2c4dcfaf24b69343cb9cb01aa5d1e1bba9cffe014369d71b0efbe6b8a029b9759ff4f7f1d45b35f28853c24136fa227786738ff4c89c7f4286815d233d5e4a53692cd3653228ac0d2919fa2b71ffeb8af73236291c68486aa9535970a2abdeffe259c7916c5299db7bb2c1171a966090fed89d430dbebf80adc0f74e52c8263f32833d4f8c97b3098b4f7d0d5acce1ee23739c96be5530009a04e82cc5f940341620cf92f1388c53620862e90c66635e0174c696e5a9d5aaaafba9772bc670f726115550602085f48ea2fafccf35980ff88af4a7ffdcce4a571d3bdbeac1c8aad2759c77c28fcc9939f277b17de2fa19d1212b6dad0c1b31fc78d4efd8b0440b1771f08c4fa4ed2409a88fce443b09fa42d740c138d88a906f9493b6165b7edaab94ada9b8f2fc381c558b3bef9ec6d62e18ddefa9ed890f8fbae526c6ba6419060e5c556fa504373ce928e8da0b434dc828afb703b269e3e447a494fdb3292f7d3c976294869411bc764b6cf4a0a29e89bd9909f0b8a39c112393baedea95c241f73da4c02e88e9c6bbf411694e183e103929fbf0c457bf8dd9a43d382b62940fcb200143b53281668e711f874e92750c59f47b7d837ce925c5e3533ab1512c3f0bfad283ab5680e1e84e8dfbe0cbd22364a56e7b89e2c3d38b805499bff762cd4c220a7fe2a7ae72544e95a4a0f700f0a7c2cc034d125816f59230adaff4d4c91d2ba61620d6b9a3dc7909a2166376ea22a154cb0d27298ed6d1ae8bb23f1da9177172f44ed2e55312d82be1ba8a87e0bcebea0d558990e18528a3d9bf8a68e833777cdf9b4148b7b4953bc19823859f6c3fcae7f92cfd97ff9b616ef357709b97d7d36e97f6358094614965de6fd2ff7b3ddacb6ba1a20ca22fec95ad15419281ae6d6425ab2cefd364c9b50f611b36d0ec06403f700e6b24de3270b4a2816be49f5b239cd280d88705163d23b65ac746f53d698c1fdcd4bffe14cb664d75ced4eb61ce175ff79ce6dcfdea9b415005dd4f0891432c0340d836a1552120fe5661b332052e926d125199da207bae1bd669e2e160b0e241b35a81148fe5d50d21c039b3048fa1746178de9e96100df6488fb41150ebca80b44c54a5cf120e8a873f7302745001b6cb89d2a0e423c138a79ebe704fc29829038eedc3ecaa645cfc7d33ad7adaeec2835937a586d4d95b8914a02588fbcd3dc18ba46eec05a33bf690f98f6fd51e36a627cedf9d78ee9a48db5910acf82765ca134a78a5e3b81a67ac24f6cdc8a3bdf897de1e8a5b8444596f70585bed353be7d5fa2b841a28682a93265bab4576acf7940cb83db4016aa91a9ca30e8d80b6c87d1b02c9675333965ea889c3fe9ddc521f2cf2b56d04d73268dddb1972b3701b2fa1c9e87f5d834842821037192df3bf35eaa0ef6d6031387f5ca4f65ded1f47b78ed106830fbee7f66b2696923149cf257a0962215ae267153cb7368079c63944cc194fe83d4d02436238bda66bab6903d950869be432ef2caeee8b5614d5424bdd6c60dc858e84caa83e52f6710b7e52249264e3aa5503bf4936fb8c3305b81589e4557aa9a279b5bab7465fb4701a3b9546854f7b8e5d98e4c49c97feac0c77d55992dc9598b1b94d4d5f7ede7a77a23f2c322f6a99d65296324c56598543203ab8de14c36d78d1eb50f39c36ecef7d10bbc3a7a0c8d56a5e0d55d8430eac92f57aac95259d0281ee0a3a04c2004a29c780e1393a53aed43974f565a1a97f810cc1a0cbaf9659e1d54201c59fa3447ff957d94a9b94543449c24fa82798179d675b5492efcb15d7db8041c8dec6a74dcdccf5bcddd704dc33d5b3b66f0509ce3a456fb09728b752770bce967815ad1642b6b59138422b524cf47be9aaac84a0a42f72a6993b93a25eb41d1ec42727db26fee70ff75bf867ab09ee353824650066b37739f0cc153d724ec69d01947d97b320f56370f2322ec60ba311df68bd6fe0645993d902cdd09a59159e4dc935de18ba7c54143d366f2a9c0ff7a8e20965652bd7978b67160900100d3a19dcde7ac6c18db7704d8119f7744bc0daf77894ebfcc067e29658cef9cde3730ee9357a7292f29b2f6d785b919a03616a8c1495a26c649953a1ffd3ca063d992399405da0961d250f0905ca393030360086783eab7d7101b2c5277a90f508c6541e2d2356a40f56fc98e6b17ae90dc17fa643c350973349ef7335ad66f7d35092c12535c1efb37488ca90952e907d820693454fe02b3513148085ad62840da8dc6ae16e40949dd2d7d1baef4755110b3d0cdfb6ad2c81f7cdde52638d429c1f7e0749e00ac9d5d11c57e251f4a9cf40633bd94ab1030832b07335956683b10fbd496b97bf66003ec6c92f7cbf26b02a738f15134a799601e39907dfad7d93810327342ef7c90e82ec8f265f40fc9d4040d2f2685f1b3b365aea033cd03ed30031f4320dda704c3bf5402f3d939664e1201b610bd3056f8833e027c5a9f019e2dce12e53c2d49bcf332af39606165d971f66b97b157eaae19288dbf11a2dcd6622f00489fa6e2511ca87308587e5cd4bd401b1229e033a34f3fe1ad4bcb5eecfc2c9d00a4331d06d9c9d486f225c5d74fa114231f761ba630ae1ac66d72f561d264b133ea6b975d1a768b5ce70b12c3540f40749c995268c9eeda99570881defd2e559ad82a2e85eced1bb863940f80b2588d6832679796cfad3aa595cc33f475611521c0066944175dcc58289e16d5cbb41e910c6310d9979596b8e30dc4474529a6a3b1132888e5ddc00b3e89cb3cba569279be16e03ff4e01cd99ae07999fd5bd69a589547eac288c18c947734fb368ee6413723404263ec310c997a834b2aa56f97ac5505984c66a505261b9e8c1c4e647947f996b27364934f4a713517773fee17f3ca2361b2f14a1d36566eea75e9b84ef86bad608a823552a526a59dc350a7c24b4919e69a26b5aac6fc016585bd75f7277a8cb240e9c7112755ff5800d3b6fe2c71486c96c10abe697076556a49e8abebc18bb2796cee346c4787780546d175eeed9ec2225849e247e7d499c9616a8a944b5ecd7d2047f227d0c918acc4bbd9773d9ee02378b68d8eada4546db9b6033473679a9c2fa89270696894ac69db02aa46304e56b3349b2e342e88280315017679329566caf3f8ef584bc32d3ef493164b63f20573053c1427d48fddbaf081ba992872f1f5e217e4df9820cfcd485237a7272caef6d3fd0ef47d3a841bf6944f45c513d1dcd49fed0f53aece8f9143e5e8e1c58b75da975f0455491496567419b78d991063250721138661f9c91a95f5fd3f5cc48d760e8c0b74c79f797164f29241ad24aca31049d88a2f33a8a2b21471277fe4f02337729d3f615e7c6b7856172f619524801c613646e8846a828842de12985afc7536a2b91c44c820590b661280edf213f585bd96d4d0c666621ecdb152389751a73a17edb808b9c0f7db4f82d3cf8e3e3f13f0740f86b92eeda06ecbd07211278c9fad932cbca3ecee679bfcaefa2d215c8b93a0132ba67daded3ba50f1f828283578ceed90e1baa9736fabde2339f3018ab08482c59e0e2dcc08823ed3fc0be5e1ab60bb563e4ee6e44b55870ceb235bfc70ac34bc2543acfb7b767ceaaf191d80329a83c0e0551094f6ac628e6a5a84f6577c89e5294fb30bf0951a25011d1efb98e661eccf0e00a51b9364f9338f59a1f891f469f6d0f112dc9f83a8e03c9a1c93be864a67d9811faabbb33aae4883f7da8a7b4a6a13c846f327988e252df31b672c010ccc23cb97ae3e03ead2a904f1a6d5856efa57fe2a45480092b04b7cebc71bf0c5a9e3c6d99894a63a3225e72de901745b8ec60bf244c97ff7a9088ec989476d969c0a1cad971ea8e49eeff5be8d7350b32038562dd552abed142771394737849ec8d00f832389a628c4fda74bb38560785c2d7740e64999e05bc45cda748bcac9a03a6e60143ffce795f7950ce741e9051cdbfe1089af5a6c771e6d0edfb295b63d5794c4620ea0d2575e59ab76b657b593cf9f42f9adec82e59bae4639d5c586c0d957ceb5821d4945603f9d4992696ee8a493241f8e052ee8a1cf29913f659daab639350638f1c0c6ae8599ec88f8723360eebf7d38d70bf10bf2f8e720df0d94d07a09e26c012994577e662da09321a85ecc2bf78134d032aa09edb15d22fe65916d4e536962d2dc7b7c808850bde3ff330ee820ab0ba58934585e57bdf88942557d9053b7bf9949f10a55ddedb5f5dd4533a1da78482e94654360e91f389d3625c80c8efd608b0e5380cc13b58491052ef1fb5f39ac2f9ddf7149c98e06ec146caa2c39138592c43fb69be1b583365b8f14754dd1461df90ec090e51a0db443ebc278d0539ffd3e8ce72749e1e44f1d1736677eb30099fa7f94d27a6347386f3d430feed8d12675e7265ecbbb9a6395eea56051f3551a552a41eafe04e8a7bdcf89df79a69af152449d40d6c5fc8be057b1b5ac8322a0dae32fb7347048d9c743f5e46cdfc64265750149757105095c47dc6b9ffc920247b353164c8f8c632fa803e8be5b7b68608c4c027fa6c718ce57a449eed712430e77980f3f0e9a25bd8152b9a4d3e5b9ed0d2b33e9d208639d0b9b71b8ec46e5c63d0d7282defa8219a9dce2e0de631bd79957e9366f8d32f434500e558f8f11d68b3f48e7037a2e74cb0789900574de55850d5a4a3eea94b2205eeef6b90b2f9b52083fe34e4c2041783cab94f6b6e50cefcc4e0336ce2ded991898cb7c40b324b0c62f5fcd7fad202c9b5af025dbc596a2ca4857dadba365e77e295888b82cead1c19bea95853a9d044fb9a04ddaeb11eb37292ce8090483bbe0128fd413110fbf527df26b7b39e2741b14c44d5679ff338fa56e8b25dca96786ee915862acde13bc3b1e3af8c5e2b41691edbd45d76387519da8b5fe7507c3cc2276c48a64092fb5dd41e44372cf088daa82e097d8f1941085983781cd86ab41d0f17cdfd6c5df051353c8df9c3318157edeb915da3c44a33a121500a2e0e6d4d46415ae95c5e1860847586df3c46183a378b8616c8c530cc898a5e77a6183b328359baafd13aee4641843c72de930b0b2a6b5525420a6a8e62d98442a65741a1624dd244a4b504fb66d3cd30453b6a6a7962c074f07a57cd9e4e35e84dc"}}, &(0x7f0000000300)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000340)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r7, 0x111, 0x3, 0x1, 0x4) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) setsockopt$CAIFSO_LINK_SELECT(r8, 0x116, 0x7f, &(0x7f0000000040)=0x6, 0x4) [ 1060.744240][T24421] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1060.745499][ T3379] usb 2-1: USB disconnect, device number 113 03:08:39 executing program 2: 03:08:40 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x40000000002) fcntl$dupfd(r1, 0x0, r1) r2 = dup3(0xffffffffffffffff, r1, 0x0) write$UHID_INPUT(r2, &(0x7f0000001340)={0x8, "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", 0x1000}, 0x1006) open(0x0, 0x0, 0x0) 03:08:40 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @broadcast}, 0x8}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='memory.stat\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x200000000000004) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfff, 0x24700) [ 1061.123386][T12200] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1061.149762][T11826] usb 1-1: new high-speed USB device number 57 using dummy_hcd 03:08:40 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x0, 0x3ef}) r2 = syz_open_pts(r1, 0x40000000002) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, &(0x7f0000001340)={0x8, "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", 0x1000}, 0x1006) open(0x0, 0x4100, 0x0) 03:08:40 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) r3 = socket$kcm(0x29, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000100)=""/74, &(0x7f00000001c0)=0x4a) read$FUSE(r2, &(0x7f0000000240), 0x1000) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x5, 0x4) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) fcntl$getownex(r8, 0x10, &(0x7f0000000140)={0x0, 0x0}) pidfd_open(r9, 0x0) tkill(r9, 0x34) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r7, 0xae00, 0x0) [ 1061.226380][ T3379] usb 2-1: new high-speed USB device number 114 using dummy_hcd 03:08:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x16, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 1061.373288][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 1061.393460][T11826] usb 1-1: Using ep0 maxpacket: 32 [ 1061.473649][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 1061.513300][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1061.513402][T11826] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1061.521678][T12200] usb 4-1: config 0 has no interface number 0 [ 1061.529976][T11826] usb 1-1: config 0 has no interface number 0 [ 1061.536083][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1061.542169][T11826] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1061.551294][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.559186][T12200] usb 4-1: config 0 descriptor?? [ 1061.560573][T11826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.584513][T11826] usb 1-1: config 0 descriptor?? [ 1061.653287][ T3379] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.664267][ T3379] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.675684][ T3379] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1061.685361][ T3379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.735748][ T3379] hub 2-1:118.0: ignoring external hub [ 1061.746310][ T3379] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1062.233477][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1062.283338][T11826] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1062.373296][T24473] usb 2-1: reset high-speed USB device number 114 using dummy_hcd [ 1062.643179][T24473] usb 2-1: device descriptor read/64, error 18 [ 1063.043189][T24473] usb 2-1: device descriptor read/64, error 18 [ 1063.313234][T24473] usb 2-1: reset high-speed USB device number 114 using dummy_hcd [ 1063.583693][T24473] usb 2-1: device descriptor read/64, error 18 [ 1063.833431][T11826] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1063.844448][T11826] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1063.854521][T11826] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1063.876422][T11826] usb 1-1: USB disconnect, device number 57 [ 1063.973129][T24473] usb 2-1: device descriptor read/64, error 18 [ 1064.023530][ C1] net_ratelimit: 20 callbacks suppressed [ 1064.023554][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1064.023657][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1064.029727][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1064.035681][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1064.047768][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1064.059098][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1064.065394][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1064.077182][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1064.089206][T12200] usb 4-1: USB disconnect, device number 119 [ 1064.243236][T24473] usb 2-1: reset high-speed USB device number 114 using dummy_hcd [ 1064.833134][T12200] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1064.903643][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1064.909895][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1064.916307][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1064.922417][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1065.083157][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 1065.203350][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1065.211773][T12200] usb 4-1: config 0 has no interface number 0 [ 1065.218398][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1065.227759][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.238494][T12200] usb 4-1: config 0 descriptor?? [ 1065.583461][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 1065.613907][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1065.627226][T12200] usb 4-1: USB disconnect, device number 120 [ 1069.063554][ C1] net_ratelimit: 20 callbacks suppressed [ 1069.069412][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1069.075648][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1069.081843][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1069.088145][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1069.463149][T24473] usb 2-1: device descriptor read/64, error -110 [ 1069.623385][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1069.629429][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1069.803134][T24473] usb 2-1: device descriptor read/64, error -32 [ 1070.073404][T24473] usb 2-1: reset high-speed USB device number 114 using dummy_hcd [ 1070.263502][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1070.263606][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1070.269707][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1070.275791][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1070.293335][T24473] usb 2-1: device descriptor read/64, error -32 [ 1070.623298][T24473] usb 2-1: device descriptor read/64, error -32 03:08:49 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:08:49 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_emit_ethernet(0x28, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaa0aa26ffffffffff69050007f3d000000005721a643a0506c3cb715460"], &(0x7f00000001c0)={0x1, 0x4, [0x88a, 0xf20, 0x751, 0x21c]}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {}, {r2}], 0x3, 0x0, 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000100)=""/100) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x3) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000240)={0x2c15, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}}, 0x88) 03:08:49 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:08:49 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:08:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x40000000002) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) 03:08:49 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb9, 0x1e, 0x65, 0x20, 0x763, 0x2030, 0xc404, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xff, 0xbd, 0xbb}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000051c0)={0xac, 0x0, 0x0, 0x0, &(0x7f0000004d00)={0x20, 0x81, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0xc0, 0x6, 0x2, {0x2, 0xd}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0xfffffffffffffff0, &(0x7f00000006c0)={0x40, 0x3, 0x225, "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"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000300)={0x0, 0x8, 0x1}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1070.744284][T24473] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1070.744494][T21718] usb 2-1: USB disconnect, device number 114 03:08:49 executing program 2: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) 03:08:50 executing program 2: r0 = getpid() r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) pidfd_open(r2, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000040)) sched_setscheduler(r0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x111002, 0x0) socket$inet6(0xa, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2493a8b749aec38b}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MODE={0x8, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0x80000000) [ 1071.105325][ T3379] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1071.113849][T11826] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1071.165198][T24539] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 03:08:50 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x400) r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x1, 0x100) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010023bd7000fcdbdf250300000028000500080001006574680008000100696204000c0002000800040000feffff080001004e62000048000500440004009a250194e591f48c000007ff200000000000000000000000000000010000003baff0b71972bf8e2400000200000000bb050000000000000000000000000002000ea7b4212145485fe17cd23f200bb8085f514caec7586c8b98840265d47f9328626dfda34d81f84366721d9eeafc78ba3bd11e993ae06a8c5222e30c9a9d29aeb70ffcd4a29a12505ace69aaf54882abc880ad66f10242a026"], 0x84}, 0x1, 0x0, 0x0, 0x40000010}, 0x4000000) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000100)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x100, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r5, 0x810c5701, &(0x7f0000000480)) [ 1071.272782][T21718] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1071.405313][T24539] device bond2 entered promiscuous mode [ 1071.422190][T24539] 8021q: adding VLAN 0 to HW filter on device bond2 03:08:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xa) read(r0, 0x0, 0x0) [ 1071.499188][ T3379] usb 4-1: Using ep0 maxpacket: 32 [ 1071.504924][T11826] usb 1-1: Using ep0 maxpacket: 32 [ 1071.593114][T21718] usb 2-1: Using ep0 maxpacket: 8 [ 1071.626611][ T3379] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1071.635183][ T3379] usb 4-1: config 0 has no interface number 0 [ 1071.641435][ T3379] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1071.650893][ T3379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.660465][T11826] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1071.668955][T11826] usb 1-1: config 0 has no interface number 0 [ 1071.675292][T11826] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1071.684530][T11826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.699504][T11826] usb 1-1: config 0 descriptor?? [ 1071.707599][ T3379] usb 4-1: config 0 descriptor?? 03:08:50 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x85) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000140)=0x2, 0x4) r2 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0xfffffffffffffffe, 0x4000) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r6}, {r7}, {r8}], 0x3, 0x0, 0x0, 0x0) r9 = accept4(r8, &(0x7f0000000180)=@ipx, &(0x7f0000000240)=0x80, 0x800) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000280)={r9}) [ 1071.735567][T21718] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.746686][T21718] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.757986][T21718] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1071.767300][T21718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.776208][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): set LINK LED failed : -32 [ 1071.786252][ T3379] CoreChips: probe of 4-1:0.159 failed with error -32 03:08:50 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040)=0x400, 0x4) bind(r0, &(0x7f00000002c0)=@in={0x2, 0x4e20}, 0x80) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='ip6gretap0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x18004e20, @multicast1}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) [ 1071.964714][T21718] hub 2-1:118.0: ignoring external hub [ 1071.986905][T21718] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1072.403294][T11826] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1072.573247][T24528] usb 2-1: reset high-speed USB device number 115 using dummy_hcd [ 1072.843424][T24528] usb 2-1: device descriptor read/64, error 18 [ 1073.233177][T24528] usb 2-1: device descriptor read/64, error 18 [ 1073.503212][T24528] usb 2-1: reset high-speed USB device number 115 using dummy_hcd [ 1073.783345][T24528] usb 2-1: device descriptor read/64, error 18 [ 1073.848356][ T3379] usb 4-1: USB disconnect, device number 121 [ 1073.953431][T11826] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1073.964521][T11826] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1073.974833][T11826] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1073.986647][T11826] usb 1-1: USB disconnect, device number 58 [ 1074.423387][ C0] net_ratelimit: 20 callbacks suppressed [ 1074.423402][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1074.433442][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1074.435525][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1074.441041][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1074.447202][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1074.459165][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1075.303327][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1075.309343][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1075.315656][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1075.322305][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.183365][T24528] usb 2-1: device descriptor read/64, error -32 [ 1079.453228][T24528] usb 2-1: reset high-speed USB device number 115 using dummy_hcd [ 1079.463587][ C1] net_ratelimit: 20 callbacks suppressed [ 1079.469555][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.475793][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.482150][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.488665][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.663185][T24528] usb 2-1: device descriptor read/64, error -32 [ 1079.993325][T24528] usb 2-1: device descriptor read/64, error -32 [ 1080.023557][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1080.029576][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1080.263203][T24528] usb 2-1: reset high-speed USB device number 115 using dummy_hcd [ 1080.473327][T24528] usb 2-1: device descriptor read/64, error -32 [ 1080.663568][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1080.663676][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1080.670079][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1080.675998][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1080.803285][T24528] usb 2-1: device descriptor read/64, error -32 03:09:00 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x2c}], 0x100000ef) 03:09:00 executing program 2: mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0x2, 0x4032, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000), 0x3) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000000c0)={0x6, 0x7, 0x400, 0xfffffffb, 0x2, 0xffffffa4}) sendmmsg(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000140)=@generic={0x7, "79e589e91e52fb5c3e1f2cc045d551f60e3f4941a1faa449f6849fe08b5f14ae36a452c6f3f5c801d010d64652f39dbe1ff15c12b225c6147cad62ec200f3a911b5efee8becf1094ade9e21bb17374d3381dd49a868642561b13cd809132fccbfe3d7b0e6a171855eec14b65ce664f016745e0a1bb510be6065a0f40e79f"}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000040)="3071039dc491b8ba4af113b7868ef8e0d075", 0x12}, {&(0x7f00000001c0)="baca714d12105d4a339671b45586843173b41a94b7378d49f655ff4bc262a91be415fdcd36ba552e237b20b51cc5b8357f00541ecf18125a03c52a5af82e4b0545a79c41f4060ca1f2fefd26a342f770837c14c16b8720b3befca4391ad86eded95d3ef22fb137d612a5fd03392b9ed51010a71360c77daced977e90d246eef5ac878593e170b1d65939a42e5acc54ecddc12168b5b9081c9e0ea8c29064002f02aad32d7c49571470b95ad970387a5b5226517b8c3bc6049d1ec07887bf94de186d9b07abfce10209a11e2f1beead7090b8ffd65759b351885b1f60", 0xdc}, {&(0x7f00000002c0)="ec68fef211c81763beca2d278a37e25b127c54c7b906d2093f66b303945b5717adb07254e80cc09a8ec65cd407f7f8879b8b3888423185674445803d93a3709d6ced0da7c63bb9bd044f8938a2f2c1eb0c9b76fd14eca4749ae83be5dd482021d6478035a5930bc98ed8aebf91684f12d34ba98e0b1140710e684aa4bfba1253a0e40bde3d7e8b3df0ade3d730ddd0b84227b3ce3185826f3114043b90bc23a403838d5d409e29ba36279a6a6a87b6a494f5d47316da14883407227499d249973300264f208d62f5db2dffca475201ff74d3582e0d4846e8ff48fe06eaa2967a5add7d87146547543fea", 0xea}], 0x3, &(0x7f0000000400)=[{0x10, 0x10a, 0x2}, {0xa0, 0x10f, 0x772b, "356c08eaf6db2113558a8cbafd3f45440565d683b02740d9b0fef6d7bfde41e8c94163259e659bc1646cebc497928e055b8193d3ab9bf65a8d3a4fa3ae58b81a752d516681c08ea7abbcc58c2d3972762d8abb254a2f2bf3f4fda7f266abb7e4b31fb93e2cfa6b56e1e5e5b38f01ca26b94a915786b87e3584f62bcd9ebdf7a01b6f8ba4a5dafff9463f"}], 0xb0}}, {{&(0x7f00000004c0)=@ipx={0x4, 0x0, 0x5, "ec9d58248104", 0x1}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000540)="04d8ab2d58b184befc51f56299d2bce93c9115681de7b67b32044918dbc9b91aaf14e8", 0x23}, {&(0x7f0000000580)="16b3d8d238e420c0e0d9d2124b5dbe801dfaa545013f16406b8a6a8590e7dce2f342d768b7d924b978c95a84d90f518ed34c29e5813e8c7eac156516984e443e88a7f89e9db17856ba8e64d06cc28e5c79463c0b01b0122b5a49fe115acd248f4600435edd2381f94b0432329a3a023d839c74caca11493aaadf5bae2e1074287fd9c1a121513295a82e8b1f4b3a8d9149865372ba62d64f1024462e64beb7bd5f1ff1308fc6adf8939526e3ead6", 0xae}, {&(0x7f0000000640)="58b45bbf762d0c92b70527ff282682b3d024e26ea269e3ab32d4fcc5db50331024bd7d4f215b7e93871455396da9607498cd92130279774ba0a3397e3f38213f5c6cbbe35db2aba60892ca9d27a88ef61fc6d7c4032b2f6a9d268e526746e59ec496b00315b5d803078ca143d0df2db231ffe1d6be62ba44ef18c8c52e1196191bdd42d33e90c84e6e9dcd9bb424dac3db6e9e7e548723b1ac3cb43625b1391ab6a6c3e6efb378cb8de793ddb409765cc24442f5a3468c8537c68625bf1479cf30274a3ca9a69ecc494a60147737f52cc4f0588af4d181de", 0xd8}, {&(0x7f0000000740)="39647c7c1275b4e2b577dcbf4fa56dd06450a06314f9ad934b6b61cd27cf0287172d001be2fd848df2f43399bc2a28b4e945587a2684f3aab64db07daf4110be41745677e83591b38a1a5e2f70d86c4673f2660b585a54e871431f0370f932cc3aed8d629fa19339e8f4e75e2bdba16e603789ca79c615ebf16854dd7944c5896bb89633339bf9c5d00a426ff6c09cc725c7731b19e371c64a969ca1765b2c0da52fab90c05f67b8392c33bbde48c8c3f51de09654156cd2a56c114cb18a00b336b99bda55f5e0b7b65a1e413e61c12570ded3c8edf289dea706b093519e9f32f09c352671020846810be4b217f0bd566e01a108", 0xf4}, {&(0x7f0000000840)="de2460631e6826ce236f65050b4255aa719616727d9643b5a7427da305230a1452942dce964db475d992f2ad19a95104ae445e96bb1625e05d543cbd461c265b62b174ed7e9dee5cc2eeeb83db169b4ebebc00875b5c0bef3fceb59dd651a9d7b205bdaf065dfbf7b8810083b091abcc0f4b48932f27b728978bf2aaec8291d1230096ec7bf451be8b45468b62232d22d4611e74e6957e6cc4", 0x99}, {&(0x7f0000000900)="4a03587e68673aeeeda2cabc61a275fb8340d761c1e7a5152f298ab1657a4f9020298ef27abab3a47f5b828247032d3f20f2c1d14f2f5718b754", 0x3a}, {&(0x7f0000000940)="dade4792f91bcda5bbe18989df65ef138cb6c4728c84a28cf45ddfb39ade3fe303d0cae75870e3df04e4c628a22fb882857f98bb2398e86c1db429b18c06f469d7933fc8e7b0f329c61d39242ad3f8ebcdf4b7bebbcacdfa4247a59a243547538e9c690adcee93fa528beb1cf3ddab061c69b58c764470970c5813bac8e84e703926e1afa007f3d8b28d8166fa6bff28a44a32af4b058c8d2ae17cffac", 0x9d}], 0x7, &(0x7f0000000a80)=[{0xc0, 0x102, 0x4, "15bafe2a3e40c58b0d8de9061ec417332fa9a51c05a7d19dc0b2e717d8d822129c2328a53dad39090a237f940b0882c66a5fc60f113054098053de94bfd30506a985295b57ec5207b22fc1bcc7db6ea211cf5afdf1e27f8cf7b9e607acc2b7833591fc19cec15570127b2ef3e09db0fe517f497b2c14dbffd1de55fe4aed2290fe550fc7ece512ae618a47bf291d0b38a0a5706af3ada06615edd1906b8dd82f01db3c8cb92a22736d94bec7"}, {0x78, 0x10c, 0x7, "caa1bca4b044a97500f2daf738c46838f0c3c2da0ce4341506363d020db0331907be7170330f2395f86f767be1960bbed63f3123054b788aef250b18a9af1342a6474f56ba605820bbf878cab422a45e4eb73a0ee9aeed837711672cdfdf87937c82d12ab34569d0"}], 0x138}}], 0x2, 0xce3f9f98668c3d6b) 03:09:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:09:00 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="01c45ccdbd84fe345e1c3cc41f7e9d2e435509e63dd36160dd7bdabacf98b5c59bcf76f02545ba8362dcbc8adca28cbce79212a435bbd93dc7fb0cd21a1db6950ec7d60300a9c89ad4312d86db766ada6688ed0b8f4a5f94665803e7ce594f89383287816eee502c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:09:00 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1080.924216][T24528] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1080.930149][T21718] usb 2-1: USB disconnect, device number 115 03:09:00 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 03:09:00 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="04", 0x1}], 0x1, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000000c0)={0xa, @vbi={0x2, 0x4, 0x6, 0x33363248, [0x3e, 0x6], [0xffff08b6, 0x2], 0x1}}) r1 = memfd_create(&(0x7f0000000000)='^posix_acl_accessppp1\\\x00', 0x0) splice(r0, 0x0, r1, 0x0, 0x1000000007ff, 0x0) 03:09:00 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0xffffffffffffff78) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x4d) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x20000004e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r4, 0x10d, 0xf5, &(0x7f0000000140), &(0x7f0000000040)=0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201c840b6b91fd50dd485700802000000010902120000000000000d04cb01000e23a600"], 0x0) open(&(0x7f0000000080)='./file0\x00', 0x306533a6191c7d31, 0x124) [ 1081.306319][ T3379] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1081.314534][T11826] usb 1-1: new high-speed USB device number 59 using dummy_hcd 03:09:00 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x40000000000007, &(0x7f0000000200)=0x0) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, &(0x7f0000000780), 0x8) io_submit(r2, 0x4000000000000130, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xea, 0x4, 0x0, 0x3, r3}]) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x78802, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r11 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r9}, {r10}, {r11}], 0x3, 0x0, 0x0, 0x0) r12 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r13 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r14 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r12}, {r13}, {r14}], 0x3, 0x0, 0x0, 0x0) r15 = openat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x2080, 0x10) io_submit(r2, 0x5, &(0x7f0000000740)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000100)="eafad9a264c3851c60253ece4ef7f87f2d1bddae1467ba5f8885d939f737787a442401723bf5be8c0d10184fe4218bb929461784e3f33004d03568495454f30f49f8e2be84be3a4abb586132a3a553302465b3cce2e461672fd6314cce2a4abf54fc6797405270908a5c4d7cf818ca347741ab707cdd1f6f97f296bf59586495cd385a86680b0d9008ebd1f27e0574e07f44416a3d", 0x95, 0x8000}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x0, r4, &(0x7f0000000240)="2232361d624046c3c61fc0be10b7ac62709d592b2c1253eb432a73ac6c3d8b0425a99b7b689614f2d296e288555f1aee38e6a4a54bc1cffd26ed1c7b7fbfb927d9500b58bc6f828e3946adbf967ac7092564aec32b83d55d586d7aa4255dd7c7fd3a3165f815ce021751f5df9d6699a92d49ac57fb6242abd542c20877950e58059db3880ba4fd55841616738c7dd8b921166a089faafaaaa8cc10765d625c296ddb0180d8f30bd7b5d2eee15049d425518b0568de1ee74701295a011e997cf578d3660ca1039952b408156de30e44c94b1f570c1f2ed486b1e49142f7", 0xdd, 0x3dc, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x6, r7, &(0x7f0000000380)="e8ffc7fde25558af800a51d99c5aa07bfa8023faf3fd7a460ed8216866769ba82dc289bf02d4282628c01e5744a2a850ef029bf132ecb4172ca6dd69e6143d01da134f9c08addd5aa04fc5c777ea2e513f002284957a4694f2dbc7306cd5952e323b731e8a49c6876e272f51c2c61eab27f643986678c5884b8dd3d4932dce4871611f48cbf404a6", 0x88, 0x3ffc0000000, 0x0, 0x0, r8}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x3, r9, &(0x7f00000004c0)="88db1c956cb3e8f20cc4fef138f5cbe7c745c9eafd2e83dfbbf3f749c51593371ea3423fcab3aebda843d5d87fd78213cab828e65637775a0d81023c4286d6de1f4dda373f2430ee2208edf2bfe411d3ca7e069c929ff946cfc210f14266df0d62b2f8584ed69fefbb8261e7cbfe7534d10b02d5b6b2263d3e43b86d6b743fefe6a538b14f94ff10e51886991c700ec96918663912e713e4c29626562a1d86516144413258f161d1869f8552e899096ec94a59f789bf7f0baa5990b59476e2af3765d66fcf4021407f1c47248809828b47ed9238bf9e31a9a0e5105d1541", 0xde, 0x80000001, 0x0, 0x2, r14}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0xc, 0x100, r0, &(0x7f0000000600)="50f6405e5ded50891483889ab737c5a7ed018e702382b4da1f1175af91409490faf5fccbe77d9cbff08d65e616458bab7892c750824d8c5859f2f673faaccb3f5b43e86ad622832d7ecaa556e8cda692e46420d749c5986f9a2ffd26d07707592ade87a9af6eb7880ae2fbe298c7663d5095837ba34423d925ed17b9532c57f5106885f19ff66b", 0x87, 0x85d, 0x0, 0x0, r15}]) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r16 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r16, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1081.376500][T21718] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1081.563196][T11826] usb 1-1: Using ep0 maxpacket: 32 [ 1081.568813][ T3379] usb 4-1: Using ep0 maxpacket: 32 [ 1081.617278][T22410] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1081.656392][T21718] usb 2-1: Using ep0 maxpacket: 8 [ 1081.723643][T11826] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1081.732205][T11826] usb 1-1: config 0 has no interface number 0 [ 1081.738638][T11826] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1081.748109][T11826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.757401][ T3379] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1081.765873][ T3379] usb 4-1: config 0 has no interface number 0 [ 1081.772791][ T3379] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1081.782305][ T3379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.813448][T21718] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.814247][T11826] usb 1-1: config 0 descriptor?? [ 1081.824313][T21718] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.833275][ T3379] usb 4-1: config 0 descriptor?? [ 1081.840621][T21718] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1081.854703][T21718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 03:09:00 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0xdbb, [], 0x1, &(0x7f0000000100), &(0x7f0000000240)=""/4096}, &(0x7f00000001c0)=0x78) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000001240)={0xfffffffd, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000001300)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0xef}], 0x1) r8 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r8}, {r9}, {r10}], 0x3, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r10, 0x0, 0x483, &(0x7f0000000080)={0xff, @local, 0x4e22, 0x1, 'nq\x00', 0x10, 0x5, 0x4f}, 0x2c) [ 1081.953395][T22410] usb 3-1: device descriptor read/64, error 18 [ 1081.955090][T21718] hub 2-1:118.0: ignoring external hub [ 1081.982161][T21718] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device 03:09:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r8}, {r9}, {r10}], 0x3, 0x0, 0x0, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r12 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r13 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r11}, {r12}, {r13}], 0x3, 0x0, 0x0, 0x0) r14 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r15 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r16 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r14}, {r15}, {r16}], 0x3, 0x0, 0x0, 0x0) r17 = socket$rxrpc(0x21, 0x2, 0x2) r18 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x8004c0) r19 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r20 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r18}, {r19}, {r20}], 0x3, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r19, 0x8400}, {0xffffffffffffffff, 0x4}, {r2, 0x100}, {r17, 0x1000}, {r9, 0x4}, {r12, 0xc480}, {r4, 0x2028}, {r1, 0x8}, {r9, 0x20}, {r14, 0x8000}], 0xa, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "a6ef8ff0a68b966f", "29f5f56e211f8e850d3a4f9bd3b320a0", "8152c306", "eb031eab75f140f7"}, 0x28) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r21 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r21, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1082.402527][T22410] usb 3-1: device descriptor read/64, error 18 03:09:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x200000000000004) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000240)={0x0, @bt={0x5, 0xffff0000, 0x1, 0x3, 0x88, 0x2, 0x42, 0x7, 0xfffffff8, 0x0, 0x6, 0x9, 0x10, 0x100, 0x29, 0x1e}}) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r4}], 0x3, 0x0, 0x0, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5fffff00c7e5ed5e00000000000000", 0x81}], 0xd47b216c21ed54f) [ 1082.549772][T11826] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1082.564206][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1082.593308][T24596] usb 2-1: reset high-speed USB device number 116 using dummy_hcd 03:09:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40}], 0x1) socket$xdp(0x2c, 0x3, 0x0) [ 1082.754486][T22410] usb 3-1: new high-speed USB device number 13 using dummy_hcd 03:09:01 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x40000000000007, &(0x7f0000000200)=0x0) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, &(0x7f0000000780), 0x8) io_submit(r2, 0x4000000000000130, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xea, 0x4, 0x0, 0x3, r3}]) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x78802, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r11 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r9}, {r10}, {r11}], 0x3, 0x0, 0x0, 0x0) r12 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r13 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r14 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r12}, {r13}, {r14}], 0x3, 0x0, 0x0, 0x0) r15 = openat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x2080, 0x10) io_submit(r2, 0x5, &(0x7f0000000740)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000100)="eafad9a264c3851c60253ece4ef7f87f2d1bddae1467ba5f8885d939f737787a442401723bf5be8c0d10184fe4218bb929461784e3f33004d03568495454f30f49f8e2be84be3a4abb586132a3a553302465b3cce2e461672fd6314cce2a4abf54fc6797405270908a5c4d7cf818ca347741ab707cdd1f6f97f296bf59586495cd385a86680b0d9008ebd1f27e0574e07f44416a3d", 0x95, 0x8000}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x0, r4, &(0x7f0000000240)="2232361d624046c3c61fc0be10b7ac62709d592b2c1253eb432a73ac6c3d8b0425a99b7b689614f2d296e288555f1aee38e6a4a54bc1cffd26ed1c7b7fbfb927d9500b58bc6f828e3946adbf967ac7092564aec32b83d55d586d7aa4255dd7c7fd3a3165f815ce021751f5df9d6699a92d49ac57fb6242abd542c20877950e58059db3880ba4fd55841616738c7dd8b921166a089faafaaaa8cc10765d625c296ddb0180d8f30bd7b5d2eee15049d425518b0568de1ee74701295a011e997cf578d3660ca1039952b408156de30e44c94b1f570c1f2ed486b1e49142f7", 0xdd, 0x3dc, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x6, r7, &(0x7f0000000380)="e8ffc7fde25558af800a51d99c5aa07bfa8023faf3fd7a460ed8216866769ba82dc289bf02d4282628c01e5744a2a850ef029bf132ecb4172ca6dd69e6143d01da134f9c08addd5aa04fc5c777ea2e513f002284957a4694f2dbc7306cd5952e323b731e8a49c6876e272f51c2c61eab27f643986678c5884b8dd3d4932dce4871611f48cbf404a6", 0x88, 0x3ffc0000000, 0x0, 0x0, r8}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x3, r9, &(0x7f00000004c0)="88db1c956cb3e8f20cc4fef138f5cbe7c745c9eafd2e83dfbbf3f749c51593371ea3423fcab3aebda843d5d87fd78213cab828e65637775a0d81023c4286d6de1f4dda373f2430ee2208edf2bfe411d3ca7e069c929ff946cfc210f14266df0d62b2f8584ed69fefbb8261e7cbfe7534d10b02d5b6b2263d3e43b86d6b743fefe6a538b14f94ff10e51886991c700ec96918663912e713e4c29626562a1d86516144413258f161d1869f8552e899096ec94a59f789bf7f0baa5990b59476e2af3765d66fcf4021407f1c47248809828b47ed9238bf9e31a9a0e5105d1541", 0xde, 0x80000001, 0x0, 0x2, r14}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0xc, 0x100, r0, &(0x7f0000000600)="50f6405e5ded50891483889ab737c5a7ed018e702382b4da1f1175af91409490faf5fccbe77d9cbff08d65e616458bab7892c750824d8c5859f2f673faaccb3f5b43e86ad622832d7ecaa556e8cda692e46420d749c5986f9a2ffd26d07707592ade87a9af6eb7880ae2fbe298c7663d5095837ba34423d925ed17b9532c57f5106885f19ff66b", 0x87, 0x85d, 0x0, 0x0, r15}]) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r16 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r16, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e210f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 1082.893646][T24596] usb 2-1: Using ep0 maxpacket: 8 [ 1083.043329][T22410] usb 3-1: device descriptor read/64, error 18 [ 1083.433363][T22410] usb 3-1: device descriptor read/64, error 18 [ 1083.553578][T22410] usb usb3-port1: attempt power cycle 03:09:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1084.083924][T11826] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1084.095556][T11826] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1084.105707][T11826] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1084.117222][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 1084.129436][T11826] usb 1-1: USB disconnect, device number 59 [ 1084.263533][T22410] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1084.303445][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1084.315635][ T3379] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1084.328299][ T3379] usb 4-1: USB disconnect, device number 122 [ 1084.823345][ C1] net_ratelimit: 20 callbacks suppressed [ 1084.823360][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.833627][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.835542][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1084.841290][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1084.854918][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.861196][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1085.053418][ T3379] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1085.293116][ T3379] usb 4-1: Using ep0 maxpacket: 32 [ 1085.413274][ T3379] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1085.421735][ T3379] usb 4-1: config 0 has no interface number 0 [ 1085.428190][ T3379] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1085.437722][ T3379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.448584][ T3379] usb 4-1: config 0 descriptor?? [ 1085.703561][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1085.709848][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1085.716217][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1085.722322][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:09:04 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0xe, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:09:04 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1085.810427][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 1085.844920][ T3379] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1085.871356][ T3379] usb 4-1: USB disconnect, device number 123 [ 1086.223264][ T3379] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1086.463219][ T3379] usb 4-1: Using ep0 maxpacket: 32 [ 1086.583449][ T3379] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1086.591980][ T3379] usb 4-1: config 0 has no interface number 0 [ 1086.598650][ T3379] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1086.607893][ T3379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.617777][ T3379] usb 4-1: config 0 descriptor?? [ 1087.323449][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea 03:09:07 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 03:09:07 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000040)="2f0000001c0003fd6d0000360000000002", 0x11}], 0x1}, 0x4811) r0 = socket(0x10, 0x800000000080002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000200), 0x3e1, &(0x7f0000000100)}], 0x2b2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e22, 0x2, @mcast1, 0x4}, {0xa, 0x4e22, 0x4, @loopback, 0xdc9}, 0x9, [0x3, 0x1b, 0x2, 0x0, 0xe70b, 0x58000000, 0x5, 0x8]}, 0x5c) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) 03:09:07 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:09:07 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1087.963282][T24596] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1087.971114][T24596] usb 2-1: device firmware changed [ 1087.977405][T24596] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1087.977737][T21718] usb 2-1: USB disconnect, device number 116 03:09:07 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:09:07 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="169cf7e5020000202505a1a440000102030109023b000101000000090400000002060000052406000005240000000d240f01950000000000000000090582020000000000090503020000000000"], 0x0) 03:09:07 executing program 4: socket$inet(0x2, 0x2, 0x0) epoll_create(0x5) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0xa121}, 0x10) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) inotify_init1(0x0) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1a65, 0x4, 0xa1, &(0x7f0000ffd000/0x2000)=nil, 0x5}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4}, 0x0, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 1088.333633][T22410] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1088.413294][T21718] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1088.553257][T12200] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1088.573247][T22410] usb 1-1: Using ep0 maxpacket: 32 [ 1088.685398][T21718] usb 2-1: Using ep0 maxpacket: 8 [ 1088.693840][T22410] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1088.702162][T22410] usb 1-1: config 0 has no interface number 0 [ 1088.709064][T22410] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1088.719438][T22410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.730226][T22410] usb 1-1: config 0 descriptor?? [ 1088.837771][T21718] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.848686][T21718] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.860516][T21718] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1088.869784][T21718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.878856][T12200] usb 3-1: device descriptor read/64, error 18 03:09:07 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1088.924744][T21718] hub 2-1:118.0: ignoring external hub [ 1088.966422][T21718] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device 03:09:08 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:09:08 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1089.124356][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1089.136435][ T3379] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1089.171227][ T3379] usb 4-1: USB disconnect, device number 124 [ 1089.293181][T12200] usb 3-1: device descriptor read/64, error 18 [ 1089.433422][T22410] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1089.573093][T12200] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1089.603205][T24660] usb 2-1: reset high-speed USB device number 117 using dummy_hcd [ 1089.843118][T12200] usb 3-1: device descriptor read/64, error 18 [ 1089.853402][T24660] usb 2-1: Using ep0 maxpacket: 8 [ 1089.863566][ C1] net_ratelimit: 20 callbacks suppressed [ 1089.863589][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.875825][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1089.882073][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.883212][ T5] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1089.888326][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1090.143192][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 1090.233172][T12200] usb 3-1: device descriptor read/64, error 18 [ 1090.263352][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1090.271824][ T5] usb 4-1: config 0 has no interface number 0 [ 1090.278296][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1090.288578][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.299834][ T5] usb 4-1: config 0 descriptor?? [ 1090.355697][T12200] usb usb3-port1: attempt power cycle [ 1090.423369][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1090.429774][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:09:09 executing program 4: syz_usb_connect(0x0, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4400, 0x0) 03:09:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1090.643392][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 1090.688731][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1090.707037][ T5] usb 4-1: USB disconnect, device number 125 [ 1091.003380][T22410] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1091.014464][T22410] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1091.024440][T22410] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1091.037099][T22410] usb 1-1: USB disconnect, device number 60 [ 1091.063403][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1091.069612][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1091.073647][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1091.081852][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1091.089352][T12200] usb 3-1: new high-speed USB device number 17 using dummy_hcd 03:09:14 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 03:09:14 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:09:14 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000b40)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/157, 0x9d}], 0x1, &(0x7f0000000240)=""/102, 0x66}, 0x4}, {{&(0x7f00000002c0), 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/73, 0x49}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f00000004c0)=""/223, 0xdf}], 0x3, &(0x7f00000005c0)=""/27, 0x1b}, 0x7}, {{&(0x7f0000000600)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)=""/38, 0x26}, {&(0x7f00000006c0)=""/2, 0x2}, {&(0x7f0000000700)=""/227, 0xe3}, {&(0x7f0000000800)=""/197, 0xc5}], 0x4, &(0x7f0000000940)=""/130, 0x82}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f0000000a40)=""/237, 0xed}, 0x170a}], 0x4, 0x40, &(0x7f0000000c40)) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000c80), 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x141082, 0x4) ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f0000000040)) 03:09:14 executing program 2: prctl$PR_GET_KEEPCAPS(0x7) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000140)=r0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x859, 0x80000) bind$can_raw(r2, &(0x7f00000000c0), 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500150004008178a80016000f000500e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 03:09:14 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:09:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r2 = request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='!\x00', 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000440)={r2, 0x1000, 0xd4}, &(0x7f0000000480)={'enc=', 'pkcs1', ' hash=', {'crct10dif\x00'}}, &(0x7f0000002340)="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", &(0x7f0000000500)=""/212) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000380)={0xa927, 0x129, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2500, 0x0, 0x40000012, r4, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000380)={0xa927, 0x129, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2500, 0x0, 0x40000012, r7, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r4, 0x10, &(0x7f0000000140)={&(0x7f00000000c0), 0x0, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x10, &(0x7f0000000300)={&(0x7f0000000200)=""/134, 0x86, r8}}, 0x10) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000004380)=""/4099, 0x2a000, 0x0, 0xfffffffd}, 0xffffffffffffffd3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x80, 0x1f, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x389e, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sequencer2\x00', 0x80000, 0x0) r12 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/video37\x00', 0x2, 0x0) r13 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r14 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r15 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r13}, {r14}, {r15}], 0x3, 0x0, 0x0, 0x0) r16 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r17 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r18 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r16}, {r17}, {r18}], 0x3, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000700)=[{r11, 0x400}, {r15, 0x2520}, {r12, 0x495c}, {r18, 0x40}], 0x4, 0x0, 0x0, 0x0) bind$unix(r10, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x2c8, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x5, 0xb, @str='\x02\xac\x0f\x00me_type\x00'}]}, 0x269}}, 0x0) [ 1095.003424][T24660] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1095.011280][T24660] usb 2-1: device firmware changed [ 1095.017219][T24660] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1095.023270][T21718] usb 2-1: USB disconnect, device number 117 [ 1095.126731][T24718] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1095.154608][T24724] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1095.170808][T24725] ion_mmap: failure mapping buffer to userspace [ 1095.188903][T24725] ion_mmap: failure mapping buffer to userspace [ 1095.212785][T24725] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1095.223559][ C1] net_ratelimit: 20 callbacks suppressed [ 1095.223581][ C1] protocol 88fb is buggy, dev hsr_slave_0 03:09:14 executing program 2: r0 = shmget(0x1, 0x5000, 0x200, &(0x7f0000ff9000/0x5000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x525, &(0x7f0000000200)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000230035faffffff00000000000400000204001000b115f8b9206ac3d785781200000000c477cb57f565f04b15a9fdd6c1610c621c85fe3e348527b0"], 0x18}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r6}, {r7}, {r8}], 0x3, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xb1c2}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r9 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x8, 0x400) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0], 0x2, 0x8000}) close(r1) [ 1095.235626][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1095.246149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1095.252422][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1095.258841][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1095.265064][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1095.331664][T24725] ion_mmap: failure mapping buffer to userspace [ 1095.374123][T24725] ion_mmap: failure mapping buffer to userspace 03:09:14 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0xc0984124, 0x100000000000000) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000100)={r7, 0x8}, &(0x7f0000000300)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xeb, '\x00r%', "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"}}, 0x110) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x7fff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000400)=0x2, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) [ 1095.423610][T12200] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1095.431659][ T5] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1095.505428][T21718] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1095.572235][T24741] IPVS: ftp: loaded support on port[0] = 21 [ 1095.663794][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 1095.673757][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 1095.774300][T21718] usb 2-1: Using ep0 maxpacket: 8 [ 1095.793700][ T5] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1095.802175][ T5] usb 1-1: config 0 has no interface number 0 [ 1095.808593][ T5] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1095.817866][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.858745][ T5] usb 1-1: config 0 descriptor?? [ 1095.913747][T21718] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.924857][T21718] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.936364][T21718] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1095.945577][T21718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.954067][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1095.962418][T12200] usb 4-1: config 0 has no interface number 0 [ 1095.968774][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1095.977995][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.994929][T12200] usb 4-1: config 0 descriptor?? [ 1096.088386][T21718] hub 2-1:118.0: ignoring external hub [ 1096.106186][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1096.113757][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1096.123441][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1096.131160][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1096.156285][T21718] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device 03:09:15 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0xc0984124, 0x100000000000000) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000100)={r7, 0x8}, &(0x7f0000000300)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xeb, '\x00r%', "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"}}, 0x110) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) ioctl$UI_DEV_DESTROY(r0, 0x5502) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x7fff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000400)=0x2, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) unshare(0x40000000) [ 1096.405447][T24753] IPVS: ftp: loaded support on port[0] = 21 03:09:15 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x230040, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000180)={0x0, 0x0, {0x23, 0x39, 0x1, 0x1c, 0xb, 0xd7c3, 0x2, 0x85}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet_buf(r3, 0x0, 0x17, &(0x7f0000000300)="7dc43baa33540be1010db5e37b17b0cd2692d1530e8d0f68cf639c3eb129ff1c29b828475f8824a5b42427c4e182f60738f1600ac840e00f48dc47bb2e40290353bb54ac9d3efd674f6d6cbcd8ac24f332206896b0f42d826a1f201adff1138bd1cb5f", 0x63) mkdir(&(0x7f0000000140)='./file0\x00', 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mknod$loop(&(0x7f0000000080)='./file0/file1/file0\x00', 0x0, 0xffffffffffffffff) umount2(&(0x7f0000000000)='./file0\x00', 0x2) read$FUSE(r6, &(0x7f00000030c0), 0xfffffed0) write$FUSE_ENTRY(r6, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) r7 = shmget(0x2, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmat(r7, &(0x7f0000ffc000/0x4000)=nil, 0x7800) [ 1096.636148][ T5] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1096.753536][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea 03:09:16 executing program 2: add_key(&(0x7f0000000040)='big_key\x00', 0x0, &(0x7f0000000440)="e07c662cd9b9ce414e27b744da036230af83fc288a4723b3e11ab70a59bfb91f41e1889928561045f3aab484fd1646b053418a38f8e8b05bbd9aa11622ec3626a1cdc77f852e004c4f98a6266e163916b1177d133e5696035cfeeb0e46886f2bd0396236fddffd9fcca18b6d86219efa3beed7aa86d2ad6ceec72e9891a725b51ea6ff6f596075e6fc511b6b764f3a3563cadff77417f1e136186f48f3eac90ad0e095559a1083af3934c43d407e79d3e7332dcdaba0c4707f1afd5a04328a0b905d7637452bd90e4287effb1f8aebc3926984bd11463250d80b1730dc9bd0022f9c6163737b4f69aa70282baa21bd0accef91ed4bbac6f409d0a7b07d0283019d3d2223c68810e150bcb4176aa6d39e64cc64cec57d173f57c57cc9b706c09d4521df0fda094019049480ba3c748f99bb17ca6fbdf6171a9f85d414576956ae1a04bee1e29cc9d8b416c4607d974fb78224727e0e3117dde0e49e28ac23bcb3c61aede83aec6a4e04d93a31b7b1275ceaac4a94b0029b09541301974d6a75d80f90844846234640a9a1753aaf45e762b9cb634c298a9f9ccf4b7412be0ba0424badd62b44e700a51f25853ea44c899485eb0234668866333902ea1208857cea77d726e80d3b84cb0923056668f0ae1025f4fa829cf7218de52953c0ae4905cde674bad7fa37731abd7afc4f62700b9f4fc80cf0b1ccb1d82c17dec5adf9907df5a3cdb3eaa5bedd6e3e2eaf04d3b6e4c81da604077cb80f0c0b779117f3bf8c7f0cb82307b45efec6fd039a7693e5b4e1e0cd4c3cc9c9d4692dc00ab576c2fe45e2c9b22f866ed3e40f987bb498fccc783290d4684a9e4a69b8815d2443bf2f34e8504b37dd7365059729792b0e546c37c34277305da04c69bce394f171d0693d734672eac1478eb40997ffad931bc91a9ac87c31f77f03da4ab79727e56b892f804ae87b2ad6ef357672e329f7225259c9c11481daeb5da40a34cbc614785acee822ff13642833d4c4707134a780b8d94f81acbbbaa8729338bc960e8ea5ccb6256353e212dd1ede0194c910e87f6897c56c2feeec18a9322cc3ef392b7adc7fe51da600347beb0c", 0x309, 0xfffffffffffffffc) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="ecffff01", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r4}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={r4, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x1}}, [0x8003, 0x102, 0xfffffffffffefffe, 0x400, 0x8, 0x5, 0x2f, 0x9, 0x1, 0x108000000, 0x8, 0x5, 0x5, 0x8, 0x5]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e23, @multicast1}}, 0x200, 0x4, 0x3, 0x72f5b069, 0xffffff00}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e24, 0x1, @local, 0x5}}, 0x0, 0xef, 0x1, 0x3e, 0x6}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000000)={r4}, &(0x7f0000000080)=0x8) [ 1097.023180][T24723] usb 2-1: reset high-speed USB device number 118 using dummy_hcd 03:09:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='\x00\x00\x00\xec\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00D', 0xced58f42920a281b) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x880, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") write$binfmt_elf64(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], []]}, 0x478) [ 1097.263278][T24723] usb 2-1: Using ep0 maxpacket: 8 [ 1098.143482][ T5] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1098.154735][ T5] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1098.164971][ T5] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1098.187408][ T5] usb 1-1: USB disconnect, device number 61 [ 1098.533337][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1098.545500][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1098.558131][T12200] usb 4-1: USB disconnect, device number 126 [ 1099.293133][T12200] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1099.533142][T12200] usb 4-1: Using ep0 maxpacket: 32 [ 1099.653259][T12200] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1099.661652][T12200] usb 4-1: config 0 has no interface number 0 [ 1099.668125][T12200] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1099.677575][T12200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.687288][T12200] usb 4-1: config 0 descriptor?? [ 1100.038819][T12200] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 1100.063641][T12200] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1100.086481][T12200] usb 4-1: USB disconnect, device number 127 [ 1100.263616][ C1] net_ratelimit: 20 callbacks suppressed [ 1100.263640][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.275506][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1100.281577][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.287561][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1101.063471][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1101.069697][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1101.463572][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1101.463673][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1101.469850][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1101.475690][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:09:21 executing program 4: syz_emit_ethernet(0xa7, &(0x7f0000000000)={@broadcast, @empty, [], {@x25={0x805, {0x2, 0x20, 0xb, "333f447272325eb1c30091b4d2a67653c01be5dcf0872b125fe8c76f5aabf9d4eb11849cbff0bef1e4fcd0c61f9a7f3dc2ebaae1595c7155f248dee077f5a4debad5f9160e26082fce9b013ca3a22111ae18fb8e717553d956930fad89ccbeb821efcdeea12973e3227703bf5d965b16fd2ec2cbef7f4aed1f7bced4206834183b97e2e0e7578f15448111286b41dc934939ec026e07"}}}}, 0x0) 03:09:21 executing program 2: r0 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='lapb0\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x80, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x122, 0x0) 03:09:21 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:09:21 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:09:21 executing program 3: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="122720e60f0098b83c0000000109021200010000000009049f00006e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1102.363356][T24723] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1102.371173][T24723] usb 2-1: device firmware changed [ 1102.377084][T24723] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1102.383111][T21718] usb 2-1: USB disconnect, device number 118 03:09:21 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 03:09:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) 03:09:21 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0xa, &(0x7f00000003c0)=0x20, 0x4) 03:09:21 executing program 4: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="ae02e5"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) 03:09:21 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) 03:09:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) lgetxattr(0x0, 0x0, &(0x7f0000000380)=""/81, 0x51) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x7530}, {0x0, 0x2710}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x80000000000005f, 0x0, 0x0, [{}]}) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fstatfs(r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r2, &(0x7f00000017c0), 0x33d, 0x5000000) syz_open_dev$ndb(0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) [ 1102.745514][T12200] usb 1-1: new high-speed USB device number 62 using dummy_hcd 03:09:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079112400000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1102.873156][T21718] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1103.023267][T12200] usb 1-1: Using ep0 maxpacket: 32 [ 1103.113231][T21718] usb 2-1: Using ep0 maxpacket: 8 [ 1103.143397][T12200] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1103.151858][T12200] usb 1-1: config 0 has no interface number 0 [ 1103.158583][T12200] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1103.168018][T12200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.179748][T12200] usb 1-1: config 0 descriptor?? [ 1103.253482][T21718] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.264233][T21718] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.275668][T21718] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1103.284871][T21718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.335215][T21718] hub 2-1:118.0: ignoring external hub [ 1103.347733][T21718] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1103.873455][T12200] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1103.973244][T24789] usb 2-1: reset high-speed USB device number 119 using dummy_hcd [ 1104.233185][T24789] usb 2-1: Using ep0 maxpacket: 8 [ 1104.403422][T24789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1104.411333][T24789] usb 2-1: device firmware changed [ 1104.418867][T24789] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1104.419271][T21718] usb 2-1: USB disconnect, device number 119 [ 1104.593258][T21718] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1104.833208][T21718] usb 2-1: Using ep0 maxpacket: 8 [ 1104.993500][T21718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1105.073231][T21718] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.084524][T21718] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1105.094535][T21718] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1105.273508][T21718] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1105.282780][T21718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.291070][T21718] usb 2-1: Product: syz [ 1105.295552][T21718] usb 2-1: Manufacturer: syz [ 1105.300197][T21718] usb 2-1: SerialNumber: syz [ 1105.393481][T12200] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1105.404419][T12200] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1105.414321][T12200] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1105.426601][T12200] usb 1-1: USB disconnect, device number 62 03:09:24 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 03:09:24 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x163, 0x11, 0xd8}]}, &(0x7f00000003c0)='6PL\x00\x11\xbf\x1e\xa2\xec\xfb\x1e\xc96\x96F\x97\x04\x7fguD=wI;\xf4\x95\x0e\xdal\x98\x8e\xee\xdat\x02`\"\xe8\x84<\x810 \xd4\xf2\x92\x81L\xd4\xb9\xfbgB_\x13\xfd\xfd\x89\x10\xec@\xf5\xd7\x0e\x1b\xceG\xfd\xb3D\x80l\\\xe4Dl\xc3\r\xadC\x1d\xf8[\x16{\"\x8c\xf9DcQ\x9e\x13\x89\xffJ\x1e\x9e\xa3\xbd<\x0e9\xf6\xbb\xad\"E\xe7F\xe5\xd5%\x92\x8aa\v\xfb\x18\x1fY\xe3&\x95\xa6\xc3\x81_R}<\xa5\t\xe7L\xe3\x7f\xad:\xe7NO\x8d\xef\xc8\x1a\xb6a\xc3\xb39_{\xe0\x92\x93\x11F@-s\"w\x810\b\xa6\x1fF\xe4\xec%\xedR\x04\x01\x9a\xe1T(\x0f\xd0\xaf\xa3\x94\xd4\xf1v\xfa\xc0\x11l\xb5\x8eB\x82\f\x04\x9d}\x062\xad\xdd\xedt\xd1\x02\xc6rM\\\x8d\xc8!\x81\x9e\xe5\xd3\xfa\xb3\xf7\xe5\xafa\xd7\xa0.u\xc2{\x8d\x17\xf7\x10\x00\xa7\xbd\x84\xd5E\x1ei\x92[k=j\x9f\xcc\xa73\x9f\xca\xa8\xbcc\x8e\xb9\xb5\xdf\xdd\xbf\x8b\xd9\xeb\xc2\xbd\xf8R\x0f\x00\x00\x00\x00', 0x100000000004, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:09:24 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x42b, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0xb, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'c\x9at\xde\xd8\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1c04000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x24, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408d6}, 0x44044104) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000003c0)=0x200880, 0x4) 03:09:24 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x5, &(0x7f00000003c0)=0x4, 0x11f) [ 1105.543908][T21718] cdc_ncm 2-1:1.0: bind() failure [ 1105.555818][T21718] cdc_ncm 2-1:1.1: bind() failure [ 1105.614163][T21718] usb 2-1: USB disconnect, device number 120 [ 1105.623458][ C0] net_ratelimit: 19 callbacks suppressed [ 1105.623479][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1105.633632][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1105.635535][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1105.641314][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1105.647246][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1105.658793][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1105.823231][ T3379] usb 4-1: new high-speed USB device number 2 using dummy_hcd 03:09:24 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:09:24 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb", 0x42}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:09:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x7530}, {0x0, 0x2710}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x2000000) syz_open_dev$ndb(0x0, 0x0, 0x0) 03:09:24 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x163, 0x11, 0xd8}]}, &(0x7f00000003c0)='6PL\x00\x11\xbf\x1e\xa2\xec\xfb\x1e\xc96\x96F\x97\x04\x7fguD=wI;\xf4\x95\x0e\xdal\x98\x8e\xee\xdat\x02`\"\xe8\x84<\x810 \xd4\xf2\x92\x81L\xd4\xb9\xfbgB_\x13\xfd\xfd\x89\x10\xec@\xf5\xd7\x0e\x1b\xceG\xfd\xb3D\x80l\\\xe4Dl\xc3\r\xadC\x1d\xf8[\x16{\"\x8c\xf9DcQ\x9e\x13\x89\xffJ\x1e\x9e\xa3\xbd<\x0e9\xf6\xbb\xad\"E\xe7F\xe5\xd5%\x92\x8aa\v\xfb\x18\x1fY\xe3&\x95\xa6\xc3\x81_R}<\xa5\t\xe7L\xe3\x7f\xad:\xe7NO\x8d\xef\xc8\x1a\xb6a\xc3\xb39_{\xe0\x92\x93\x11F@-s\"w\x810\b\xa6\x1fF\xe4\xec%\xedR\x04\x01\x9a\xe1T(\x0f\xd0\xaf\xa3\x94\xd4\xf1v\xfa\xc0\x11l\xb5\x8eB\x82\f\x04\x9d}\x062\xad\xdd\xedt\xd1\x02\xc6rM\\\x8d\xc8!\x81\x9e\xe5\xd3\xfa\xb3\xf7\xe5\xafa\xd7\xa0.u\xc2{\x8d\x17\xf7\x10\x00\xa7\xbd\x84\xd5E\x1ei\x92[k=j\x9f\xcc\xa73\x9f\xca\xa8\xbcc\x8e\xb9\xb5\xdf\xdd\xbf\x8b\xd9\xeb\xc2\xbd\xf8R\x0f\x00\x00\x00\x00', 0x100000000004, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:09:25 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) 03:09:25 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) [ 1106.053184][T21718] usb 2-1: new high-speed USB device number 121 using dummy_hcd 03:09:25 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb", 0x42}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1106.104481][ T3379] usb 4-1: Using ep0 maxpacket: 32 03:09:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) lgetxattr(0x0, 0x0, &(0x7f0000000380)=""/81, 0x51) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x7530}, {0x0, 0x2710}}, 0x0) fstatfs(0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x2ee, 0x0, 0xf3a0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x2000000) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 1106.225688][T22410] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1106.243791][ T3379] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1106.252218][ T3379] usb 4-1: config 0 has no interface number 0 [ 1106.258670][ T3379] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1106.267959][ T3379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.278085][ T3379] usb 4-1: config 0 descriptor?? [ 1106.293468][T21718] usb 2-1: Using ep0 maxpacket: 8 [ 1106.413914][T21718] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.424612][T21718] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.436005][T21718] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1106.445171][T21718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.493141][T22410] usb 1-1: Using ep0 maxpacket: 32 [ 1106.495077][T21718] hub 2-1:118.0: ignoring external hub [ 1106.513331][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1106.513436][T21718] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1106.520687][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1106.532741][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1106.539089][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1106.643306][T22410] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1106.651822][T22410] usb 1-1: config 0 has no interface number 0 [ 1106.658177][T22410] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1106.667442][T22410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.677199][T22410] usb 1-1: config 0 descriptor?? [ 1106.983732][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1107.143242][T24834] usb 2-1: reset high-speed USB device number 121 using dummy_hcd [ 1107.373360][T22410] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1107.393169][T24834] usb 2-1: Using ep0 maxpacket: 8 [ 1107.553538][T24834] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1107.561358][T24834] usb 2-1: device firmware changed [ 1107.570583][T24834] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1107.570714][T21718] usb 2-1: USB disconnect, device number 121 [ 1107.733049][T21718] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1107.983125][T21718] usb 2-1: Using ep0 maxpacket: 8 [ 1108.153414][T21718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1108.233399][T21718] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.244762][T21718] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1108.254766][T21718] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1108.423477][T21718] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1108.432774][T21718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.441128][T21718] usb 2-1: Product: syz [ 1108.445460][T21718] usb 2-1: Manufacturer: syz [ 1108.450140][T21718] usb 2-1: SerialNumber: syz 03:09:27 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 03:09:27 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x2}}}}]}, 0x4c}}, 0x0) [ 1108.625333][T21718] cdc_ncm 2-1:1.0: bind() failure [ 1108.636299][T21718] cdc_ncm 2-1:1.1: bind() failure [ 1108.676637][T21718] usb 2-1: USB disconnect, device number 122 [ 1108.763419][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1108.776220][ T3379] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1108.794659][ T3379] usb 4-1: USB disconnect, device number 2 [ 1108.913853][T22410] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1108.924868][T22410] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1108.934677][T22410] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1108.947992][T22410] usb 1-1: USB disconnect, device number 63 [ 1109.093123][T21718] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1109.343092][T21718] usb 2-1: Using ep0 maxpacket: 8 [ 1109.503269][T21718] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.513216][T22410] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1109.513948][T21718] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.532388][T21718] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1109.541623][T21718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.594674][T21718] hub 2-1:118.0: ignoring external hub [ 1109.606272][T21718] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1109.753181][T22410] usb 4-1: Using ep0 maxpacket: 32 [ 1109.873530][T22410] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1109.881900][T22410] usb 4-1: config 0 has no interface number 0 [ 1109.888472][T22410] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1109.897779][T22410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.907453][T22410] usb 4-1: config 0 descriptor?? 03:09:29 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080fd2720e306c10601fa54daecefe60f000abc75375198b83c000000010902120001ffff000009049f00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:09:29 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x18}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xd8}]}, &(0x7f0000000080)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1c0}, 0x48) 03:09:29 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x4001000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{}, {0x20000010304, @local}, 0x0, {0x2, 0x0, @local}, '\xf9\xff\xdd\xff\x00\x00\x00\x01\x00fG\x00\x00\x00\x00\x80'}) socket$inet_tcp(0x2, 0x1, 0x0) [ 1110.233358][T24875] usb 2-1: reset high-speed USB device number 123 using dummy_hcd 03:09:29 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb", 0x42}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:09:29 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1110.303089][T22410] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 1110.336348][T22410] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1110.366146][T22410] usb 4-1: USB disconnect, device number 3 03:09:29 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000100)=""/110, 0x6e, 0x0, &(0x7f0000000200)=@abs, 0x6e) 03:09:29 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x2, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 03:09:29 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000b060501ff0000fffdffff2ef6ff04610c000100060000007d0a01010c0002"], 0x23}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 1110.513487][T24875] usb 2-1: Using ep0 maxpacket: 8 03:09:29 executing program 4: [ 1110.593797][T11826] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1110.656822][T24911] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 1110.663825][ C1] net_ratelimit: 20 callbacks suppressed [ 1110.663847][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1110.677212][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1110.684453][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1110.690801][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:09:29 executing program 4: [ 1110.703222][T24875] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1110.711166][T24875] usb 2-1: device firmware changed [ 1110.727055][T24875] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1110.734669][ T3379] usb 2-1: USB disconnect, device number 123 [ 1110.813592][T22410] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1110.833551][T11826] usb 1-1: Using ep0 maxpacket: 32 [ 1110.913404][ T3379] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1110.953392][T11826] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1110.962038][T11826] usb 1-1: config 0 has no interface number 0 [ 1110.968489][T11826] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1110.978101][T11826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.988557][T11826] usb 1-1: config 0 descriptor?? [ 1111.053304][T22410] usb 4-1: Using ep0 maxpacket: 32 [ 1111.103653][T22410] usb 4-1: too many configurations: 239, using maximum allowed: 8 [ 1111.183122][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 1111.233589][T22410] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1111.241481][T22410] usb 4-1: can't read configurations, error -61 [ 1111.343385][ T3379] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1111.393257][T22410] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1111.428301][ T3379] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.439962][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1111.450040][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1111.463556][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1111.469835][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1111.613902][ T3379] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1111.623632][ T3379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.632001][ T3379] usb 2-1: Product: syz [ 1111.636566][ T3379] usb 2-1: Manufacturer: syz [ 1111.641290][ T3379] usb 2-1: SerialNumber: syz 03:09:30 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}}) 03:09:30 executing program 4: [ 1111.673245][T22410] usb 4-1: Using ep0 maxpacket: 32 [ 1111.693594][ T3379] usb 2-1: can't set config #1, error -71 [ 1111.712207][ T3379] usb 2-1: USB disconnect, device number 124 [ 1111.720616][T22410] usb 4-1: too many configurations: 239, using maximum allowed: 8 [ 1111.843625][T22410] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1111.851396][T22410] usb 4-1: can't read configurations, error -61 [ 1111.858500][T22410] usb usb4-port1: attempt power cycle [ 1111.864632][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1111.865065][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1111.873631][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1111.885950][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1112.133145][ T3379] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1112.373219][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 1112.493510][ T3379] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.504661][ T3379] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.517340][ T3379] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1112.526618][ T3379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.574781][ T3379] hub 2-1:118.0: ignoring external hub [ 1112.587416][ T3379] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1112.605548][T22410] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1112.853126][T22410] usb 4-1: Using ep0 maxpacket: 32 [ 1112.894872][T22410] usb 4-1: too many configurations: 239, using maximum allowed: 8 [ 1113.023535][T22410] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1113.031617][T22410] usb 4-1: can't read configurations, error -61 [ 1113.183410][T22410] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1113.203436][T24921] usb 2-1: reset high-speed USB device number 125 using dummy_hcd [ 1113.333553][T11826] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 1113.367828][T11826] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1113.393599][T11826] usb 1-1: USB disconnect, device number 64 [ 1113.423204][T22410] usb 4-1: Using ep0 maxpacket: 32 03:09:32 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:09:32 executing program 4: 03:09:32 executing program 2: 03:09:32 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:09:32 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2a", 0x63}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1113.463413][T24921] usb 2-1: Using ep0 maxpacket: 8 [ 1113.468854][T22410] usb 4-1: too many configurations: 239, using maximum allowed: 8 [ 1113.534101][T22410] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1113.541933][T22410] usb 4-1: can't read configurations, error -71 [ 1113.565188][T22410] usb usb4-port1: unable to enumerate USB device 03:09:32 executing program 4: 03:09:32 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x163, 0x11, 0xd8}]}, &(0x7f00000003c0)='6PL\x00\x11\xbf\x1e\xa2\xec\xfb\x1e\xc96\x96F\x97\x04\x7fguD=wI;\xf4\x95\x0e\xdal\x98\x8e\xee\xdat\x02`\"\xe8\x84<\x810 \xd4\xf2\x92\x81L\xd4\xb9\xfbgB_\x13\xfd\xfd\x89\x10\xec@\xf5\xd7\x0e\x1b\xceG\xfd\xb3D\x80l\\\xe4Dl\xc3\r\xadC\x1d\xf8[\x16{\"\x8c\xf9DcQ\x9e\x13\x89\xffJ\x1e\x9e\xa3\xbd<\x0e9\xf6\xbb\xad\"E\xe7F\xe5\xd5%\x92\x8aa\v\xfb\x18\x1fY\xe3&\x95\xa6\xc3\x81_R}<\xa5\t\xe7L\xe3\x7f\xad:\xe7NO\x8d\xef\xc8\x1a\xb6a\xc3\xb39_{\xe0\x92\x93\x11F@-s\"w\x810\b\xa6\x1fF\xe4\xec%\xedR\x04\x01\x9a\xe1T(\x0f\xd0\xaf\xa3\x94\xd4\xf1v\xfa\xc0\x11l\xb5\x8eB\x82\f\x04\x9d}\x062\xad\xdd\xedt\xd1\x02\xc6rM\\\x8d\xc8!\x81\x9e\xe5\xd3\xfa\xb3\xf7\xe5\xafa\xd7\xa0.u\xc2{\x8d\x17\xf7\x10\x00\xa7\xbd\x84\xd5E\x1ei\x92[k=j\x9f\xcc\xa73\x9f\xca\xa8\xbcc\x8e\xb9\xb5\xdf\xdd\xbf\x8b\xd9\xeb\xc2\xbd\xf8R\x0f\x00\x00\x00\x00', 0x100000000004, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1113.593468][T24921] usb 2-1: device firmware changed [ 1113.611065][T24921] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1113.617902][ T3379] usb 2-1: USB disconnect, device number 125 03:09:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x13, 0x0, 0x0) 03:09:32 executing program 2: syz_emit_ethernet(0xae, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x78, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x4000], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x608], {0x0, 0x6, "c5961e", 0x2, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @loopback, [@dstopts={0x0, 0x4, [], [@jumbo, @ra, @jumbo, @jumbo, @enc_lim, @ra, @jumbo]}, @routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}]}}}}}}}, 0x0) [ 1113.807819][ T3379] usb 2-1: new high-speed USB device number 126 using dummy_hcd 03:09:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000500)=[@clear_death={0x40106309}], 0x0, 0x0, 0x0}) [ 1113.974370][T11826] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1114.013739][T22410] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1114.053390][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 1114.213203][T11826] usb 1-1: Using ep0 maxpacket: 32 [ 1114.253551][ T3379] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.264915][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1114.275163][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1114.285387][T22410] usb 4-1: Using ep0 maxpacket: 32 [ 1114.363468][T11826] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1114.371983][T11826] usb 1-1: config 0 has no interface number 0 [ 1114.378436][T11826] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1114.387626][T11826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.397584][T11826] usb 1-1: config 0 descriptor?? [ 1114.433471][T22410] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1114.442114][T22410] usb 4-1: config 0 has no interface number 0 [ 1114.448615][T22410] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1114.457910][T22410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.470334][T22410] usb 4-1: config 0 descriptor?? [ 1114.503627][ T3379] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1114.513541][ T3379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.521645][ T3379] usb 2-1: Product: syz [ 1114.526205][ T3379] usb 2-1: Manufacturer: syz [ 1114.530951][ T3379] usb 2-1: SerialNumber: syz 03:09:33 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}}) 03:09:33 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x40000000002) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, &(0x7f0000001340)={0x8, "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", 0x1000}, 0x1006) open(0x0, 0x0, 0x0) [ 1114.773536][ T3379] cdc_ncm 2-1:1.0: bind() failure [ 1114.786059][ T3379] cdc_ncm 2-1:1.1: bind() failure [ 1114.851443][ T3379] usb 2-1: USB disconnect, device number 126 [ 1115.173404][T22410] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1115.233234][ T3379] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1115.473143][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 1115.593299][ T3379] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.604013][ T3379] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1115.615369][ T3379] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1115.625383][ T3379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.674572][ T3379] hub 2-1:118.0: ignoring external hub [ 1115.688500][ T3379] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1116.023429][ C1] net_ratelimit: 22 callbacks suppressed [ 1116.023450][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.033526][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.035702][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1116.041569][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1116.053555][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.059748][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1116.283363][T24966] usb 2-1: reset high-speed USB device number 127 using dummy_hcd [ 1116.523273][T24966] usb 2-1: Using ep0 maxpacket: 8 [ 1116.586001][T11826] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 1116.613736][T11826] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1116.626734][T11826] usb 1-1: USB disconnect, device number 65 [ 1116.643376][T24966] usb 2-1: device firmware changed [ 1116.649237][T24966] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1116.655789][ T3379] usb 2-1: USB disconnect, device number 127 [ 1116.813083][ T3379] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1116.903276][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.909616][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1116.915988][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.922068][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1116.931430][T22410] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1116.943487][T22410] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1116.961339][T22410] usb 4-1: USB disconnect, device number 8 [ 1117.073196][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 1117.273520][ T3379] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.284711][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1117.294706][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1117.463568][ T3379] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1117.472779][ T3379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.481027][ T3379] usb 2-1: Product: syz [ 1117.485488][ T3379] usb 2-1: Manufacturer: syz [ 1117.490189][ T3379] usb 2-1: SerialNumber: syz [ 1117.683193][T22410] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1117.773449][ T3379] cdc_ncm 2-1:1.0: bind() failure [ 1117.783777][ T3379] cdc_ncm 2-1:1.1: bind() failure [ 1117.793971][ T3379] usb 2-1: USB disconnect, device number 2 [ 1117.923101][T22410] usb 4-1: Using ep0 maxpacket: 32 [ 1118.043297][T22410] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1118.051746][T22410] usb 4-1: config 0 has no interface number 0 [ 1118.058180][T22410] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1118.067374][T22410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.077081][T22410] usb 4-1: config 0 descriptor?? 03:09:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0xc, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:09:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd486321f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae08c351a1fbe96dd872357f3374f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) r2 = socket$kcm(0x11, 0x8000000002, 0x300) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, r0, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000240)={0x2, 0x2, [@remote, @empty]}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001d80)=r1, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) 03:09:37 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2a", 0x63}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:09:37 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:09:37 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}}) 03:09:37 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{0xffffffffffffffff, 0x305e}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES16, @ANYRES16=r0]], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040)=0xf1, 0x4) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f00000000c0)={0x6}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1118.453753][T22410] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1118.513492][T22410] usb 4-1: USB disconnect, device number 9 03:09:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000500)=[@clear_death={0x400c630e}], 0x0, 0x0, 0x0}) 03:09:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x15, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) 03:09:37 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/vhost-net\x00', 0x2, 0x0) readv(r0, &(0x7f0000001e40)=[{&(0x7f0000001900)=""/98, 0x62}], 0x1) [ 1118.773217][ T3379] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1118.795446][T11826] usb 2-1: new high-speed USB device number 3 using dummy_hcd 03:09:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0xb801, 0x3334}}}}}]}, 0x48}}, 0x0) 03:09:38 executing program 2: socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x13, 0x0, &(0x7f0000000040)) 03:09:38 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/unix\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000865ff5)='clear_refs\x00') sendfile(r4, r0, &(0x7f0000000000)=0xf, 0x875) [ 1119.014421][ T3379] usb 1-1: Using ep0 maxpacket: 32 03:09:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x7d) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e5080000273d26ce5e525601226e94e12c24405681e0ffffff00000000000000000000000000000000004000", "0ec806aa37c991831eb25895d52dc4092a46931c5c1959d6b4be05e571a62983"}) [ 1119.044757][T11826] usb 2-1: Using ep0 maxpacket: 8 03:09:38 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r2, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) [ 1119.134835][ T3379] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1119.144266][ T3379] usb 1-1: config 0 has no interface number 0 [ 1119.150607][ T3379] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1119.159978][ T3379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.183837][T11826] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.194525][T11826] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.205829][T11826] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1119.215054][T11826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.247411][ T3379] usb 1-1: config 0 descriptor?? [ 1119.306490][T11826] hub 2-1:118.0: ignoring external hub [ 1119.332993][T11826] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1119.923267][T24990] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 1120.163142][T24990] usb 2-1: Using ep0 maxpacket: 8 [ 1120.283382][T24990] usb 2-1: device firmware changed [ 1120.290434][T24990] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1120.296563][T21718] usb 2-1: USB disconnect, device number 3 [ 1120.453228][T21718] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1120.693121][T21718] usb 2-1: Using ep0 maxpacket: 8 [ 1120.893378][T21718] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.904765][T21718] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1120.914921][T21718] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1121.063564][ C1] net_ratelimit: 20 callbacks suppressed [ 1121.063589][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.075738][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1121.081822][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.088071][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1121.093297][T21718] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1121.103218][T21718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.111465][T21718] usb 2-1: Product: syz [ 1121.115838][T21718] usb 2-1: Manufacturer: syz [ 1121.120708][T21718] usb 2-1: SerialNumber: syz [ 1121.403545][T21718] cdc_ncm 2-1:1.0: bind() failure [ 1121.414034][T21718] cdc_ncm 2-1:1.1: bind() failure [ 1121.428683][T21718] usb 2-1: USB disconnect, device number 4 03:09:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2a", 0x63}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:09:40 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1121.525075][ T3379] CoreChips 1-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 1121.564025][ T3379] CoreChips: probe of 1-1:0.159 failed with error -71 [ 1121.578338][ T3379] usb 1-1: USB disconnect, device number 66 03:09:40 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000001400)) 03:09:40 executing program 2: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x85, 0x7fffffff, 0xca}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 03:09:40 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r3, 0xae00, 0x0) syz_usb_control_io(r0, 0x0, 0x0) fsetxattr(r2, &(0x7f0000000000)=@known='system.posix_acl_access\x00', &(0x7f0000000040)='/dev/uhid\x00', 0xa, 0x2) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80000, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000100)=0x81, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)=ANY=[@ANYBLOB="0000f88ff2ca4503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1121.863586][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.870036][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:09:40 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r2, r1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 1121.953194][ T3379] usb 1-1: new high-speed USB device number 67 using dummy_hcd 03:09:41 executing program 2: 03:09:41 executing program 4: 03:09:41 executing program 2: 03:09:41 executing program 4: 03:09:41 executing program 1: [ 1122.193241][ T3379] usb 1-1: Using ep0 maxpacket: 32 [ 1122.233080][T21718] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1122.263406][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1122.263514][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1122.269599][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1122.275521][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:09:41 executing program 2: [ 1122.329055][ T3379] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1122.337496][ T3379] usb 1-1: config 0 has no interface number 0 [ 1122.344192][ T3379] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1122.353361][ T3379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.420005][ T3379] usb 1-1: config 0 descriptor?? [ 1122.496039][T21718] usb 4-1: Using ep0 maxpacket: 32 [ 1122.623413][T21718] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1122.631820][T21718] usb 4-1: config 0 has no interface number 0 [ 1122.638162][T21718] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1122.647409][T21718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.657630][T21718] usb 4-1: config 0 descriptor?? [ 1122.903743][ T3379] CoreChips: probe of 1-1:0.159 failed with error -22 [ 1123.363602][T21718] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea 03:09:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97a", 0x73}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:09:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x0) 03:09:43 executing program 1: 03:09:43 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1124.569263][ T3379] usb 1-1: USB disconnect, device number 67 [ 1124.933409][T21718] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 1124.983227][ T3379] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1125.153418][T21718] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1125.165456][T21718] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1125.178429][T21718] usb 4-1: USB disconnect, device number 10 [ 1125.225305][ T3379] usb 1-1: Using ep0 maxpacket: 32 [ 1125.343269][ T3379] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1125.351628][ T3379] usb 1-1: config 0 has no interface number 0 [ 1125.358011][ T3379] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1125.367236][ T3379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.377103][ T3379] usb 1-1: config 0 descriptor?? [ 1125.853576][ T3379] CoreChips: probe of 1-1:0.159 failed with error -22 [ 1125.903177][T22410] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1126.143069][T22410] usb 4-1: Using ep0 maxpacket: 32 [ 1126.263393][T22410] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1126.271782][T22410] usb 4-1: config 0 has no interface number 0 [ 1126.278320][T22410] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1126.287629][T22410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.297518][T22410] usb 4-1: config 0 descriptor?? [ 1126.423490][ C1] net_ratelimit: 20 callbacks suppressed [ 1126.423514][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1126.423941][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1126.429708][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1126.435758][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1126.453168][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:09:45 executing program 4: 03:09:45 executing program 2: 03:09:45 executing program 1: 03:09:45 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r3}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x1}}, [0x8003, 0x102, 0xfffffffffffefffe, 0x400, 0x8, 0x5, 0x2f, 0x9, 0x1, 0x108000000, 0x8, 0x5, 0x5, 0x8, 0x5]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r3, 0x20}, 0x8) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:09:45 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97a", 0x73}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1126.673597][T22410] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1126.696231][T22410] usb 4-1: USB disconnect, device number 11 03:09:45 executing program 2: 03:09:45 executing program 1: 03:09:45 executing program 4: 03:09:46 executing program 2: 03:09:46 executing program 1: 03:09:46 executing program 4: [ 1127.147469][T22410] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1127.303476][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1127.309733][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1127.316077][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1127.322255][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1127.393288][T22410] usb 4-1: Using ep0 maxpacket: 32 [ 1127.513488][T22410] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1127.521905][T22410] usb 4-1: config 0 has no interface number 0 [ 1127.528276][T22410] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1127.537471][T22410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.547070][T22410] usb 4-1: config 0 descriptor?? 03:09:46 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:09:46 executing program 1: 03:09:46 executing program 4: 03:09:46 executing program 2: [ 1127.636652][ T3379] usb 1-1: USB disconnect, device number 68 [ 1128.093151][ T3379] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1128.103459][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1128.243311][T22410] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1128.333076][ T3379] usb 1-1: Using ep0 maxpacket: 32 [ 1128.453426][ T3379] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1128.461713][ T3379] usb 1-1: config 0 has no interface number 0 [ 1128.468041][ T3379] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1128.477202][ T3379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.487253][ T3379] usb 1-1: config 0 descriptor?? [ 1128.963528][ T3379] CoreChips: probe of 1-1:0.159 failed with error -22 [ 1130.003265][T22410] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1130.015478][T22410] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1130.027471][T22410] usb 4-1: USB disconnect, device number 12 [ 1130.711587][T12200] usb 1-1: USB disconnect, device number 69 [ 1130.753307][T21718] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1130.993090][T21718] usb 4-1: Using ep0 maxpacket: 32 [ 1131.113361][T21718] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1131.121625][T21718] usb 4-1: config 0 has no interface number 0 [ 1131.127961][T21718] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1131.137170][T21718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.146813][T21718] usb 4-1: config 0 descriptor?? 03:09:50 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRESHEX, @ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT=r5]], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1131.463451][ C1] net_ratelimit: 19 callbacks suppressed [ 1131.463476][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.475430][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1131.481590][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.487757][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:09:50 executing program 2: 03:09:50 executing program 1: 03:09:50 executing program 4: 03:09:50 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97a", 0x73}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:09:50 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1131.523349][T21718] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 1131.596430][T21718] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1131.630234][T21718] usb 4-1: USB disconnect, device number 13 03:09:50 executing program 1: 03:09:50 executing program 2: 03:09:50 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 03:09:50 executing program 2: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x31, &(0x7f00000003c0), 0x4) 03:09:50 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0800b5055e0bcfe87b2071") syz_emit_ethernet(0x4a, &(0x7f0000000600)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x33, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:09:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) ioctl$void(0xffffffffffffffff, 0xc0042600) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000180)=0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000540)=""/196) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x1) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1131.843628][T22410] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1132.083612][T22410] usb 1-1: Using ep0 maxpacket: 32 [ 1132.204044][T22410] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1132.212383][T22410] usb 1-1: config 0 has no interface number 0 [ 1132.218831][T22410] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1132.228047][T22410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.237909][T22410] usb 1-1: config 0 descriptor?? [ 1132.263411][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1132.270296][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:09:51 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}}) 03:09:51 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:09:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c00020008001b00000000009e71901ef2eeac0a928422ddff9764ec09987f12015df9336acef8fa953f6105e6e6e23128e1e018702b7f896fbd83be5f871c1a207e043871af858178a11b3a16f24a99b98deeba305aa6c93429d420c31ccbffa94161"], 0x3c}}, 0x0) [ 1132.663618][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1132.663633][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1132.664073][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1132.669868][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:09:51 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="fcce5c1819981d2a"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r5, {}, {}, {0x3}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x3}}]}, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r8 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r8}, {r9}, {r10}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000340)=0xe8) r12 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r13 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r14 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r12}, {r13}, {r14}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r14, 0x0, 0x10, &(0x7f0000000380)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$netlink(0x10, 0x3, 0x0) r18 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r17, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYPTR, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="fcce5c1819981d2a"], 0x5}}, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r19, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r20 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r19, {}, {}, {0x3}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x3}}]}, 0x30}}, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) r22 = socket$netlink(0x10, 0x3, 0x0) r23 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r23, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r23, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r22, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r24, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="fcce5c1819981d2a"], 0x48}}, 0x0) sendmsg$nl_route_sched(r21, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r24, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r25 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r25, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r24, {}, {}, {0x3}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x3}}]}, 0x30}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x14, 0x80000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000900)={&(0x7f0000000580)=ANY=[@ANYBLOB="70030000", @ANYRES16=0x0, @ANYBLOB="000827bd7000fcdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="9c01020038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400ffffffff38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000600000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r15, @ANYBLOB="b001020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004008606000008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000400000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="400001002400010071756575655f0064000000000000000000000000000000000000000000000000080003000300000008000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r26], 0x370}}, 0x90) r27 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r28 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r27}, {r28}], 0x3, 0x0, 0x0, 0x0) connect$pptp(r28, &(0x7f0000000000)={0x18, 0x2, {0x0, @loopback}}, 0x1e) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1132.724083][T22410] CoreChips: probe of 1-1:0.159 failed with error -22 [ 1132.983341][T21718] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1133.013261][T12200] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1133.053407][ T5] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1133.233159][T21718] usb 3-1: Using ep0 maxpacket: 8 [ 1133.253520][T12200] usb 2-1: Using ep0 maxpacket: 8 [ 1133.293475][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 1133.353603][T21718] usb 3-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.364333][T21718] usb 3-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.375888][T21718] usb 3-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1133.385096][T21718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.395964][T12200] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.406484][T12200] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.418133][T12200] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1133.427351][T12200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.473761][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1133.483514][ T5] usb 4-1: config 0 has no interface number 0 [ 1133.489926][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1133.499246][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.509236][T21718] hub 3-1:118.0: ignoring external hub [ 1133.519406][T12200] hub 2-1:118.0: ignoring external hub [ 1133.528042][ T5] usb 4-1: config 0 descriptor?? [ 1133.534219][T21718] cdc_wdm 3-1:118.0: cdc-wdm0: USB WDM device [ 1133.546182][T12200] cdc_wdm 2-1:118.0: cdc-wdm1: USB WDM device [ 1133.688132][T25186] FAULT_INJECTION: forcing a failure. [ 1133.688132][T25186] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.701626][T25186] CPU: 0 PID: 25186 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1133.709589][T25186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1133.719685][T25186] Call Trace: [ 1133.723041][T25186] dump_stack+0x191/0x1f0 [ 1133.727496][T25186] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1133.727560][T25186] should_fail+0xa3f/0xa50 [ 1133.727631][T25186] __should_failslab+0x264/0x280 [ 1133.738009][T25186] should_failslab+0x29/0x70 [ 1133.747603][T25186] kmem_cache_alloc+0xd6/0xd10 [ 1133.752441][T25186] ? getname_flags+0x12e/0xb00 [ 1133.757256][T25186] getname_flags+0x12e/0xb00 [ 1133.761913][T25186] ? __msan_poison_alloca+0x158/0x1b0 [ 1133.767411][T25186] getname+0x55/0x60 [ 1133.771421][T25186] do_sys_open+0x53e/0xa30 [ 1133.775906][T25186] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1133.781873][T25186] __se_sys_open+0xad/0xc0 [ 1133.786346][T25186] __x64_sys_open+0x4a/0x70 [ 1133.790934][T25186] do_syscall_64+0xb6/0x160 [ 1133.795590][T25186] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1133.801509][T25186] RIP: 0033:0x413941 [ 1133.805462][T25186] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1133.825280][T25186] RSP: 002b:00007fbc2a74d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1133.833731][T25186] RAX: ffffffffffffffda RBX: 00007fbc2a74dc90 RCX: 0000000000413941 [ 1133.841765][T25186] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007fbc2a74d7d0 [ 1133.849783][T25186] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000f [ 1133.857784][T25186] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fbc2a74e6d4 [ 1133.865781][T25186] R13: 00000000004c9044 R14: 00000000004e0628 R15: 0000000000000004 [ 1133.993514][ T3379] usb 2-1: USB disconnect, device number 5 [ 1134.253320][T25183] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 1134.320705][T25189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1134.339526][T25189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1134.366331][T25189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1134.383866][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1134.493194][T25183] usb 3-1: Using ep0 maxpacket: 8 03:09:53 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c05814", 0x7b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:09:53 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:09:53 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000002b80)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x24, 0x6, 0x0, @empty, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @window={0xfffffffe, 0x6}]}}}}}}}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r3}) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000080)=0x1, 0x4) [ 1134.607314][T11826] usb 1-1: USB disconnect, device number 70 [ 1134.615439][T25183] usb 3-1: device firmware changed [ 1134.621697][T25183] cdc_wdm 3-1:118.0: Error autopm - -16 [ 1134.621901][T22410] usb 3-1: USB disconnect, device number 18 03:09:53 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x400) prctl$PR_SET_FPEXC(0xc, 0x20000) setsockopt(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) [ 1134.796580][T22410] usb 3-1: new high-speed USB device number 19 using dummy_hcd 03:09:53 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x280000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r7}, {r8}, {r9}], 0x3, 0x0, 0x0, 0x0) r10 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r12 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r13 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r11}, {r12}, {r13}], 0x3, 0x0, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r7, 0x6002}, {r10, 0x100}, {r7, 0x10}, {r12, 0xc1d0}, {r11, 0x1009}, {r6, 0x1000}], 0x6, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000000)={0x2, {0xfffffbff, 0x10001, 0x800, 0x7, 0x1ff}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x68, 0xc3, 0x10, 0x4b4, 0x2, 0x8918, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x99, 0x0, 0x0, 0xbc, 0xb2, 0x15}}]}}]}}, 0x0) 03:09:53 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r2) r3 = dup(r1) close(r0) io_setup(0x7, &(0x7f0000000180)=0x0) io_submit(r4, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r2, 0x0, 0xfffffc3b}]) r5 = syz_open_dev$vbi(&(0x7f00000014c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000001500)={0x0, 0x8}, &(0x7f0000001540)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001580)={r6, 0x1ff, 0x6}, 0x8) [ 1134.983217][ T3379] usb 2-1: new high-speed USB device number 6 using dummy_hcd 03:09:54 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x400) ioctl$TIOCEXCL(r3, 0x540c) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x2c, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0x14, 0x5, [@IFLA_BRPORT_PROTECT={0x8}, @IFLA_BRPORT_FAST_LEAVE={0x8}]}}}]}, 0x4c}}, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+', 0x2}, 0x28, 0x1) [ 1135.043511][T22410] usb 3-1: Using ep0 maxpacket: 8 [ 1135.098664][T25222] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 1135.107203][T25222] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1135.118311][T11826] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1135.131445][T25222] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 1135.139977][T25222] netlink: 'syz-executor.4': attribute type 7 has an invalid length. 03:09:54 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000010500000000ffdbdf25000000002f95c5f37ab20371e399b02ce91bff6d5ee08200c8b2dd47ef90960b8fa2cc3418181dc513e171f4df36c4435b4de9496118b6632ee45a7c2cdf16c8d6809acca3a6701d31663edd0050ca697e02069ca828920547d625d847ddc7068be41fdfd7bdd3acb8efb35acfb030eae0a4ad160452e67a38151facc014dbd113196ed3d11222be024a7156f722b7906dfd16f2b7bf03c3d2ba6d7a548d490eea11150335fb8556437cef454c1b9a45a32fb05671cc577cbd2d628d2642", @ANYRES32=0x0, @ANYBLOB="00000000008000002c0012000c00010062716b6467650000274e28372c7cff7612dd03001c00020008002b004a910027000000005e32e9642e731bfd86a18284d5d021920082496926c5c5ef21d1ceca56ce5c4eca20c28d031c1d3c4f01ca95a0888e7bf98ae5fbfea6287e62b8e7c8b44c9cd99b06cff6cf74526dbcc8d589ae9ceeab90698596c8003f5c3c0fc0253dc565bd61c41a3cedb5736c444e200b900b26a95d59768336db3ff0c9d7a73d8e0c5f717388d5359dd37055f7049d10b739bc4c01f15bf1dac83267db7e58e6088b"], 0x4c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) r7 = dup2(r4, r3) r8 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r8}, {r9}, {r10}], 0x3, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r10, 0xc0bc5310, &(0x7f00000001c0)) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00', 0x400}) [ 1135.220386][T25226] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1135.243455][T22410] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.254941][T22410] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1135.265017][T22410] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1135.275109][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 1135.393717][T11826] usb 1-1: Using ep0 maxpacket: 32 [ 1135.434150][T22410] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1135.443573][T22410] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.451657][T22410] usb 3-1: Product: syz [ 1135.456293][T22410] usb 3-1: Manufacturer: syz [ 1135.460963][T22410] usb 3-1: SerialNumber: syz [ 1135.473532][ T3379] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.484819][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1135.494855][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1135.543394][T11826] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1135.551800][T11826] usb 1-1: config 0 has no interface number 0 [ 1135.558277][T11826] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1135.567479][T11826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.579405][T11826] usb 1-1: config 0 descriptor?? [ 1135.693424][ T3379] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1135.702748][ T3379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.711322][ T3379] usb 2-1: Product: syz [ 1135.715708][ T3379] usb 2-1: Manufacturer: syz [ 1135.715779][ T3379] usb 2-1: SerialNumber: syz [ 1135.744627][T22410] cdc_ncm 3-1:1.0: bind() failure [ 1135.754738][T22410] cdc_ncm 3-1:1.1: bind() failure [ 1135.784252][T22410] usb 3-1: USB disconnect, device number 19 [ 1135.833439][ T3379] usb 2-1: can't set config #1, error -71 [ 1135.860764][ T3379] usb 2-1: USB disconnect, device number 6 [ 1136.063672][T11826] CoreChips: probe of 1-1:0.159 failed with error -22 [ 1136.143774][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1136.156945][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1136.168732][ T5] usb 4-1: USB disconnect, device number 14 03:09:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000680)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x40000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000140)={0x1b, "c61ad4aaf690e81d1db17da37cd051fb355a298db5bc3229c67107"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[], 0x0, 0x205211}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x100000, 0x4, 0x401, 0x2, 0x0, [{0x7, 0x55, 0x81}, {0x7, 0x13, 0x20, [], 0x81}, {0x5, 0xe3, 0x4, [], 0x2}, {0x6, 0x7, 0x3}, {0x5, 0x5, 0x94, [], 0x1}, {0x3, 0x92, 0x0, [], 0x20}, {0x8, 0xbd, 0x2, [], 0x3c}, {0x0, 0xdc, 0x20, [], 0x5}, {0x2d, 0xc0, 0x46, [], 0x81}, {0x9c, 0x40, 0x97, [], 0x4}, {0x3, 0x60, 0x1, [], 0x8}, {0x61, 0x2, 0x6d, [], 0xd7}, {0x81, 0x9, 0x6, [], 0x4}, {0xbd, 0x1, 0x4, [], 0x1}, {0x2f, 0x71, 0x3, [], 0x1e}, {0x2, 0xff, 0x81, [], 0x5}, {0x2, 0x9, 0x7f, [], 0x54}, {0x7, 0x9, 0x1, [], 0x6}, {0x7, 0x7, 0x5, [], 0x23}, {0x0, 0x7f, 0x0, [], 0x8}, {0x4, 0x40, 0x9, [], 0x3f}, {0x73, 0x95, 0x69, [], 0x88}, {0x3, 0x4, 0x8, [], 0x9}, {0x1, 0x4, 0x7, [], 0x3}]}}) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x420000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000080)={0x4, 0x839b, 0x4}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x340604df11cc7ad3, 0x10, r5, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:09:55 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:09:55 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000100)="44d04f3caa285bcc87c535da775a23ad", 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fdatasync(0xffffffffffffffff) getsockname$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) getsockopt$bt_hci(r7, 0x0, 0x2, &(0x7f0000000ac0)=""/4096, &(0x7f00000001c0)=0x1000) write(r0, &(0x7f0000000040)="240000001a005f0023b3f40700090400020000000010000000100000080002007f000001", 0x24) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x0, 0x2000) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0xa, @mcast1, 0x81}, 0x1c) [ 1136.350824][T25239] Unknown ioctl 1074048651 [ 1136.415266][T25241] Unknown ioctl 1074048651 [ 1136.563183][T11826] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1136.813224][T11826] usb 2-1: Using ep0 maxpacket: 8 [ 1136.823569][ C1] net_ratelimit: 22 callbacks suppressed [ 1136.823593][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.823700][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.829987][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1136.835888][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1136.853968][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.860707][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1136.933148][ T5] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1136.933405][T11826] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.952012][T11826] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.963877][T11826] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1136.973740][T11826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.024952][T11826] hub 2-1:118.0: ignoring external hub [ 1137.038856][T11826] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1137.183302][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 1137.227326][T25236] FAULT_INJECTION: forcing a failure. [ 1137.227326][T25236] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.240933][T25236] CPU: 1 PID: 25236 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1137.249030][T25236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1137.259827][T25236] Call Trace: [ 1137.263187][T25236] dump_stack+0x191/0x1f0 [ 1137.268047][T25236] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1137.274261][T25236] should_fail+0xa3f/0xa50 [ 1137.279301][T25236] __should_failslab+0x264/0x280 [ 1137.284379][T25236] should_failslab+0x29/0x70 [ 1137.289536][T25236] kmem_cache_alloc+0xd6/0xd10 [ 1137.294498][T25236] ? __alloc_file+0x90/0x720 [ 1137.299281][T25236] __alloc_file+0x90/0x720 [ 1137.303758][T25236] alloc_empty_file+0x1f2/0x4a0 [ 1137.309195][T25236] path_openat+0xf4/0x6ab0 [ 1137.314381][T25236] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1137.320935][T25236] ? kmsan_get_metadata+0x39/0x350 [ 1137.326302][T25236] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1137.332407][T25236] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1137.338595][T25236] ? should_fail+0x177/0xa50 [ 1137.343442][T25236] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1137.349697][T25236] ? kmsan_get_metadata+0x39/0x350 [ 1137.354995][T25236] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1137.360696][T25236] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1137.366760][T25236] do_filp_open+0x2b8/0x710 [ 1137.371880][T25236] do_sys_open+0x642/0xa30 [ 1137.376604][T25236] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1137.383073][T25236] __se_sys_open+0xad/0xc0 [ 1137.387700][T25236] __x64_sys_open+0x4a/0x70 [ 1137.392713][T25236] do_syscall_64+0xb6/0x160 [ 1137.397550][T25236] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1137.403673][T25236] RIP: 0033:0x413941 [ 1137.407610][T25236] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1137.427661][T25236] RSP: 002b:00007fbc2a74d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1137.436353][T25236] RAX: ffffffffffffffda RBX: 00007fbc2a74dc90 RCX: 0000000000413941 [ 1137.444448][T25236] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007fbc2a74d7d0 [ 1137.452565][T25236] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000f [ 1137.460731][T25236] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fbc2a74e6d4 [ 1137.468892][T25236] R13: 00000000004c9044 R14: 00000000004e0628 R15: 0000000000000004 [ 1137.553471][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1137.562299][ T5] usb 4-1: config 0 has no interface number 0 [ 1137.568699][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1137.578307][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.588856][ T5] usb 4-1: config 0 descriptor?? [ 1137.604005][T12200] usb 2-1: USB disconnect, device number 7 03:09:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000831dda08720c0c00aa7c00000001090212000100000000fd04000000095029007adf176d51bc37940776140d3830df082e1a098f2ae25e3835582de836e9479f5880ae45e4f7682a16f83c2d8cdd3907edda743b4531ef7e54b09aea8310e119b3e2b84aacd7a02c86fa2f036a2ab8a30fc6ba40873f9bd0bf35f7a960ab7feb46f73820"], 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 03:09:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[]}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380), 0xc, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x2d2) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000100)={0x32, &(0x7f0000000200)="37d8fc33ab9eacacbe618e1c29a68053faa86709886fe5bb8aed5bf8d7c8b9d0757e13d62f3eff9f0db3286e07c01024a90d"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1) r3 = geteuid() getgroups(0x2, &(0x7f0000000180)=[0x0, 0x0]) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000002bc0)=0x0, &(0x7f0000002c00), &(0x7f0000002c40)=0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x1c}, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x1}, [{0x2, 0x4, r6}, {0x2, 0x6, r3}], {0x4, 0x7}, [{0x8, 0x1, r4}, {0x8, 0xd, r5}], {0x10, 0x4}, {0x20, 0x1}}, 0x44, 0x3) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1137.693378][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 1137.703996][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1137.713529][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1137.720096][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1137.728558][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1137.735105][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:09:56 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:09:56 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c05814", 0x7b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:09:56 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000000)=@routing={0xc, 0x2, 0x1, 0x68, 0x0, [@mcast2]}, 0x18) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1137.811674][ T5] usb 4-1: USB disconnect, device number 15 [ 1137.839632][T12200] usb 1-1: USB disconnect, device number 71 03:09:57 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000040)={0x80fd, 0x1}) sendmsg$key(r3, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0208a85afa579d0d0000100000000000000000000000030006000100000002000000e0000001000000f50000000008001200020002000000000000000000301b6c0002ef0000ff3f567b00000020f18700c4bb152c000000000000000001020014bb00000000000000000000000003000500000000000200ed00e00001000000ba00000000ad2e54c43b6807ca79f16145abc0d1beae95101dd756b41c1ec7af10b7865e8f357dfb9ffda628b756fbc7aecaea8a5abf45c301e52fad49a630f50327e5696bd5de66dbd62794"], 0x85}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000000)={0x7000, 0xf000, 0x3, 0x1c7, 0x10001}) sendmmsg(r4, &(0x7f0000000180), 0x400024c, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x7, 0x2) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) accept4$unix(r7, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x40800) r8 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r8}, {r9}, {r10}], 0x3, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r10, 0xc018643a, &(0x7f0000000340)={0x20000002, 0x7, 0x21}) 03:09:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x8) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1138.053455][ T3379] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1138.063335][T11826] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1138.111716][T25269] input: syz0 as /devices/virtual/input/input26 03:09:57 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0xd1, 0xd2, 0x5c, 0x40, 0x55d, 0x9000, 0xe3ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x10, 0xe0}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x61, &(0x7f0000000080)={0x0, 0x11, 0x0, "d103f02accd93e995820f340bae1dbe6eba2f61270373ad19814ac1282a1fb544624951c3a66329eda000888576f0358c47c8749b0d5c13e9566cbf2e3abfec8228f9f700ab477251e569d563029198a70d7f09c955883965e6aa8eef7e6284237e49239bde9e533e756c6bbabb2a24c7f9dd9c6b83b625e1743e25d877400303163ac2ef13dc3e92eb566787fa0db5b9ba3deb9efd45490a9f3e41504c4e7d3297d4b59ab29"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x40}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000500)={0x0, 0x0, 0x1, '~'}, 0x0, 0x0, 0x0, 0x0}) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') [ 1138.273322][ T5] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1138.313161][ T3379] usb 5-1: Using ep0 maxpacket: 8 [ 1138.319563][T11826] usb 2-1: Using ep0 maxpacket: 8 [ 1138.323194][T12200] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1138.453705][ T3379] usb 5-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 1138.467696][ T3379] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1138.477470][ T3379] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=7c.aa [ 1138.487532][ T3379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.499573][ T3379] usb 5-1: config 0 descriptor?? [ 1138.523222][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 1138.533502][T11826] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.545371][T11826] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1138.555526][T11826] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1138.566835][T22410] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1138.603888][T12200] usb 1-1: Using ep0 maxpacket: 32 [ 1138.643751][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1138.652809][ T5] usb 4-1: config 0 has no interface number 0 [ 1138.659551][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1138.669515][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.680057][ T5] usb 4-1: config 0 descriptor?? [ 1138.744569][T11826] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1138.754519][T11826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.754589][T11826] usb 2-1: Product: syz [ 1138.754651][T11826] usb 2-1: Manufacturer: syz [ 1138.754723][T11826] usb 2-1: SerialNumber: syz [ 1138.779157][T12200] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1138.788899][T12200] usb 1-1: config 0 has no interface number 0 [ 1138.795978][T12200] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1138.806063][T12200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.817047][T21718] usb 5-1: USB disconnect, device number 40 [ 1138.825032][T12200] usb 1-1: config 0 descriptor?? [ 1138.983530][T22410] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=e3.ac [ 1138.993711][T22410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.004656][T22410] usb 3-1: config 0 descriptor?? [ 1139.047928][T22410] pwc: Samsung MPC-C10 USB webcam detected. [ 1139.063637][T11826] cdc_ncm 2-1:1.0: bind() failure [ 1139.076544][T11826] cdc_ncm 2-1:1.1: bind() failure [ 1139.122313][T11826] usb 2-1: USB disconnect, device number 8 [ 1139.303822][T12200] CoreChips: probe of 1-1:0.159 failed with error -22 [ 1139.373688][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea 03:09:58 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) [ 1139.605207][ T3379] usb 5-1: new high-speed USB device number 41 using dummy_hcd 03:09:58 executing program 4: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = getpid() perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000000c0)="04"}, 0x20) r2 = syz_open_dev$binderN(0x0, 0x0, 0x800) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}) [ 1139.863881][T11826] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1139.904443][T25287] debugfs: File '25286' in directory 'proc' already present! [ 1139.917202][T25287] binder: 25286:25287 unknown command 0 [ 1139.924172][T25287] binder: 25286:25287 ioctl c0306201 200002c0 returned -22 03:09:59 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fchmod(r1, 0x42) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000080)="0f38016f010f2204c4e118544e00640fc7af0600000064dab4e0090000000f01f066b86e008ed0c4c18816fd0f01c4e810000000"}], 0x351, 0x68, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x7, 0x488022) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="01da9c9aa17d60ec9cc454cb08bdc86cd992f7bed7e02af768a5579cd60498003e8b857abef60088193e1517c06befdf2802a3a5a904040b4fddb6c51e02b85acf039aeb6b747f5652bb6794a328447b6684937545c51cdbae816aede4acb26feef5c1e7896b4d1dfb75ea67a5691d8f056673479d00"/133, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000001c0)={r6, 0x7ff, 0x30, 0x5, 0x4}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000240)={r7, 0x3}, &(0x7f0000000280)=0x8) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = socket(0x15, 0x80005, 0x0) getsockopt(r9, 0x200000000114, 0x2714, 0x0, &(0x7f0000000040)) dup2(r9, 0xffffffffffffffff) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/42, 0x2a) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000fdb000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) geteuid() clone(0x40000000, 0x0, 0x0, 0x0, 0x0) [ 1140.105400][T11826] usb 2-1: Using ep0 maxpacket: 8 [ 1140.210391][T25292] IPVS: ftp: loaded support on port[0] = 21 [ 1140.243560][T11826] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.255077][T11826] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.267812][T11826] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1140.277925][T11826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1140.324722][T11826] hub 2-1:118.0: ignoring external hub [ 1140.328781][T11826] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1140.346282][T22410] pwc: recv_control_msg error -71 req 04 val 1000 [ 1140.375480][T22410] pwc: recv_control_msg error -71 req 04 val 1300 [ 1140.395513][T22410] pwc: recv_control_msg error -71 req 04 val 1400 [ 1140.423678][T22410] pwc: recv_control_msg error -71 req 02 val 2000 [ 1140.443350][T22410] pwc: recv_control_msg error -71 req 02 val 2100 [ 1140.463465][T22410] pwc: recv_control_msg error -71 req 02 val 2200 [ 1140.483196][T22410] pwc: recv_control_msg error -71 req 06 val 0600 [ 1140.503230][T22410] pwc: recv_control_msg error -71 req 04 val 1500 [ 1140.524157][T22410] pwc: recv_control_msg error -71 req 02 val 2500 [ 1140.533604][T25283] FAULT_INJECTION: forcing a failure. [ 1140.533604][T25283] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.547116][T25283] CPU: 0 PID: 25283 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1140.548436][T22410] pwc: recv_control_msg error -71 req 02 val 2400 [ 1140.555261][T25283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.555299][T25283] Call Trace: [ 1140.555367][T25283] dump_stack+0x191/0x1f0 [ 1140.555430][T25283] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1140.555491][T25283] should_fail+0xa3f/0xa50 [ 1140.555549][T25283] __should_failslab+0x264/0x280 [ 1140.555625][T25283] should_failslab+0x29/0x70 [ 1140.576540][T25283] kmem_cache_alloc+0xd6/0xd10 [ 1140.607607][T25283] ? security_file_alloc+0x98/0x520 [ 1140.613717][T25283] security_file_alloc+0x98/0x520 [ 1140.618972][T25283] __alloc_file+0x1e8/0x720 [ 1140.623653][T25283] alloc_empty_file+0x1f2/0x4a0 [ 1140.629159][T25283] path_openat+0xf4/0x6ab0 [ 1140.633705][T25283] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 1140.640021][T25283] ? kmsan_get_metadata+0x39/0x350 [ 1140.646968][T25283] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1140.652807][T25283] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1140.658875][T25283] ? should_fail+0x177/0xa50 [ 1140.663535][T25283] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1140.669631][T25283] ? kmsan_get_metadata+0x39/0x350 [ 1140.675065][T25283] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1140.681087][T25283] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1140.687082][T25283] do_filp_open+0x2b8/0x710 [ 1140.691794][T25283] do_sys_open+0x642/0xa30 [ 1140.696387][T25283] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1140.703146][T25283] __se_sys_open+0xad/0xc0 [ 1140.707797][T25283] __x64_sys_open+0x4a/0x70 [ 1140.712350][T25283] do_syscall_64+0xb6/0x160 [ 1140.717243][T25283] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1140.723265][T25283] RIP: 0033:0x413941 [ 1140.727378][T25283] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1140.750809][T25283] RSP: 002b:00007fbc2a74d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1140.760320][T25283] RAX: ffffffffffffffda RBX: 00007fbc2a74dc90 RCX: 0000000000413941 [ 1140.768815][T25283] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007fbc2a74d7d0 [ 1140.777735][T25283] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000f [ 1140.786234][T25283] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fbc2a74e6d4 [ 1140.795166][T25283] R13: 00000000004c9044 R14: 00000000004e0628 R15: 0000000000000004 [ 1140.807700][T22410] pwc: recv_control_msg error -71 req 02 val 2600 [ 1140.833257][T22410] pwc: recv_control_msg error -71 req 02 val 2900 [ 1140.854283][T22410] pwc: recv_control_msg error -71 req 02 val 2800 [ 1140.873621][T22410] pwc: recv_control_msg error -71 req 04 val 1100 [ 1140.910737][T22410] pwc: recv_control_msg error -71 req 04 val 1200 [ 1140.928559][T22410] pwc: Registered as video39. [ 1140.935620][T22410] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 1140.946706][T12200] usb 2-1: USB disconnect, device number 9 03:10:00 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c05814", 0x7b}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1141.044906][T22410] usb 3-1: USB disconnect, device number 20 03:10:00 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 1141.091420][T11826] usb 1-1: USB disconnect, device number 72 [ 1141.094798][T25303] IPVS: ftp: loaded support on port[0] = 21 [ 1141.224524][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1141.236879][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1141.254366][ T5] usb 4-1: USB disconnect, device number 16 03:10:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0xc, 0x2, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(r5, 0x80345631, &(0x7f0000000080)) [ 1141.293322][ T3379] usb 2-1: new high-speed USB device number 10 using dummy_hcd 03:10:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x5, 0x7, 0xa}, 0xe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xd, 0x1e, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8000, 0x70002) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r3, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000042) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000100)=""/108}, 0x18) 03:10:00 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\'', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x807a00, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000080), 0x143) open(&(0x7f0000000100)='./file0\x00', 0x490401, 0x0) [ 1141.533602][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 1141.733497][ T3379] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.746183][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1141.758474][ T3379] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1141.863683][ C1] net_ratelimit: 20 callbacks suppressed [ 1141.863713][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1141.878270][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1141.885237][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1141.892479][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1141.953460][ T3379] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1141.965044][ T3379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.973532][ T3379] usb 2-1: Product: syz [ 1141.978303][ T3379] usb 2-1: Manufacturer: syz [ 1141.983288][ T3379] usb 2-1: SerialNumber: syz [ 1141.988881][T22410] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1142.233150][T22410] usb 4-1: Using ep0 maxpacket: 32 [ 1142.273878][ T3379] cdc_ncm 2-1:1.0: bind() failure [ 1142.284690][ T3379] cdc_ncm 2-1:1.1: bind() failure [ 1142.298717][ T3379] usb 2-1: USB disconnect, device number 10 [ 1142.373311][T22410] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1142.382197][T22410] usb 4-1: config 0 has no interface number 0 [ 1142.390220][T22410] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1142.400790][T22410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.411210][T22410] usb 4-1: config 0 descriptor?? [ 1142.663375][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1142.670865][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:10:01 executing program 2: unshare(0x2a000400) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) unshare(0x8000400) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x0, 0x0) r1 = getgid() setgid(r1) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='/dev/snapshot\x00', 0xe) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfff, 0x4c00) 03:10:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_dccp_buf(r1, 0x21, 0x1ef, &(0x7f00000002c0)="8f6f2629a7b13f72157375192a22758961f44e0ae42076355227863bf45087ea2b68fee312ff067af27acb9741196d544686f8b8f624ffe6c485a5f2c13219ce4f8173133daa0ad100996124cc86162b94115c00294083d26a18959f404de1652e41a92556f039a523028fcf173b7dff39b7b5a4512b29ab903ef843ed7ba76e3b6670c27f3734c7351c86362dff1ffc8e70c9d30c20f0b916df30f98e067a11fb3f4f3909", 0xffffffffffffffe7) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="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", 0xfb}], 0x1}, 0x0) 03:10:01 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 03:10:01 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0xbac5cd8e32e65009, 0xa08, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x65, 0x2, 0xeb, 0x10, 0x5ac, 0x1204, 0x4d03, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f6, 0x3, 0x1f, 0x7, 0xb0, 0x1, [{{0x9, 0x4, 0x6a, 0x6, 0xd, 0xea, 0x70, 0x1b, 0x6, [], [{{0x9, 0x5, 0x3, 0x321798da44083830, 0x11f, 0x1, 0x9, 0xff, [@generic={0xb1, 0x30, "796fb4d6a996b1640cee1d1132217bafa06b863bf17beac191da2cb8960be0f79eb57dfc846e40e942a192fb7d125bcfe436a7860d91ca76cb382ddb4dbc0f2a1aee156c81cd215917a742b722168ac80d4219a3018e1ef1dd227b457f54fc92e66b43b50a2cab8958c9f3626db099be7538d206454f488d7f4ad198416d818b92fc96f92a745105fc9e6f2d299618b92a9e57038d565766f5513f52013c8a441d34b93bda9ccade9066dada609a6b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x179, 0x7, 0xbf, 0xb0, [@generic={0xda, 0xa, "454b43cfe5db11edcbcd0d127c610104713cc19ba962a73b65962605aa2906bc4cb0fb66819eb06473b5f94abfce6e2918ac6a409fd92427417ac81302f692d1a864ab561bceb8fdf50b3c1fc3d2f92a723e8002836e1102e646c53aeead1a15f6a01ee93d399bf5ecd6464c3232b3a17a26e32cd246d9c140a59fdd0509617daaccd5ea85f2aaedd3868473dfa30777ef0d1fd592c76e461ada81bf12b19836e9de64f68f20f8324ce4d524888e877aa0272f5cf28c0560aa75f4e8baf6f8c0ef866d06cb95b3d016c33b340f32f7125136e5f5b5e37b7c"}, @generic={0x8e, 0x19, "1421904c5e91c4ecbd44e3615b28bfa1fc97c695efffb463524db38244ae374a5ed5f125c44976f1061b73db776bfe5d626b5e425d6aa1d72485241bec5710e58f3162bf6670687ce3df1346b0fc7b95ecf877e22bdceba644a7deaa8ea6204011e4f0f31b72996c36a6c12979689b5f4978287a130ba48bcfcc4cb875550afbe0ecfb0b48f2fe2373cc330a"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x308, 0x3f, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc, 0x401}]}}, {{0x9, 0x5, 0x10ecddc203b57ded, 0x3, 0x319, 0x3, 0x2, 0x56}}, {{0x9, 0x5, 0x6, 0xc, 0x211, 0x9, 0x4b, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xe4}, @generic={0x92, 0x3d, "f10a4005b102c17bdc185c6761e8b5d97e7b1cb06b43456e741702b01c921ba739de2849313efe5f84b6585600698acca2e3383f32720f18551f2f243a00b2a1897fbf733e9e1f1068101913a96c067775b62d1852447bf105f85f43ac4c1446368d906da59041080d531fb7b23745822111f31b05e0bf7d2f707e04171177696778bc7632c489ccf7d657430173f709"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x280, 0x7, 0x33, 0x2}}, {{0x9, 0x5, 0x9, 0x10, 0xee, 0x60, 0xa5, 0x80, [@generic={0xae, 0x6, "53f78b30fc2d65448077a61daaf6e26999b3fae9957ed883a11cf6edc5437e11cafdfb2434a6bed7b60b80c168b9b2480985dac436fd72f247e8e3e4f21b32ff7814b38b4ea77e957b546acce52c98c3c7df9628f91886d1ac6b108de46a22fad72a33a824fc775571737dded020d2c74890893423c58b51a155164863717e5e2c3bbf2d1f1e6eb7566970f7bda518ab57a3a12e67912bb55cf565640446e39904e992796ffee5f3052d2bec"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x8000}]}}, {{0x9, 0x5, 0xe, 0x1, 0xdf, 0xc0, 0x1, 0x5}}, {{0x9, 0x5, 0xd, 0x4, 0x164, 0x48, 0x80, 0xfc, [@generic={0x64, 0x0, "95ca9976744f27e22608e275a43de8a90aea92dcbc621ce3376c409e9678fb5b14c5994a07cfe2d47f744c9a1b96d437ea05e4e1b1bdcbe8a517ca6dd978a41ad7660636f26933ebcafe9ec37cca93db3ed20b105ad9a85049d173d052ec5a8b5379"}, @generic={0xbb, 0x11, "52d18ee52586062ebab27ea94c2758dda85870996264dd2c6d6c211350c1bfe436cbea5fa5908b39134dbb656ed1af3be821d1ace10efd49255c502614a3b112da54b7a301d9eb0b4474b1a0045b5cd9a052ece8eff86caac2bce77bb47e11835ae0de2de15203f4fc07bd45cf934e51816d17de3ba10dccc447bbcded747e3fea301d9e07cd3c7baeeae7f87531f8c9a13c021e3eb8061a59fdbfe86d9ce754541aa7ee3b6cd4465336e454838b152fe319e467a731755a3a"}]}}, {{0x9, 0x5, 0x3, 0x60e1f69d9c3f00fb, 0x381, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0xb5, 0x6, 0xe, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x6}]}}, {{0x9, 0x5, 0x4, 0x0, 0x375, 0x83, 0x4, 0xa3, [@generic={0x42, 0x7, "218cd8231f62889898cd710b57a74fd61bb9798d9460d5b42489486f5896aff85a610c0429689837e3fbdd16c32ea73af8b05aaddd76cf14844f93d878aa0198"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3da, 0x2, 0x1, 0x7f}}]}}, {{0x9, 0x4, 0xaa, 0x92, 0x1, 0xac, 0x69, 0x5f, 0x9, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "a3d2cdde7e2c"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x2b, 0x101, 0x1, 0x80}, {0x6, 0x24, 0x1a, 0xff, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0x1f}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x20, 0x5a}, @network_terminal={0x7, 0x24, 0xa, 0xfa, 0x1, 0x56, 0x7}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x1f, 0xaa, 0x0, 0x3f, 0x8}]}], [{{0x9, 0x5, 0x3, 0x4, 0x90, 0x9, 0x3f, 0x8, [@generic={0xbf, 0x0, "423cccc94e53440c800ee8ed00e3d0c24515c77ad5d8a38159b4a7be24c177cc9648d66f508e88a9683bf294b264b5450dcb4586993ab2bd6e8a20d678068d4420a6a41aa6c33dc518a4094c0bec1612c50a2d9dc66e047bfe429aaf6805114985cdbe8a47b0e3bdfefb1c3483926dc3b5dacfc63a4ed1e2cfa9e72e89e8e19b2f9680bdb2bdc93dabab50d6513db9076baad6f692e1a28880d8056d731a073ccf0ca22653dac539445749803e8b0ed72b78697138544da89f3c6e92f9"}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0x4a, 0xf479}]}}]}}, {{0x9, 0x4, 0xd9, 0xff, 0x8, 0xec, 0xc7, 0x86, 0x0, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "b4"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x7, 0x40}, [@mbim_extended={0x8, 0x24, 0x1c, 0x13, 0x0, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x6, 0x7, 0x20, 0x2, 0x7}]}, @uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xc3, 0x4, 0x1f, 0x1, "1462e3ba"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x2, 0x5c, 0xb8, "de", 'h8'}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7fff, 0x3, 0x20, "8f19"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xa1, 0x4, 0x3f, 0x57, "700d9e725356"}]}], [{{0x9, 0x5, 0x8, 0x0, 0x18e, 0xad, 0x25, 0x3f, [@generic={0xac, 0xa, "74fc9878726ab6979dd0c260bbedfe6bc5b10fe8ca7581ad9514a2797becc6d700f9798fd083f6563108bd93d354bc390fe2536e2937cdf49c18c2eff0fe54b6939ff0f2ad87e2bedd51b21f1e9a5dd5903fda43a564f336045ede2be07ae54ead7cbb5668639878090939db2851c354f2b305ac51851fe5c963828cbf88f970364d1446b37c2b863b4ce52fa9e0ff9d1e997d1e55dcd652d14fcb2b89c02da2ff2686fa94c93852aebe"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x2, 0x9, 0x1, 0x6c, [@generic={0xa, 0xf, "02c442dde8edf626"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x147, 0x8, 0xf8, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xf801}]}}, {{0x9, 0x5, 0xe, 0x1f760aa065026c3a, 0x2f, 0x5, 0x4, 0x9, [@generic={0x23, 0x2, "ac954115668c3a7fe4fcad10aa5f0f4b72c0c9bf00aee54438264e0d90b912741a"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x1f9, 0x8, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xff}, @generic={0xc4, 0x5, "893063e2bdf39e1fea8f215193ac990ba19a08fcad790d5b200db49f6c9c1d4012a8d1bb9c9fb98fb20c6864474c0679a12be37016316d488547290b7fed921f74dd040a97804b693b811842ce3cbd6389f63d4914ef38736b83145c668044f22ce2127ab8776fc5d9d0a284d99bf8a96b408177ae261131f3d0e112bbdfaa8db91e7091d3939761ad94680b9adda6a30d8e4945c9ada36353b843f0f8501d7ad77fc7dfba941c1095ec2eae5ea647450b68c0cbd443bb288396fe25b082bf66a5ef"}]}}, {{0x9, 0x5, 0x0, 0x11, 0x33f, 0x6, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe1, 0x1000}]}}, {{0x9, 0x5, 0x7, 0x0, 0x4, 0x40, 0x20, 0x5}}, {{0x9, 0x5, 0x1, 0xf2b5137677907269, 0x1fe, 0xe0, 0x3, 0xff, [@generic={0xfc, 0x30, "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"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0xfa6bb8d946c7e687, 0x0, 0x3, 0xf4, 0x40, 0xe5}, 0xc0, &(0x7f00000000c0)={0x5, 0xf, 0xc0, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x5, 0x9, 0x1}, @generic={0xb1, 0x10, 0x0, "bd81f227e7a6e6539307dc501c24ddeecb08e1ffdb41c6fb424961819c071cc6aa4953ffa109f249502c0635f4d7d2f06284ac07cc3fedff53ba56c8e4def00399e301f40d96909fbafea4ff4308f09b13f32b92cfa710ec42979115e2554abb501da6f397964ba2e5e8b8356beea360f5520f3cc18e5bbc960655e4d429f022bf6f7493780a534e7b7aec1907600cc3e1ce59e48369339e61d158736322df7baabdb566c3baa10871ef1728fc9e"}, @ptm_cap={0x3}]}, 0x6, [{0x1002, &(0x7f0000002040)=@string={0x1002, 0x3, "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"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x1a, &(0x7f0000000200)=@string={0x1a, 0x3, "577e63b3f835d3399df8db4e0cab4ca1a26b5f577d624b46"}}, {0x4a, &(0x7f0000000240)=@string={0x4a, 0x3, "a77c6dfbef6b8bd250c13af7c1f2fcbf3a8710fd09dcad45e0d2bf15aad8b90eb1799414ed9226f7a3a9819209f342086be633c41a169949da4a992e2c0c5806603bf283f92060b0"}}]}) r2 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1a34, 0x802, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0xa0, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x20, 0x8, 0x1, {0x22, 0x26d}}, {{{0x9, 0x5, 0x81, 0x3, 0x29, 0x9, 0x3f, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0xc4, 0x80, 0x4, 0x7f}}]}}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x60, 0x7f, 0x4, 0x20, 0xfd}, 0x5e, &(0x7f0000000400)={0x5, 0xf, 0x5e, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x3, 0x0, 0x1, [0xff3f00, 0x5f50, 0x3f00, 0x1fe7e0f, 0xc018, 0xffc0c0]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x9, 0x4, 0x7fff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x1, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x5c, 0x1, 0x2, 0x0, 0x7, [0x4647d5a2593b5b2a]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "a1fe79e68bd57b6d81e4e1bea34368e1"}]}, 0x1, [{0xb, &(0x7f0000000f00)=@string={0xb, 0x3, "7d63beaabbea7afd61"}}]}) syz_usb_control_io$hid(r2, &(0x7f00000010c0)={0x24, &(0x7f0000000f80)={0x6a0aa73236a3d5d9, 0x23, 0x71, {0x71, 0x30, "1df3855dba702e0565a0fe22f496ffd85cfdb1c8347f9815f43b25f0a0580c6dc57687862efa80627666970d5e5c2be6cdbf235b97dac1e69ce9216cf2bc711382f3b5d6e9455acdc3fb2d99558543dc8fe19e55cfcaea24a100aebded49896b6cb328b73ffb89067c2e75c9cd1a74"}}, &(0x7f0000001000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, &(0x7f0000001040)={0x0, 0x22, 0x9, {[@main=@item_012={0x1, 0x0, 0x0, "04"}, @global=@item_4={0x3, 0x1, 0x2, "a695d9dc"}, @global=@item_012={0x1, 0x1, 0x4, "d5"}]}}, &(0x7f0000001080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x189}}}}, &(0x7f0000001280)={0x2c, &(0x7f0000001100)={0x20, 0xbb13e7eed20d9df, 0x3b, "ad3e14acfff847e07d475312ad7ebfbeb76e80691920ba39b371ebc3117bf463f0a355d6d0919c4dc4c204696ec81562fbedea6fd627f1d606b6a0"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001200)={0x20, 0x1, 0x26, "6d1909c8b289f6af4358bfc10e4baa103ac7d06e1b52c48fcc74c16d20c630ab18c180a923de"}, &(0x7f0000001240)={0x20, 0x3, 0x1, 0x9b}}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000000340)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1142.733778][T22410] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1142.784030][T22410] usb 4-1: USB disconnect, device number 17 03:10:01 executing program 1 (fault-call:1 fault-nth:3): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) [ 1142.852205][T25337] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1142.890154][T25343] netlink: 215 bytes leftover after parsing attributes in process `syz-executor.4'. 03:10:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000033001900f10007000000000002000000ffd38d9b0c0c01000800100010000000"], 0x24}}, 0x0) 03:10:02 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000140)={{}, {0x3000}, {0x0, 0x0, 0xe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, {0x0, 0x0, 0x0, 0x0, 0x4}}) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f00000002c0)="19", 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x218, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r2, r3, r3}, &(0x7f00000001c0)=""/83, 0xffffffffffffff6a, 0x0) [ 1143.001379][T25348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1143.063729][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1143.071415][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1143.073568][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1143.084590][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1143.223710][ T3379] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1143.231768][T22410] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1143.463636][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 1143.473166][T22410] usb 4-1: Using ep0 maxpacket: 32 [ 1143.583413][ T3379] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.595908][ T3379] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.610762][ T3379] usb 2-1: New USB device found, idVendor=2400, idProduct=4200, bcdDevice=42.ef [ 1143.620967][ T3379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.630638][T22410] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1143.639566][T22410] usb 4-1: config 0 has no interface number 0 [ 1143.646242][T22410] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1143.655939][T22410] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.667132][T22410] usb 4-1: config 0 descriptor?? [ 1143.704540][ T3379] hub 2-1:118.0: ignoring external hub [ 1143.735878][ T3379] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 1143.906575][T25346] FAULT_INJECTION: forcing a failure. [ 1143.906575][T25346] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.920725][T25346] CPU: 1 PID: 25346 Comm: syz-executor.1 Not tainted 5.4.0-rc3+ #0 [ 1143.929636][T25346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1143.941131][T25346] Call Trace: [ 1143.945636][T25346] dump_stack+0x191/0x1f0 [ 1143.950232][T25346] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1143.956920][T25346] should_fail+0xa3f/0xa50 [ 1143.961570][T25346] __should_failslab+0x264/0x280 [ 1143.966729][T25346] should_failslab+0x29/0x70 [ 1143.971523][T25346] kmem_cache_alloc_trace+0xf7/0xd20 [ 1143.977245][T25346] ? usb_control_msg+0x148/0x7f0 [ 1143.982415][T25346] ? dev_printk_emit+0x1ce/0x210 [ 1143.988750][T25346] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1143.994800][T25346] usb_control_msg+0x148/0x7f0 [ 1143.999884][T25346] hub_ext_port_status+0x274/0xba0 [ 1144.005173][T25346] hub_activate+0xdc1/0x2cd0 [ 1144.009845][T25346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1144.015997][T25346] hub_resume+0x7d/0x460 [ 1144.020687][T25346] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1144.027004][T25346] ? hub_suspend+0xd40/0xd40 [ 1144.031685][T25346] usb_resume_both+0xb5e/0xf70 [ 1144.036603][T25346] usb_runtime_resume+0x54/0x60 [ 1144.042445][T25346] __rpm_callback+0x2f1/0x8d0 [ 1144.047323][T25346] ? autosuspend_check+0x790/0x790 [ 1144.052640][T25346] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1144.059933][T25346] rpm_resume+0x1fc5/0x2bb0 [ 1144.064589][T25346] ? autosuspend_check+0x790/0x790 [ 1144.070185][T25346] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1144.077070][T25346] rpm_resume+0xdc3/0x2bb0 [ 1144.081552][T25346] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1144.087716][T25346] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1144.093706][T25346] rpm_resume+0xdc3/0x2bb0 [ 1144.098203][T25346] ? _raw_spin_lock_irqsave+0x82/0x110 [ 1144.104246][T25346] __pm_runtime_resume+0x116/0x190 [ 1144.109470][T25346] usb_autopm_get_interface+0x5f/0x100 [ 1144.115242][T25346] wdm_open+0x320/0x960 [ 1144.119459][T25346] ? wdm_ioctl+0x190/0x190 [ 1144.123993][T25346] usb_open+0x284/0x400 [ 1144.128245][T25346] ? usb_deregister_dev+0x330/0x330 [ 1144.133502][T25346] chrdev_open+0xc58/0xe00 [ 1144.138050][T25346] ? cd_forget+0x320/0x320 [ 1144.142649][T25346] do_dentry_open+0xdae/0x1810 [ 1144.147481][T25346] vfs_open+0xaf/0xe0 [ 1144.151514][T25346] path_openat+0x17f4/0x6ab0 [ 1144.156303][T25346] ? kmsan_internal_set_origin+0x6a/0xb0 [ 1144.162380][T25346] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1144.168331][T25346] do_filp_open+0x2b8/0x710 [ 1144.173045][T25346] do_sys_open+0x642/0xa30 [ 1144.177523][T25346] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1144.183719][T25346] __se_sys_open+0xad/0xc0 [ 1144.188267][T25346] __x64_sys_open+0x4a/0x70 [ 1144.192820][T25346] do_syscall_64+0xb6/0x160 [ 1144.197395][T25346] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 1144.203495][T25346] RIP: 0033:0x413941 [ 1144.207511][T25346] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1144.227613][T25346] RSP: 002b:00007fbc2a74d7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1144.236202][T25346] RAX: ffffffffffffffda RBX: 00007fbc2a74dc90 RCX: 0000000000413941 [ 1144.244223][T25346] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007fbc2a74d7d0 03:10:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55", 0x7f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:10:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x801000008912, &(0x7f0000000040)="11dc86055e0bceec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x10002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:10:03 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0000000000160063013000000080009500000000000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x70) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) 03:10:03 executing program 0: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) [ 1144.252317][T25346] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000f [ 1144.260420][T25346] R10: 0000000000000064 R11: 0000000000000293 R12: 00007fbc2a74e6d4 [ 1144.268498][T25346] R13: 00000000004c9044 R14: 00000000004e0628 R15: 0000000000000004 [ 1144.280534][T25346] hub 2-0:1.0: hub_ext_port_status failed (err = -12) 03:10:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55", 0x7f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:10:03 executing program 2: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000020101000000000000100000000000000c0001000000000000000800"], 0x20}}, 0x0) socket(0x10, 0x80002, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924d77, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 03:10:03 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) [ 1144.543674][T22410] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea 03:10:03 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55", 0x7f}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1144.677828][T25346] usb 2-1: reset high-speed USB device number 11 using dummy_hcd [ 1144.963408][T25346] usb 2-1: Using ep0 maxpacket: 8 [ 1145.093530][T25346] usb 2-1: device firmware changed [ 1145.099883][T25346] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1145.105922][ T5] usb usb2-port1: device 2-1 not suspended yet [ 1146.163509][T22410] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 1146.193377][T22410] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1146.205866][T22410] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1146.218986][T22410] usb 4-1: USB disconnect, device number 18 [ 1146.923258][ T5] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1147.163203][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 1147.223481][ C1] net_ratelimit: 20 callbacks suppressed [ 1147.223506][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1147.223613][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1147.229620][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1147.235554][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1147.253800][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1147.259909][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1147.323328][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1147.331922][ T5] usb 4-1: config 0 has no interface number 0 [ 1147.338298][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1147.347575][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.357182][ T5] usb 4-1: config 0 descriptor?? 03:10:06 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000be235808fd0b11005fa7000000010902900001000000000904d3000162000000010000000000000000"], 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x1}, 0x1) 03:10:06 executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10a000d10) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000106ac108cd0c38001e9b000000010902120001000000f808045100000b78d500"], 0x0) 03:10:06 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:10:06 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109025c00000001020d0000052406000105240000ff07240f0100000000000000000905850300000000000904010000020d00000904010102020d000009058202000000000009050302000000000000000000002000e1cf7bd1d52095805c3e15f6423316152b3260f81f27cc171c7128aba32704a77ef1e372003d90db36134ffabefe6d4b8465d39525f9990b36e5ad515c9ef7437b4e71f748da322337319fdd9ff4da4f3dbcebffbea8d41a3fe9b352e45a85dddb101d73b2f59a7a3964699458544e524e1459b3215f9870afe6c5eb4d79c218198275f627e67bfc76f3088a6f29ed9495f11451bb1c059851f28c831d65a20187aea5e8a579fcc795c624ea76bf5504faa13e771dd33fd07c514e397b77935e37fc6f1c01622a1aa5550fc1ceb8bede41d03bab0fe85291d4072c"], &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:10:06 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000040)={0x1}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) pidfd_open(r5, 0x0) sched_setparam(r5, &(0x7f0000000000)=0x401) [ 1147.693320][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1147.727431][ T5] usb 4-1: USB disconnect, device number 19 03:10:06 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9", 0x81}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1148.033309][T12200] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1148.041395][T21718] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1148.173250][ T5] usb 4-1: new high-speed USB device number 20 using dummy_hcd 03:10:07 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1148.283253][T12200] usb 5-1: Using ep0 maxpacket: 8 [ 1148.293185][T21718] usb 3-1: Using ep0 maxpacket: 8 [ 1148.404166][T12200] usb 5-1: config index 0 descriptor too short (expected 144, got 27) [ 1148.412752][T12200] usb 5-1: config 0 has an invalid interface number: 211 but max is 0 [ 1148.421213][T12200] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1148.431865][T12200] usb 5-1: config 0 has no interface number 0 [ 1148.433542][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1148.438194][T12200] usb 5-1: config 0 interface 211 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1148.444246][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1148.457219][T12200] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=a7.5f [ 1148.463345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1148.471968][T12200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.477967][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1148.486953][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 1148.497832][T21718] usb 3-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1148.507070][T21718] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1148.514669][T21718] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1148.523903][T21718] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=9b.1e [ 1148.533319][T21718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.543388][T21718] usb 3-1: config 0 descriptor?? [ 1148.555682][T12200] usb 5-1: config 0 descriptor?? [ 1148.594652][T12200] kvaser_usb 5-1:0.211: Cannot get usb endpoint(s) [ 1148.613722][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1148.622359][ T5] usb 4-1: config 0 has no interface number 0 [ 1148.628815][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1148.638182][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.649054][ T5] usb 4-1: config 0 descriptor?? 03:10:07 executing program 0: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1148.786266][T12200] usb 3-1: USB disconnect, device number 21 03:10:08 executing program 0: r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1149.353450][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1149.553357][T22410] usb 3-1: new high-speed USB device number 22 using dummy_hcd 03:10:08 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000469ffc)=0x6040, 0x4) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e27, @broadcast}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) accept4$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10, 0x80800) [ 1149.790189][T25419] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1149.799181][T22410] usb 3-1: Using ep0 maxpacket: 8 03:10:08 executing program 0: r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1149.866532][T22410] usb 3-1: device descriptor read/all, error -71 03:10:09 executing program 0: r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:10:09 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000280)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xb38, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffffffffff53, 0x0}}], 0x400009c, 0x2040, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000200)) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) r7 = dup3(r0, r5, 0x40000) sysfs$2(0x2, 0x10000, &(0x7f00000002c0)=""/82) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x80000000}) r8 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r8}, {r9}, {r10}], 0x3, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000080)=@req3={0xffff, 0xfff, 0x1, 0x3, 0xd37, 0x7, 0x2}, 0x1c) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x284501, 0x0) [ 1150.764737][ T3379] usb 5-1: USB disconnect, device number 42 03:10:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) pidfd_open(r5, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000080)) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="b1e7ecd07cde44eabd8b7a08074364e3ae3d90f48591929ff024a8be8d449d0c0b727617d6155b2dbd944959364d21656bdda1d2c6527fb0b2692a78fa918d60e1c000b3b1ec2ce81cffe36249a0f59b66a09165f38dcd36ed21f1cc39a9080e7e3255ac1073083cbbdea127cae33a50cb549d32311525aa9a06b04c8f2740b80ad3f086db6aec1600a350e5b42cbb913bbcc41d63f6f54f33f7b6b75f04107534a82e42de16fa2dd8147b53a9", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r7}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={r7, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x1}}, [0x8003, 0x102, 0xfffffffffffefffe, 0x400, 0x8, 0x5, 0x2f, 0x9, 0x1, 0x108000000, 0x8, 0x5, 0x5, 0x8, 0x5]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x3bf}}, 0x5, 0x9, 0x89ce, 0x4, 0x1}, &(0x7f00000000c0)=0x98) ptrace$pokeuser(0x6, r5, 0x0, 0x7) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040)={0x1000}, 0x4) r8 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r10 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r8}, {r9}, {r10}], 0x3, 0x0, 0x0, 0x0) r11 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r11) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000400)=0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x393, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r8, @ANYRES32=0x0, @ANYRESHEX], 0x3}}, 0x24040050) 03:10:09 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9", 0x81}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:10:10 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x28, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xfe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x4}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x1}]}}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x71, 0x1, {{0x40, 0x1, 0x4}, 0x2}}, 0x18) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x83a7, 0x1f, 0x20}, 0xc) [ 1151.153463][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1151.165774][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1151.178241][ T5] usb 4-1: USB disconnect, device number 20 [ 1151.903112][ T3379] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1152.143113][ T3379] usb 4-1: Using ep0 maxpacket: 32 [ 1152.263442][ T3379] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1152.271877][ T3379] usb 4-1: config 0 has no interface number 0 [ 1152.278323][ T3379] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1152.287520][ T3379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.297248][ T3379] usb 4-1: config 0 descriptor?? 03:10:11 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x181001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x6c000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1152.583485][ C1] net_ratelimit: 20 callbacks suppressed [ 1152.583510][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.595878][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1152.602121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.608284][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:10:11 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x36, 0x1, 0x0, 0x0, {0x3, 0x1000000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xffffffff00000000}}]}]}, 0x2c}, 0x1, 0xffffff7f0e000000}, 0x0) 03:10:11 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:10:11 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9", 0x81}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:10:11 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3f, 0x2040) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x1804, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x5d, 0x80, 0x9, 0x1}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000100)={r8, 0x12, "d625df1fa64bfba547a376d57a68ee5f2790"}, &(0x7f0000000140)=0x1a) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="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", 0xfb}], 0x1}, 0x0) [ 1152.673414][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9 [ 1152.712340][ T3379] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1152.736655][T25455] netlink: get zone limit has 4 unknown bytes [ 1152.767597][ T3379] usb 4-1: USB disconnect, device number 21 03:10:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4cb], 0x1f000}) r6 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r6}, {r7}, {r8}], 0x3, 0x0, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r8, 0x8040552c, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:10:11 executing program 4: prctl$PR_SET_SECUREBITS(0x1c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x14}, {0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) 03:10:12 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000d818ac203a092a2642730000000109021b0001000000000904b300013d45d3000905876f0008000000"], 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40) bind$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x14) time(&(0x7f0000000080)) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000040)) [ 1153.063541][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1153.069943][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1153.148381][T25473] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1153.153456][ T3379] usb 4-1: new high-speed USB device number 22 using dummy_hcd 03:10:12 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1153.385344][T22410] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1153.393982][ T3379] usb 4-1: Using ep0 maxpacket: 32 [ 1153.463360][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1153.463734][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1153.472204][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1153.515612][ T3379] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1153.524204][ T3379] usb 4-1: config 0 has no interface number 0 [ 1153.530474][ T3379] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1153.539862][ T3379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.575656][ T3379] usb 4-1: config 0 descriptor?? [ 1153.664128][T22410] usb 5-1: Using ep0 maxpacket: 32 [ 1153.784809][T22410] usb 5-1: config 0 has an invalid interface number: 179 but max is 0 [ 1153.793377][T22410] usb 5-1: config 0 has no interface number 0 [ 1153.799629][T22410] usb 5-1: config 0 interface 179 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1153.811105][T22410] usb 5-1: New USB device found, idVendor=093a, idProduct=262a, bcdDevice=73.42 [ 1153.820517][T22410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.833458][T22410] usb 5-1: config 0 descriptor?? 03:10:12 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1153.883488][T22410] gspca_main: gspca_pac7302-2.14.0 probing 093a:262a [ 1154.275661][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea 03:10:13 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fe0009003c0900240042ef4200000001090249297600205f34ea881b00017600000009040000010209bd000788e0fb014a3525d564f9815e050107"], 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000003ff8)=0x8000) close(r1) syz_usb_ep_write(0xffffffffffffffff, 0x5, 0x67, &(0x7f0000000040)="0ed43294bb8a31cf615c794a5733e6fb35b0b23dbdee5256e3c0b63fad1f346369b16dc5f4b1359a64b9b86643c793a17e58b763803cbdd6aeb6973e16a51a42efaa8b437ed032b3ff81b5411c8129159d8d9f72248119c1e90969aa91b5f9b6945657bf9df112") syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000082505a1a440000102030109025c000200ffe7000904000001020d2cbe3d48a1297f0000052406000105240000000d240f010000000000000000000624e40000000905810300000000000904010000020d00000904010102020d00000905820200000000000905"], &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:10:13 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c00000001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1154.725223][T22410] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 1154.767913][T22410] gspca_pac7302 5-1:0.179: submit int URB failed with error -90 [ 1154.948998][T22410] usb 5-1: USB disconnect, device number 43 [ 1155.813117][T22410] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1156.053105][T22410] usb 5-1: Using ep0 maxpacket: 32 [ 1156.173373][T22410] usb 5-1: config 0 has an invalid interface number: 179 but max is 0 [ 1156.181887][T22410] usb 5-1: config 0 has no interface number 0 [ 1156.188358][T22410] usb 5-1: config 0 interface 179 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1156.201239][T22410] usb 5-1: New USB device found, idVendor=093a, idProduct=262a, bcdDevice=73.42 [ 1156.210732][T22410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.225066][T22410] usb 5-1: config 0 descriptor?? [ 1156.271121][T22410] gspca_main: gspca_pac7302-2.14.0 probing 093a:262a [ 1156.518095][T25492] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1156.673561][T22410] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1156.680668][T22410] gspca_pac7302: probe of 5-1:0.179 failed with error -71 [ 1156.694364][T22410] usb 5-1: USB disconnect, device number 44 [ 1157.623443][ C1] net_ratelimit: 20 callbacks suppressed [ 1157.623467][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1157.623894][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1157.629646][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1157.635676][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1157.653129][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1158.823566][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1158.829825][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1158.836238][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1158.842524][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1159.303268][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1160.913301][ T3379] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffff92 [ 1160.925223][ T3379] CoreChips: probe of 4-1:0.159 failed with error -110 03:10:20 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db", 0x82}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:10:20 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c00000001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:10:20 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9e, 0x3a, 0xf6, 0x40, 0x2001, 0x3308, 0xbb19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x3, "44d5ae"}, 0x0, 0x0, 0x0, 0x0}) r1 = pkey_alloc(0x0, 0x0) pkey_free(r1) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2, 0x40}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000000)="0bc80503f623032125cccbb4d22a90581e1dddd13aad4da4622d3e26bb3092d503832e310ad33198764301aeaa645e6d99b8941050e76506131fe8ce9146ce4c358b3a436c490f9ba2d9b6907d432f9ed1a2780b19ebb7d9093f9fa0") syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x3, '\x00pZ'}, 0x0, 0x0, 0x0, 0x0}) 03:10:20 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1, 0x0) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0xff}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r4, 0x200, 0x4}, &(0x7f0000000340)=0xc) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) pidfd_open(r8, 0x0) ptrace$getregs(0xc, r8, 0xea1, 0xfffffffffffffffd) r9 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r9}], 0x3, 0x0, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r9, 0xc06855c8, &(0x7f00000001c0)={0xc, 0x1, {0x51, 0x0, 0x5, {0x7, 0x3ff}, {0x8, 0x7}, @period={0x58, 0x8, 0x400, 0x7, 0x3, {0x6, 0x5, 0x7, 0x7bdd}, 0x3, &(0x7f0000000040)=[0x3, 0xd831, 0x2]}}, {0x52, 0x3, 0x738, {0x3, 0x1}, {0x5e, 0x72}, @period={0x5d, 0x1, 0x1, 0x0, 0x1, {0xd099, 0x3, 0x6, 0x4}, 0x1, &(0x7f0000000080)=[0x8]}}}) 03:10:20 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f0000000c00)=0xffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) pidfd_open(r8, 0x0) syz_open_procfs(r8, &(0x7f0000000bc0)='ns\x00') ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000b80)={0x2, 0x400}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') syz_usb_connect(0x1, 0x3c6, &(0x7f0000000c40)={{0x12, 0x1, 0x340, 0x7, 0x41, 0x75, 0x10, 0x22b7, 0x150d, 0xced1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b4, 0x1, 0x80, 0x4, 0x20, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0xc, 0x2e, 0xd, 0xb9, 0x81, [@hid_hid={0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0x9f}}], [{{0x9, 0x5, 0x0, 0x10, 0x2a1, 0x0, 0x1f, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x9}]}}, {{0x9, 0x5, 0x9, 0x0, 0xca, 0x9, 0x35, 0x47, [@generic={0x56, 0x6c, "8fae1882bbdb31f6faaa5b900c613bab152c9647f58e9b5bc8635038d0e9ebdf153d46414b71a45c4f7fbb14e4d18a3bc939e80f277f97d9504564b3b5182134fe060b5f686c4d691b24ffe7628b9fc931dbc892"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0xe}]}}, {{0x9, 0x5, 0xe95d5ef10fad475d, 0x3, 0x40, 0x7, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0xcd28}, @generic={0x99, 0x21, "6a64a3355ac46cd19dd7000210cf2bd9c3891b01cb06652db1c3b01010ab45dcafef76285551996ed19ba7b5f73337a4ab008b9afbb753d7e3f7c11e37f51de83060e4749ace51e03bd28c6fa11d58044c6d593d9877d64fb2d2492144ec89d98dc9203f05ae3c25ad097d17f2a5b7f9727ff6dffee9b36fd2ddde21798338f3e3af5a210817639ee659c2ffa1402e5f73487230530459"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x181, 0x1f, 0x3b, 0x80}}, {{0x9, 0x5, 0x2, 0x10, 0x158, 0x3, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x44, 0xe505}]}}, {{0x9, 0x5, 0x0, 0x8, 0x61, 0x2, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x5}]}}, {{0x9, 0x5, 0x5143f270dc809a9a, 0x0, 0xaf, 0x2, 0xf4, 0x96, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x81}]}}, {{0x9, 0x5, 0x5, 0x0, 0x4f, 0x60, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0x80, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xffff}]}}, {{0x9, 0x5, 0x8, 0x8, 0x26a, 0x3, 0x4, 0x2, [@generic={0xf7, 0x1, "788cbe60aa813f56d2621757fb76441347fcc992c33733e03170b278bac40482966e6e3e02f038dbb8ee1382d3a1c35909014bae9524b5fcd3b6a6d1a7d1556d77d816383013b26091d48652e0986c265973609e68ac0a67981cde63e15eab4ba3be63a51695330c9573d7a0cce6366c1e32577e4fda7ffdeb87f252c90621524298eac7d10801a99d7285a26baae046182c9effc9676b3104b7ae24cff8ce35fe29fea7f9fd156156e4a4554ed02743b5efff740f32f47c78f8ee3de49ee853384de13feab63e653aa4a7a1d7d541e1a7848f76dd5b3a9a4bbf1f4fad3327868b9345f5f0ba793bc0f17efb1b25e485bbeeae56b5"}, @generic={0x101, 0x11, "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"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x4a, 0x9, 0x2, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x39f, 0x0, 0x0, 0xdf}}, {{0x9, 0x5, 0x0, 0x2, 0x86, 0x7, 0x1, 0x80}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x341, 0x7, 0x9, 0x0, 0xff, 0xff}, 0x34, &(0x7f0000001080)={0x5, 0xf, 0x34, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x1f, 0x10, 0x0, "cbaf5f43f65f2c23d473c61ad117eee4ee75ed3be2f11df7037fbfc3"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x7f, 0x4b, 0xffff}]}, 0x1, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x380a}}]}) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000200)={0x18, r10, 0x1, 0x0, 0x0, {0x5}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x194, r10, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0xec, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x54e}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd48}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffa41}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb4}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb9, 0x1e, 0x65, 0x20, 0x763, 0x2030, 0xc404, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xff, 0xbd, 0xbb}}]}}]}}, 0x0) syz_usb_control_io(r11, 0x0, &(0x7f00000051c0)={0xac, 0x0, 0x0, 0x0, &(0x7f0000004d00)={0x20, 0x81, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r11, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0xa2e3bb7a6226ec05, 0x9f774833f3fced6c, 0x4c, {0x4c, 0xb, "a5a6d4698254bdcf9c3de57cac4156b61d4ccfeca0dbdab4db40eef2bbe0263f80b9b3cb6cac43b08c9878eee43d531c22081517371e57c85f553e3768ce035b4d6a270d9b0e18522501"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa0, 0x0, 0x8, 0x0, "369a0146", "b086be03"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x4, 0x80, 0x3, 0x9, 0x9273, 0x7}}}, &(0x7f0000000ac0)={0x84, &(0x7f00000005c0)={0x0, 0x220970165a3e9ef4, 0xae, "23aae68d593e072d8306ed73a529b5065a831c6e131d76eadea6e6402123c3dd6fa7e45d37456b56500ad0e6b578c4f62b99a2b62b397b007b0469e266af7672d3b2aa3c7889c689d4d081ce7a201cce1430c56dc14992017156785af0eeacc10226b079d054dea8aa66cbbd4957638d5a9b4e445e17121ed588430bd6575d16596d1936457f4479a37b6e289fe67519b2b687326534f45b21db7942a735a890dd4b9c0aae24f314c93034576bc4"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000740)=ANY=[@ANYBLOB="2000080000001000040008007056"], &(0x7f0000000780)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000800)={0x40, 0xb, 0x2, "b489"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x13, 0x6, @random="39aa673fb069"}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000900)={0x40, 0x19, 0x2, "aafb"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x2}}) [ 1160.991031][ T3379] usb 4-1: USB disconnect, device number 22 03:10:20 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080bb2720e60f0098b83c0000000109021200010000000009049f00007e052200ae940c4dcc119b814a3fb83a4d458d622509063d99f0496f0890421f6c56711d59eb154292f686a9e0f71cd9ef1b0d2b25fa62717b0087f0805c47300d90cd45872907199e47955a267807ce57f5ad370e3c11a94d"], 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb9, 0x1e, 0x65, 0x20, 0x763, 0x2030, 0xc404, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xff, 0xbd, 0xbb}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000051c0)={0xac, 0x0, 0x0, 0x0, &(0x7f0000004d00)={0x20, 0x81, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x253, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x12, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x25e}}, {{{0x9, 0x5, 0x81, 0x3, 0x10a, 0x80, 0x5, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x25a, 0x8, 0x4, 0x80}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x6, 0x3f, 0xc4, 0x40, 0x81}, 0x2d, &(0x7f0000000100)={0x5, 0xf, 0x2d, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x4, 0x8, 0x8, 0x2, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "e1bed9e46ad33bfbf51c60fed872208c"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xe6, 0x1}]}, 0x4, [{0xe0, &(0x7f0000000140)=@string={0xe0, 0x3, "7152ec47e275fe811188c40d2f80a4d3ef4e9545a08638751e5ddd8bdefcb53e62f3d949a1697cb65e84a85a7f43283304f59f298fe994304577d91e27b274c1397d66ff13a307f785c1cdc05efe45742611648502027697690f2c0644d6b26a24fe628aff7d28dea07d19424d4e8d9714812595107afce590c28950770aeb7d2d7f01a57c90c2454b6fcade8277675c732b392d7911f9de321722c7c7fe5e984ec49a0332b4284af4e65b076df19015e424d25af8d4b637d8b54949260f4d01984f9d05a36381398e588be028297ab520e346d2602a9f6ff43ddfce7379"}}, {0x8e, &(0x7f0000000240)=@string={0x8e, 0x3, "7ccf028508cf4db4cc8bcb9e4807333088f9284f6a3f9a1df702e4a67f12c21f08bfc40daf3d6f004dd7bb60cca73cbe9930ddb52c769e1a60f1f3ebd7c5ee6c132fabfae0f7fca2eaa0626a39c380bc5b71cc8720e734afa121d28492a53e955369a365c18ec1947ab3c4c794e616a6457a5d3d7d233ee2ce7f96009585b17debbace98dc740b3810452148"}}, {0x1002, &(0x7f00000004c0)=@string={0x1002, 0x3, "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"}}, {0x1002, &(0x7f0000002040)=@string={0x1002, 0x3, "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"}}]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb9, 0x1e, 0x65, 0x20, 0x763, 0x2030, 0xc404, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xff, 0xbd, 0xbb}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000051c0)={0xac, 0x0, 0x0, 0x0, &(0x7f0000004d00)={0x20, 0x81, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000001d80)=ANY=[@ANYBLOB="12010002000000ffc410b98140000154d9ddbcf99dd5965202030109022d00010100600209040000020301030009212f008101221d0708058103900106040009050203b9025308035aa787d53e52c83262250b0854dd45304df4b66b1ce05cb1827b33df05"], &(0x7f0000000440)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x50, 0x6, 0x86, 0x1f, 0x38, 0x6}, 0x2e, &(0x7f0000000400)={0x5, 0xf, 0x2e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x0, 0x2}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x2, 0x5, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x3, 0x8, 0x81, 0x0, 0x7fff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x5, 0x2, 0x1, 0x1f}]}}) r3 = syz_usb_connect$cdc_ncm(0x2, 0x87, &(0x7f00000015c0)=ANY=[@ANYBLOB="12011003020000c12505a1a44000010203010902750002014000fa0904000001020d00220a24060001254071a2e505240000000d240f0105000000010000000106241a00088108241c04004009000724140004010005241507000905810392022340000904010000020d00050004010102020d00e9090582021e0192c00409050302ac029a0301"], &(0x7f0000001a40)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x201, 0x40, 0x7, 0x8, 0x40, 0x9}, 0x1a4, &(0x7f0000001800)={0x5, 0xf, 0x1a4, 0x2, [@generic={0x9d, 0x10, 0x1, "fad7c671b194fc55d714e0683b8bb97be899d2a8a0133dc3988a97ea9c9698e914036c3deea932d0a4f355b5893063678a9ef92a52131aaaaca9cb81131f2c9f61d07fefd451fb3783ac8a8802f57e4e0513f1489f64d49c6aa9e690b83a28901d53db708f7fdfe551644aca341575601d60714444ae83416ed5f14ecf5a43225aca91e4c61eb6bbeb4a8ef4616b20fcffe5edeb80da0cddf0f9"}, @generic={0x102, 0x10, 0x1, "536e2c1501b5880fc56ca18d72184206d98df279b9a94b63add057a57cd4599dfb7e882632405d3057770038dbefc692965b1f326840b8c936c840e06160902fc7acd3f6592a624005dffa4bb85aa31b971e75ffe451773d57e030ee36930313f5aef7c19e002f25b113002127843b8744533ca0a9f4a2b3efe64cde36fd22e8b7e90ccd91ca63e4784ca22bac24009f3ed08bd9c4779968087f606ea6fd648095b4110c926eba4ef1d2aedbda6c216aa0bbcc9f0f7207c3043a1e082004fcf9a23dc0b26284263d6e0ad63a3c00843feaae5362580a0c388a37563665d4071e42a0e3e72adcd4502b84f7a0f51ef1f94405974fe3d269e1c6fece08575f11"}]}, 0x4, [{0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4c, &(0x7f0000001680)=@string={0x4c, 0x3, "4c17d23e1c403476583564ee041213235b8fed586792148482d7642af395ea0d21654106569b7597f4670a68c6c9ec29f350d68854133799aef64babddff1e2f168ef76f889e48679cd0"}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x421}}, {0x55, &(0x7f00000019c0)=@string={0x55, 0x3, "c530e994073e69cca23d5242e6e477f1f188aebd97aeb006c96c36738d9ee0f48369a6a0b9791282f12fde96cf98fa940adee31dba87d8142c6115db9f4e5a207dab74a5d932637a46eec02b544028105ca6f1"}}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r6 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r4}, {r5}, {r6}], 0x3, 0x0, 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r7, 0x5) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r11 = socket(0xa, 0x80005, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) 03:10:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) ioctl$void(0xffffffffffffffff, 0xc0042600) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000180)=0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000540)=""/196) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa2d90bc29ea0a86dd6050a09c00102f00fe800000000000000000aafe8000000000000000000000000000aa00004e22040190780003003b00524ea626ee2e53f2ec5f245ce1f13596646865e89842ecb31fd84d4626a5c7f7fd29ed7dba753a166635134c1f9063a045e6fbf7f8e22121656ab4da5eaf0c35043696f2df2df7bb42a7800169222308be05f4ff6d847c529707209a00"/168], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:10:20 executing program 4: [ 1161.316870][T22410] usb 3-1: new high-speed USB device number 24 using dummy_hcd 03:10:20 executing program 4: 03:10:20 executing program 4: 03:10:20 executing program 4: [ 1161.484106][ T3379] usb 4-1: new high-speed USB device number 23 using dummy_hcd 03:10:20 executing program 4: [ 1161.683452][T22410] usb 3-1: New USB device found, idVendor=2001, idProduct=3308, bcdDevice=bb.19 [ 1161.692906][T22410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.703675][T22410] usb 3-1: config 0 descriptor?? [ 1161.723303][ T3379] usb 4-1: Using ep0 maxpacket: 32 [ 1161.843448][ T3379] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1161.851791][ T3379] usb 4-1: config 0 has no interface number 0 [ 1161.858509][ T3379] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1161.868425][ T3379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.878299][ T3379] usb 4-1: config 0 descriptor?? [ 1161.963325][T22410] rtl8192cu: Chip version 0x0 [ 1161.968225][T22410] rtl_usb: Too few input end points found [ 1162.363670][ T3379] CoreChips: probe of 4-1:0.159 failed with error -22 [ 1162.413490][T22410] usb 3-1: Unsupported USB TX end-points [ 1162.419344][T22410] usb 3-1: Fatal - failed to identify chip [ 1162.426798][T22410] rtl8xxxu: probe of 3-1:0.0 failed with error -524 [ 1162.438437][T22410] usb 3-1: USB disconnect, device number 24 [ 1162.983374][ C1] net_ratelimit: 19 callbacks suppressed [ 1162.983388][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1162.995737][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1163.002298][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1163.008495][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1163.114226][T25531] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1163.143219][ T5] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1163.463573][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1163.469847][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1163.523353][ T5] usb 3-1: New USB device found, idVendor=2001, idProduct=3308, bcdDevice=bb.19 [ 1163.532800][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.542849][ T5] usb 3-1: config 0 descriptor?? [ 1163.803527][ T5] rtl8192cu: Chip version 0x0 [ 1163.808989][ T5] rtl_usb: Too few input end points found [ 1163.863597][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1163.863650][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1163.864034][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1163.869835][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1163.889440][ T5] usb 3-1: Unsupported USB TX end-points [ 1163.895514][ T5] usb 3-1: Fatal - failed to identify chip [ 1163.901962][ T5] rtl8xxxu: probe of 3-1:0.0 failed with error -524 [ 1163.915862][ T5] usb 3-1: USB disconnect, device number 25 03:10:23 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db", 0x82}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:10:23 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c00000001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:10:23 executing program 4: 03:10:23 executing program 2: 03:10:23 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xfc}}}}}}}]}}, &(0x7f0000000180)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}, 0x4, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x415}}, {0xffffffffffffff76, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x383e}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x419}}]}) 03:10:24 executing program 2: 03:10:24 executing program 4: 03:10:24 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db", 0x82}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:10:24 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c00000001090212000100000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1165.377560][ T5] usb 4-1: USB disconnect, device number 23 03:10:24 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r0}, {r1}, {r2}], 0x3, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r6}, {r7}, {r8}], 0x3, 0x0, 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x1, &(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=r5, @ANYBLOB="a31db58706698d360d1b115cb2e0192992308b4f4c99fa78a5ac97ae5def009be75cc73f8a675f163b8057da740d3d07ee86a98c9c2183d03382c0289ae121b332fd7fc3d66d5d2b30d5871cb7e5bb9961b3fbc36b1a77449df8f65d281fdfe8b9170e7914136ba8189b29c4dddf4ef47d106f297a84e95012a54121de552aebfb023f0881d2aa886b376bd6a34c45606eaa6430acd831371d014ac2b8", @ANYRESOCT=0x0, @ANYRESOCT, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="f8af8d029cc0c12211a6c4"], @ANYRES32=r8, @ANYRESOCT]], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r9, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:10:24 executing program 2: 03:10:24 executing program 4: 03:10:24 executing program 2: 03:10:24 executing program 4: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x28, &(0x7f00000003c0), 0x4) 03:10:24 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001600)=""/246, 0xf6}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') preadv(r2, &(0x7f00000017c0), 0x1a0, 0xa3) 03:10:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x2, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 1166.429116][T25584] cdc_wdm 2-1:118.0: Error autopm - -16 03:10:26 executing program 2: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000100)='./file0\x00', 0x1142, 0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) shutdown(0xffffffffffffffff, 0x0) ptrace(0x11, r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) close(r2) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0x7) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3e, r4}) 03:10:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x21, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000000c0)={r6}, &(0x7f0000001100)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r6, 0x7fff, 0x20, 0xff, 0x7}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000200), 0x4) fsetxattr$security_smack_transmute(r0, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x6) 03:10:26 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c00000001090212000100000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1168.023527][ C1] net_ratelimit: 20 callbacks suppressed [ 1168.023551][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.023566][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.024035][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1168.029725][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1168.035745][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.058792][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:10:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:10:27 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r4, 0x7006) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 03:10:27 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) 03:10:27 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c00000001090212000100000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:10:27 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:10:27 executing program 4: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000180)='./file0\x00', 0x0) chroot(0x0) 03:10:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x9d8723ffcc367fae}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() lsetxattr$security_evm(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "939d03c6b62ccfd5e1303ef277d88be9"}, 0x11, 0x0) clone(0x3fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000010000002d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000015000000940000000000000095000000000000005d4aba2334ef7488be097dbdc99faf24365628ad2de08531377a274d96263d4345d45d359e7028304fd0e49e66111b7bc645964764aadc57d484f66a1f4aa595507110cbede0c0ea470c9b064fd6011ffb767072fd8632625d287eb5243415640ab25ff98b129f860f6e98cbf809bd6c598d99dc33efae91e1800f22aadbfb22443b6eb6c86f03d6796fe31e4b9658e05aaede7cdbe0a55f5de9dbad9d2c212ac178ef56fbbaea847e97d6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x21) wait4(0x0, 0x0, 0x0, 0x0) 03:10:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a00000000000004ff7f0000000000000200000100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055338b2698ffffffff7710aa00ffe8001700410000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) [ 1168.753532][ T5] usb 4-1: new high-speed USB device number 24 using dummy_hcd 03:10:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a00000000000004ff7f0000000000000200000100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055338b2698ffffffff7710aa00ffe8001700410000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 03:10:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() clone(0x3fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000010000002d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe000000008500000015000000940000000000000095000000000000005d4aba2334ef7488be097dbdc99faf24365628ad2de08531377a274d96263d4345d45d359e7028304fd0e49e66111b7bc645964764aadc57d484f66a1f4aa595507110cbede0c0ea470c9b064fd6011ffb767072fd8632625d287eb5243415640ab25ff98b129f860f6e98cbf809bd6c598d99dc33efae91e1800f22aadbfb22443b6eb6c86f03d6796fe31e4b9658e05aaede7cdbe0a55f5de9dbad9d2c212ac178ef56fbbaea847e97d6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) wait4(0x0, 0x0, 0x0, 0x0) 03:10:28 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f0000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:10:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="020a000007000000000020000000854105001a000000000000d74619ed1307d89524429adc542c0200000014aaa7e1c7000000000000000000004270e08eba60d9a46b2225d7434d38129bbec2c232e2767345d67d010235272077700789ecba5d3fc41bcab202354a77f1eff768504b5816624a832cb8786c09fde4f0232c22fa458148e26ffe727ecc7261025313e925d358bf04257319ecdf909d391a55bb9ace4b099d341d39c372ba4b5ecd7e80b977782210cf7923e33b8ad19df455297665d71e1c1f2ab0f713d7861168d909d63ba6850d92f7"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a00000000000004ff7f0000000000000200000100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055338b2698ffffffff7710aa00ffe8001700410000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) [ 1169.023599][ T5] usb 4-1: Using ep0 maxpacket: 32 03:10:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) sendmsg$sock(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="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", 0x445}, {0x0}], 0x2}, 0x4000040) [ 1169.153561][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1169.161951][ T5] usb 4-1: config 0 has no interface number 0 [ 1169.168504][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1169.177786][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.189011][ T5] usb 4-1: config 0 descriptor?? [ 1169.223505][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1169.229866][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1169.236429][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1169.242741][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1169.893473][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1170.511993][T25654] cdc_wdm 2-1:118.0: Error autopm - -16 03:10:30 executing program 1: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x1) r3 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r1}, {r2}, {r3}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x9, 0x3, [0x3ff, 0x6, 0xe5]}, 0xe) [ 1171.673292][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1171.685483][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1171.700358][ T5] usb 4-1: USB disconnect, device number 24 [ 1172.423316][ T5] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1172.663120][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 1172.783396][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1172.792067][ T5] usb 4-1: config 0 has no interface number 0 [ 1172.798495][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1172.807811][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.817471][ T5] usb 4-1: config 0 descriptor?? 03:10:32 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept$unix(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, 0x0, 0x0) 03:10:32 executing program 4: 03:10:32 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f0000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:10:32 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1173.183648][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 03:10:32 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x201400, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[r2]}, 0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r7 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r5}, {r6}, {r7}], 0x3, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000000100)={0x8, "29f12b4d23d6c41d03bd5304d83beeab3022c903560cb96ad841166063e0c79f", 0x3, 0x1000, 0x8, 0x400007, 0x8, 0x0, 0x6, 0xffffffff}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1173.239733][ T5] usb 4-1: USB disconnect, device number 25 03:10:32 executing program 4: 03:10:32 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:10:32 executing program 2: [ 1173.383507][ C1] net_ratelimit: 20 callbacks suppressed [ 1173.383531][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1173.395668][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1173.402115][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1173.408487][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:10:32 executing program 4: 03:10:32 executing program 2: 03:10:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = gettid() capget(&(0x7f0000000140)={0x20080522, r1}, &(0x7f0000000180)) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) [ 1173.693149][ T5] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1173.818974][T25690] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1173.873487][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1173.879625][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1173.943201][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 1174.063507][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1174.072014][ T5] usb 4-1: config 0 has no interface number 0 [ 1174.078489][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1174.088541][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.098372][ T5] usb 4-1: config 0 descriptor?? [ 1174.263554][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.263568][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.263968][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1174.269895][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1174.813285][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea 03:10:34 executing program 2: 03:10:34 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f0000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:10:34 executing program 4: 03:10:34 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) pidfd_open(r2, 0x0) ptrace$getenv(0x4201, r2, 0xe0, &(0x7f0000000000)) 03:10:34 executing program 2: [ 1176.583660][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1176.595706][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1176.607725][ T5] usb 4-1: USB disconnect, device number 26 [ 1177.223972][T25705] cdc_wdm 2-1:118.0: Error autopm - -16 [ 1177.343091][ T5] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1177.593109][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 1177.723375][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1177.731781][ T5] usb 4-1: config 0 has no interface number 0 [ 1177.738333][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1177.747650][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.757426][ T5] usb 4-1: config 0 descriptor?? 03:10:37 executing program 2: 03:10:37 executing program 4: 03:10:37 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e05"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:10:37 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:10:37 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb9, 0x1e, 0x65, 0x20, 0x763, 0x2030, 0xc404, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xff, 0xbd, 0xbb}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000051c0)={0xac, 0x0, 0x0, 0x0, &(0x7f0000004d00)={0x20, 0x81, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1178.103962][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1178.161356][ T5] usb 4-1: USB disconnect, device number 27 03:10:37 executing program 2: 03:10:37 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea26", 0x4d}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:10:37 executing program 2: request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) keyctl$unlink(0x9, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 03:10:37 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000006d00), 0x400034b, 0x0) [ 1178.423497][ C0] net_ratelimit: 20 callbacks suppressed [ 1178.423522][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.423652][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.429694][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1178.435542][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1178.441538][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1178.459806][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:10:37 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200540, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)={r1, 0x1}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e23, @remote}}) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000340)=ANY=[@ANYBLOB="00be1fe77c67000000e276ca0bfdc18d0101260000006c988bac000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="050f0c000107100200000000"], @ANYBLOB="400000005a920db71035d3affb2935a1f2f1be088d2e3c7cbfa6"]) r6 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r8 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r6}, {r7}, {r8}], 0x3, 0x0, 0x0, 0x0) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f0000000300)={0x4000, 0x4000, 0x5, 0x9}) getsockopt$inet6_opts(r8, 0x29, 0x39, &(0x7f0000000180)=""/96, &(0x7f0000000200)=0x60) 03:10:37 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x80) [ 1178.615536][ T5] usb 4-1: new high-speed USB device number 28 using dummy_hcd 03:10:37 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e05"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:10:37 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) poll(&(0x7f0000000040)=[{r0}], 0x7, 0x0) 03:10:37 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_getneigh={0x2a1, 0x1e, 0x601, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x3}]}, 0x2a1}}, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x40000) [ 1178.883627][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 1178.959139][T25746] netlink: 633 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1179.014177][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1179.022549][ T5] usb 4-1: config 0 has no interface number 0 [ 1179.029013][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1179.038520][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.050011][ T5] usb 4-1: config 0 descriptor?? [ 1179.085385][T25746] netlink: 633 bytes leftover after parsing attributes in process `syz-executor.2'. 03:10:38 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002702000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe4d640500000000004504000000ffffff9704000000000900b704000010000020620700fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000280)='\xc2\x06m\xd6D\xec\x01\xd7Rg\x7f\x9c-_\xd0\xe7\xfa=2\x00=', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdeb}, 0x48) [ 1179.623614][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.629969][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1179.637929][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1179.644459][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1179.756293][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1180.677948][T25756] cdc_wdm 2-1:118.0: Error autopm - -16 03:10:40 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1181.393524][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 1181.424765][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 1181.437075][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1181.449583][ T5] usb 4-1: USB disconnect, device number 28 [ 1182.153120][ T5] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1182.393111][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 1182.513385][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1182.521818][ T5] usb 4-1: config 0 has no interface number 0 [ 1182.528370][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1182.537574][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.547528][ T5] usb 4-1: config 0 descriptor?? 03:10:41 executing program 3: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000840)='/dev/vga_arbiter\x00', 0x202, 0x0) getsockname$netlink(r1, &(0x7f0000000880), &(0x7f00000008c0)=0xc) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000800)='/dev/btrfs-control\x00', 0x80800, 0x0) ioctl$VFIO_SET_IOMMU(r2, 0x3b66, 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001fc0)={0x44, &(0x7f0000001d00)={0x0, 0x0, 0x2, "a8a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x3, 0x3f, @string={0x3f, 0x3, "3ceeec70d8a87aff4ca5e66fc785a931b65729383909d67ace866ff1762c07934c9f1809f65199bb300bec1023d17235784f62d974d672c587021e9cd2"}}, &(0x7f0000000180)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x9, 0xdd, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x3e, 0x8, 0x1, 0x2f6, 0x7f}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x60, 0x6, 0x0, "aa076e3f", "2843f8a5"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x3, 0x0, 0x8, 0x5, 0xdd, 0x9}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x60, 0x17, 0x98, "98a1a9bb58b1f34fcf3be880f6a85fb1db84599b654197c74d274ed781c1dcd7cc63a0b2dde4a577fe0a04fa0f5c476d2a9d4c2f51a1562b06018277e41bb19d8a72727bedfc537f96c1a2df04f9655b0113ef11c76302892125ff37c5055f204f9e10900e1f9ba4367419b8899297187d9cb9c1b8b8ebd0a5e4efa7df554e561deac05af262105feff29667b2335b7f3171b8113e6df1f5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xd4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x89}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0xe0, 0x80}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x4d}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000500)={0x40, 0xb, 0x2, "0118"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x74d}, &(0x7f0000000580)={0x40, 0x13, 0x6, @local}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={[], 0x2a}}, &(0x7f0000000600)={0x40, 0x19, 0x2, "2cbb"}, &(0x7f0000000640)={0x40, 0x1a, 0x2}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x6}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000700)={0x40, 0x21, 0x1}}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000900)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f00000009c0)={0x2, &(0x7f0000000940)="6c42489890c45eff705d042253b54aaab7d8a57f200caa1975cb519d5d3d8a8069b7999af0dc5a887f0f3cc9ced4c6f1fbc28f659e2c54e11e0b5de1a3bc02ca5043fbcc90fbdfa68a84a691f880d4928615dfb67dca23cb90"}) 03:10:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'system.', '/dev/snd/midiC#D#\x00'}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) mq_notify(r5, &(0x7f0000000080)={0x0, 0x17, 0x1, @tid=0xffffffffffffffff}) ppoll(&(0x7f0000000a80)=[{r2}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000000)={@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x28}}, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100024f7c000000010902120001000000000904860000c5e53a000000000000000000"], 0x0) 03:10:41 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e05"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:10:41 executing program 4: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x3, 0x6) listen(r0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000200000000800450000680000000000069078000000000000000000004e20", @ANYRES32=0x42424242, @ANYRES32=0x41424344, @ANYBLOB="50d0000090780000000f39f3d20d203297d289ad07f6a603030013127305fed2433a8972d7687ef8354f1134fe07f989b7f2e21312f544acbd455e75e5f36811236b26ac42000000"], 0x0) 03:10:41 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201fe0009003c0800240042ef420000000109021b00017600000009040000010209bd00070581070001000000bf52cf6794a9d3"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x4, 0x100, 0x1, {0x41d, 0x7fffffff, 0x7fffffff, 0xa9d8}}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) [ 1182.898051][ T5] CoreChips: probe of 4-1:0.159 failed with error -71 [ 1182.969943][ T5] usb 4-1: USB disconnect, device number 29 03:10:42 executing program 4: socketpair$unix(0x1, 0x2000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x480000, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r9 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r7}, {r8}, {r9}], 0x3, 0x0, 0x0, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r12 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r10}, {r11}, {r12}], 0x3, 0x0, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000010006763a1b0d85ef95a01000000000000", @ANYRES32=r16, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="fcce5c1819981d2a"], 0x48}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48}}]}, 0x74}}, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0x701, 0x0, 0x0, {0x0, r16, {}, {}, {0x3}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x3}}]}, 0x30}}, 0x0) r18 = syz_open_dev$vbi(&(0x7f0000000780)='/dev/vbi#\x00', 0x0, 0x2) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x27dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_PORT_SELF={0x0, 0x19, [@IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "7c07b6a2a1dd05a8abfa2bde63685da6"}, @IFLA_PORT_VF={0x0, 0x1, 0x3}, @IFLA_PORT_PROFILE={0x0, 0x2, 'bridge0\x00\x00\f4\xbd\x19\n\x00'}]}, @IFLA_XDP={0x0, 0x2b, [@IFLA_XDP_FD={0x0, 0x1, {0x17, 0x0, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1301, 0x0, 0x0, 0x0, 0xc30141}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000440)='syzkaller\x00', 0xb1a, 0x0, &(0x7f0000000480)=""/125, 0x40f00, 0x1, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x2, 0x1}, 0x0, 0x10, &(0x7f0000000540)={0x4, 0xd, 0x0, 0x301}}}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x2}, @IFLA_XDP_FLAGS, @IFLA_XDP_FD={0x0, 0x1, {0x7, 0x2cb, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x53ae, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map={0x18, 0x4, 0x1, 0x0, r6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6063, 0x0, 0x0, 0x0, 0xb29}, @map={0x18, 0x9, 0x1, 0x0, r9}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map={0x18, 0xed768d4269b42f2b, 0x1, 0x0, r12}, @alu={0x0, 0x1, 0x3, 0xb, 0x6, 0x188}]}, &(0x7f0000000640)='GPL\x00', 0x1f, 0x0, &(0x7f0000000680)=""/230, 0x41000, 0x0, [], r16, 0x0, r18, 0x8, &(0x7f00000007c0)={0xa, 0x5}, 0x0, 0x10, &(0x7f0000000800)={0x4, 0xc, 0x7, 0x400}}}]}]}, 0xb}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x243, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000024003317008e769c13235b4038978bd7", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffcc4, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000f0000000000000000000000010000000", @ANYRES64, @ANYRES64], 0x3}}, 0x0) ioctl$sock_ifreq(r0, 0x2000089a2, &(0x7f0000000000)={'bridge0\x00\x00\f4\xbd\x19\n\x00', @ifru_addrs=@can={0x1d, r5}}) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x4107a) r19 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200, 0x0) write$cgroup_subtree(r19, 0x0, 0x2f9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 1183.160477][T25779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1183.189511][T25779] bridge0: port 3(veth0_to_bond) entered blocking state [ 1183.197061][T25779] bridge0: port 3(veth0_to_bond) entered disabled state [ 1183.206460][T25779] device veth0_to_bond entered promiscuous mode [ 1183.213927][T25779] bridge0: port 3(veth0_to_bond) entered blocking state [ 1183.221069][T25779] bridge0: port 3(veth0_to_bond) entered forwarding state [ 1183.385208][ T5] usb 4-1: new high-speed USB device number 30 using dummy_hcd 03:10:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc), 0x4) r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x70, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x0, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x0, 0x244800) ppoll(&(0x7f0000000a80)=[{r3}, {r4}, {r5}], 0x3, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x4, 0x64, [], 0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)=""/100}, &(0x7f00000001c0)=0x78) 03:10:42 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e0522"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1183.653037][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 1183.773171][ T5] usb 4-1: config 0 has an invalid interface number: 159 but max is 0 [ 1183.781697][ T5] usb 4-1: config 0 has no interface number 0 [ 1183.783454][ C1] net_ratelimit: 20 callbacks suppressed [ 1183.783474][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1183.788152][ T5] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1183.794216][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1183.799674][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.809397][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1183.829152][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1183.867995][ T5] usb 4-1: config 0 descriptor?? 03:10:43 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e0522"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 03:10:43 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000000)="a48b12f728db4b2b5d2f2fba4fad273b1ea3e46f905080af4cf9f43b1136655aae84d1d2ce90ccb15322e200000000000000960f53691a655eb6989d32772cf2eebb1f6c785d6382fa7776ea267d32109a5633657b52873b9925f15a5b587ec8eaab2abd683c8ff8640f46e160757c496cd97afe9afbc943c0581476da2e55bac9db8a", 0x83}], 0x3, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb7, 0x0, 0xfffffffffffffe9a}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 1184.263372][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.269614][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1184.555358][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1184.663407][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.663607][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1184.669633][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1184.675659][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:10:43 executing program 0: r0 = syz_usb_connect(0x0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e0522"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1185.035288][T25799] cdc_wdm 2-1:118.0: Error autopm - -16 03:10:44 executing program 0: r0 = syz_usb_connect(0x0, 0x3e5, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000080dd2720e60f0098b83c0000000109021200010000000009049f00007e052200"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x40, 0x13, 0x6}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 1185.643077][T12200] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1185.883055][T12200] usb 1-1: Using ep0 maxpacket: 32 [ 1186.003217][T12200] usb 1-1: config 0 has an invalid interface number: 159 but max is 0 [ 1186.011550][T12200] usb 1-1: config 0 has no interface number 0 [ 1186.018075][T12200] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=3c.b8 [ 1186.027448][T12200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.073737][T12200] usb 1-1: config 0 descriptor?? [ 1186.535250][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 1186.555416][T12200] CoreChips: probe of 1-1:0.159 failed with error -22 [ 1186.569132][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 1186.623290][ T5] CoreChips 4-1:0.159 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 1186.634082][ T5] ===================================================== [ 1186.641191][ T5] BUG: KMSAN: uninit-value in sr9800_bind+0xd39/0x1b10 [ 1186.648066][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.4.0-rc3+ #0 [ 1186.655361][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1186.665476][ T5] Workqueue: usb_hub_wq hub_event [ 1186.670519][ T5] Call Trace: [ 1186.673842][ T5] dump_stack+0x191/0x1f0 [ 1186.678209][ T5] kmsan_report+0x14a/0x2f0 [ 1186.682753][ T5] __msan_warning+0x73/0xf0 [ 1186.687287][ T5] sr9800_bind+0xd39/0x1b10 [ 1186.691827][ T5] ? sr_share_read_word+0x630/0x630 [ 1186.697139][ T5] usbnet_probe+0x10d3/0x39d0 [ 1186.701843][ T5] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1186.707962][ T5] ? ktime_get_mono_fast_ns+0x2c2/0x400 [ 1186.713582][ T5] ? usbnet_disconnect+0x660/0x660 [ 1186.718737][ T5] usb_probe_interface+0xd19/0x1310 [ 1186.723979][ T5] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1186.729900][ T5] ? usb_register_driver+0x860/0x860 [ 1186.735214][ T5] really_probe+0xd91/0x1f90 [ 1186.739848][ T5] driver_probe_device+0x1ba/0x510 [ 1186.745010][ T5] __device_attach_driver+0x5b8/0x790 [ 1186.750427][ T5] bus_for_each_drv+0x28e/0x3b0 [ 1186.755336][ T5] ? deferred_probe_work_func+0x400/0x400 [ 1186.761087][ T5] __device_attach+0x489/0x750 [ 1186.765894][ T5] device_initial_probe+0x4a/0x60 [ 1186.770948][ T5] bus_probe_device+0x131/0x390 [ 1186.775845][ T5] device_add+0x25b5/0x2df0 [ 1186.780389][ T5] usb_set_configuration+0x309f/0x3710 [ 1186.785896][ T5] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1186.792087][ T5] generic_probe+0xe7/0x280 [ 1186.796618][ T5] ? usb_choose_configuration+0xae0/0xae0 [ 1186.802373][ T5] usb_probe_device+0x146/0x200 [ 1186.807263][ T5] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1186.813194][ T5] ? usb_register_device_driver+0x500/0x500 [ 1186.819139][ T5] really_probe+0xd91/0x1f90 [ 1186.823770][ T5] driver_probe_device+0x1ba/0x510 [ 1186.828918][ T5] __device_attach_driver+0x5b8/0x790 [ 1186.834334][ T5] bus_for_each_drv+0x28e/0x3b0 [ 1186.839221][ T5] ? deferred_probe_work_func+0x400/0x400 [ 1186.844977][ T5] __device_attach+0x489/0x750 [ 1186.849843][ T5] device_initial_probe+0x4a/0x60 [ 1186.854897][ T5] bus_probe_device+0x131/0x390 [ 1186.859798][ T5] device_add+0x25b5/0x2df0 [ 1186.864355][ T5] usb_new_device+0x23e5/0x2fb0 [ 1186.869259][ T5] hub_event+0x581d/0x72f0 [ 1186.873762][ T5] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1186.879822][ T5] ? led_work+0x720/0x720 [ 1186.884184][ T5] ? led_work+0x720/0x720 [ 1186.888632][ T5] process_one_work+0x1572/0x1ef0 [ 1186.893719][ T5] worker_thread+0x189c/0x2460 [ 1186.898547][ T5] kthread+0x4b5/0x4f0 [ 1186.902653][ T5] ? process_one_work+0x1ef0/0x1ef0 [ 1186.907887][ T5] ? kthread_blkcg+0xf0/0xf0 [ 1186.912520][ T5] ret_from_fork+0x35/0x40 [ 1186.917408][ T5] [ 1186.919912][ T5] Local variable description: ----res@sr_mdio_read [ 1186.926424][ T5] Variable was created at: [ 1186.930898][ T5] sr_mdio_read+0x78/0x360 [ 1186.935437][ T5] sr_mdio_read+0x78/0x360 [ 1186.939870][ T5] ===================================================== [ 1186.946841][ T5] Disabling lock debugging due to kernel taint [ 1186.953011][ T5] Kernel panic - not syncing: panic_on_warn set ... [ 1186.959640][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Tainted: G B 5.4.0-rc3+ #0 [ 1186.968334][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1186.978424][ T5] Workqueue: usb_hub_wq hub_event [ 1186.983495][ T5] Call Trace: [ 1186.986822][ T5] dump_stack+0x191/0x1f0 [ 1186.991203][ T5] panic+0x3c9/0xc1e [ 1186.995153][ T5] kmsan_report+0x2e8/0x2f0 [ 1186.999701][ T5] __msan_warning+0x73/0xf0 [ 1187.004253][ T5] sr9800_bind+0xd39/0x1b10 [ 1187.009236][ T5] ? sr_share_read_word+0x630/0x630 [ 1187.014560][ T5] usbnet_probe+0x10d3/0x39d0 [ 1187.016294][T25774] udc dummy_udc.3: registering UDC driver [USB fuzzer] [ 1187.019302][ T5] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1187.026561][T25774] dummy_hcd dummy_hcd.3: port status 0x00010101 has changes [ 1187.032334][ T5] ? ktime_get_mono_fast_ns+0x2c2/0x400 [ 1187.045192][ T5] ? usbnet_disconnect+0x660/0x660 [ 1187.050777][ T5] usb_probe_interface+0xd19/0x1310 [ 1187.056373][ T5] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1187.062508][ T5] ? usb_register_driver+0x860/0x860 [ 1187.067825][ T5] really_probe+0xd91/0x1f90 [ 1187.072467][ T5] driver_probe_device+0x1ba/0x510 [ 1187.077636][ T5] __device_attach_driver+0x5b8/0x790 [ 1187.083060][ T5] bus_for_each_drv+0x28e/0x3b0 [ 1187.087950][ T5] ? deferred_probe_work_func+0x400/0x400 [ 1187.093725][ T5] __device_attach+0x489/0x750 [ 1187.098539][ T5] device_initial_probe+0x4a/0x60 [ 1187.103597][ T5] bus_probe_device+0x131/0x390 [ 1187.108495][ T5] device_add+0x25b5/0x2df0 [ 1187.113053][ T5] usb_set_configuration+0x309f/0x3710 [ 1187.118574][ T5] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 1187.124689][ T5] generic_probe+0xe7/0x280 [ 1187.129229][ T5] ? usb_choose_configuration+0xae0/0xae0 [ 1187.134987][ T5] usb_probe_device+0x146/0x200 [ 1187.139874][ T5] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1187.145831][ T5] ? usb_register_device_driver+0x500/0x500 [ 1187.151754][ T5] really_probe+0xd91/0x1f90 [ 1187.156397][ T5] driver_probe_device+0x1ba/0x510 [ 1187.161578][ T5] __device_attach_driver+0x5b8/0x790 [ 1187.166991][ T5] bus_for_each_drv+0x28e/0x3b0 [ 1187.171871][ T5] ? deferred_probe_work_func+0x400/0x400 [ 1187.177631][ T5] __device_attach+0x489/0x750 [ 1187.182444][ T5] device_initial_probe+0x4a/0x60 [ 1187.187503][ T5] bus_probe_device+0x131/0x390 [ 1187.192404][ T5] device_add+0x25b5/0x2df0 [ 1187.196960][ T5] usb_new_device+0x23e5/0x2fb0 [ 1187.201869][ T5] hub_event+0x581d/0x72f0 [ 1187.206374][ T5] ? kmsan_get_shadow_origin_ptr+0x91/0x4b0 [ 1187.212299][ T5] ? led_work+0x720/0x720 [ 1187.216662][ T5] ? led_work+0x720/0x720 [ 1187.221050][ T5] process_one_work+0x1572/0x1ef0 [ 1187.226130][ T5] worker_thread+0x189c/0x2460 [ 1187.230900][ T5] kthread+0x4b5/0x4f0 [ 1187.234977][ T5] ? process_one_work+0x1ef0/0x1ef0 [ 1187.240238][ T5] ? kthread_blkcg+0xf0/0xf0 [ 1187.244874][ T5] ret_from_fork+0x35/0x40 [ 1187.251280][ T5] Kernel Offset: disabled [ 1187.255615][ T5] Rebooting in 86400 seconds..