2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:14 executing program 4: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r0 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:14 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) [ 2143.416698][T20888] usb 3-1: USB disconnect, device number 67 15:12:14 executing program 4: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r0 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:14 executing program 4: setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r0 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000040)) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[0x0]) 15:12:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:12:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000040)) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[0x0]) [ 2143.718292][T29146] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2143.886744][T20888] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2144.106713][T29146] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2144.116963][T29146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.130356][T29146] usb 2-1: config 0 descriptor?? [ 2144.179532][T29146] cp210x 2-1:0.0: cp210x converter detected [ 2144.256691][T20888] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2144.267569][T20888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2144.278798][T20888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2144.288714][T20888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2144.302200][T20888] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2144.311337][T20888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.320950][T20888] usb 3-1: config 0 descriptor?? [ 2144.616631][T29146] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2144.798113][T20888] appleir 0003:05AC:8243.01F7: No inputs registered, leaving [ 2144.807313][T20888] appleir 0003:05AC:8243.01F7: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 2144.878891][T29146] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2145.001893][T20888] usb 3-1: USB disconnect, device number 68 [ 2145.090805][T29416] usb 2-1: USB disconnect, device number 35 [ 2145.100024][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2145.109465][T29416] cp210x 2-1:0.0: device disconnected 15:12:16 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000040)) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[0x0]) 15:12:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:12:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:16 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) 15:12:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000040)) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 15:12:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000040)) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 2145.826658][T29146] usb 3-1: new high-speed USB device number 69 using dummy_hcd 15:12:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000040)) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) [ 2145.936636][T16154] usb 2-1: new high-speed USB device number 36 using dummy_hcd 15:12:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:12:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000040)) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 15:12:16 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000040)) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) [ 2146.196989][T29146] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2146.218128][T29146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:12:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) dup2(r2, r1) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f0000000040)) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000200)={0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) [ 2146.252890][T29146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2146.283911][T29146] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 15:12:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) [ 2146.319363][T16154] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2146.333229][T16154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.350562][T29146] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2146.366391][T16154] usb 2-1: config 0 descriptor?? [ 2146.379203][T29146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.407478][T29146] usb 3-1: config 0 descriptor?? [ 2146.427731][T16154] cp210x 2-1:0.0: cp210x converter detected [ 2146.866579][T16154] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2146.888934][T29146] appleir 0003:05AC:8243.01F8: No inputs registered, leaving [ 2146.899670][T29146] appleir 0003:05AC:8243.01F8: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.2-1/input0 [ 2147.092859][T29146] usb 3-1: USB disconnect, device number 69 [ 2147.126828][T16154] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2147.134658][T16154] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2147.142956][T16154] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2147.152158][T16154] usb 2-1: USB disconnect, device number 36 [ 2147.160431][T16154] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2147.168763][T16154] cp210x 2-1:0.0: device disconnected 15:12:18 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd03010000092100000001220100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0xfffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@private}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 15:12:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:12:18 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:18 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) 15:12:18 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0xffffffff) 15:12:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x10, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0xffffff9b, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) [ 2147.916536][T29416] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2147.926896][ T3690] usb 3-1: new high-speed USB device number 70 using dummy_hcd 15:12:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2148.287020][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2148.301487][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.310103][ T3690] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2148.331958][ T3690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2148.351087][T29416] usb 2-1: config 0 descriptor?? [ 2148.363173][ T3690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 15:12:19 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) [ 2148.395020][ T3690] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2148.407268][T29416] cp210x 2-1:0.0: cp210x converter detected [ 2148.413748][ T3690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:12:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) [ 2148.448866][ T3690] usb 3-1: config 0 descriptor?? 15:12:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2148.518167][ T3690] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2148.838553][T29416] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2149.106611][T29416] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2149.117812][T29416] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2149.143523][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2149.164491][T29416] usb 2-1: USB disconnect, device number 37 [ 2149.189121][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2149.208079][T29416] cp210x 2-1:0.0: device disconnected 15:12:21 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd03010000092100000001220100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:21 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:12:21 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) [ 2150.625503][T21516] usb 3-1: USB disconnect, device number 70 [ 2150.926506][T29416] usb 2-1: new high-speed USB device number 38 using dummy_hcd 15:12:21 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc, 0x63, 0x50, 0x20, 0x547, 0x2720, 0xb0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x66, 0x39, 0xe2}}]}}]}}, 0x0) [ 2151.116644][T21516] usb 3-1: new high-speed USB device number 71 using dummy_hcd 15:12:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) [ 2151.356770][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2151.371913][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.392344][T29416] usb 2-1: config 0 descriptor?? [ 2151.430067][T29146] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2151.447345][T29416] cp210x 2-1:0.0: cp210x converter detected 15:12:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) [ 2151.499955][T21516] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2151.522289][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2151.532880][T21516] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 15:12:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) [ 2151.547033][T21516] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2151.556789][T21516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.573103][T21516] usb 3-1: config 0 descriptor?? 15:12:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2151.618541][T21516] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2151.716631][T29146] usb 6-1: Using ep0 maxpacket: 32 [ 2151.886700][T29416] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2151.996608][T29146] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice= b.0a [ 2152.006361][T29146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.017719][T29146] usb 6-1: Product: syz [ 2152.022116][T29146] usb 6-1: Manufacturer: syz [ 2152.027004][T29146] usb 6-1: SerialNumber: syz [ 2152.033098][T29146] usb 6-1: config 0 descriptor?? [ 2152.146602][T29416] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2152.154201][T29416] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2152.162826][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2152.176515][T29416] usb 2-1: USB disconnect, device number 38 [ 2152.186347][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2152.194864][T29416] cp210x 2-1:0.0: device disconnected [ 2152.296750][T29146] cdc_subset: probe of 6-1:0.0 failed with error -71 [ 2152.306012][T29146] usb 6-1: USB disconnect, device number 74 15:12:24 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd03010000092100000001220100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:24 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:12:24 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:12:24 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc, 0x63, 0x50, 0x20, 0x547, 0x2720, 0xb0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x66, 0x39, 0xe2}}]}}]}}, 0x0) 15:12:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) [ 2153.733556][T21516] usb 3-1: USB disconnect, device number 71 15:12:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) [ 2154.036521][T29146] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2154.046516][T29416] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2154.166560][T21516] usb 3-1: new high-speed USB device number 72 using dummy_hcd 15:12:24 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) [ 2154.286564][T29146] usb 6-1: Using ep0 maxpacket: 32 [ 2154.416660][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2154.425737][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.452478][T29416] usb 2-1: config 0 descriptor?? [ 2154.497291][T29416] cp210x 2-1:0.0: cp210x converter detected [ 2154.539119][T21516] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2154.550739][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2154.566047][T21516] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2154.584065][T29146] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice= b.0a [ 2154.593848][T29146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.605652][T29146] usb 6-1: Product: syz [ 2154.610437][T21516] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2154.624964][T29146] usb 6-1: Manufacturer: syz [ 2154.629955][T29146] usb 6-1: SerialNumber: syz [ 2154.634703][T21516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2154.645184][T29146] usb 6-1: config 0 descriptor?? [ 2154.652091][T21516] usb 3-1: config 0 descriptor?? [ 2154.698385][T21516] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2154.906659][T29146] cdc_subset: probe of 6-1:0.0 failed with error -71 [ 2154.915508][T29146] usb 6-1: USB disconnect, device number 75 [ 2154.926709][T29416] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2155.186640][T29416] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2155.194821][T29416] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2155.203643][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2155.212318][T29416] usb 2-1: USB disconnect, device number 39 [ 2155.224086][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2155.232157][T29416] cp210x 2-1:0.0: device disconnected 15:12:27 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:12:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x0, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:27 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:27 executing program 5: syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46e, 0x5577, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 15:12:27 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) [ 2156.772576][ T3690] usb 3-1: USB disconnect, device number 72 15:12:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:12:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2157.066671][T29416] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2157.074497][ T3697] usb 2-1: new high-speed USB device number 40 using dummy_hcd 15:12:27 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2157.226664][ T3690] usb 3-1: new high-speed USB device number 73 using dummy_hcd 15:12:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:12:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2157.446613][T29416] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2157.459917][ T3697] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2157.469291][ T3697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2157.486923][ T3697] usb 2-1: config 0 descriptor?? [ 2157.537444][ T3697] cp210x 2-1:0.0: cp210x converter detected [ 2157.596928][ T3690] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2157.608468][ T3690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2157.620145][ T3690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2157.631049][ T3690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2157.646680][T29416] usb 6-1: New USB device found, idVendor=046e, idProduct=5577, bcdDevice= 0.40 [ 2157.668929][T29416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.677295][T29416] usb 6-1: Product: syz [ 2157.681569][ T3690] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2157.690981][T29416] usb 6-1: Manufacturer: syz [ 2157.695609][T29416] usb 6-1: SerialNumber: syz [ 2157.700513][ T3690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2157.713691][ T3690] usb 3-1: config 0 descriptor?? [ 2157.748262][T29416] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 2157.951607][T20888] usb 6-1: USB disconnect, device number 76 [ 2157.986767][ T3697] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2158.246765][ T3697] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2158.254370][ T3697] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2158.262892][ T3697] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2158.270338][ T3690] usbhid 3-1:0.0: can't add hid device: -71 [ 2158.276309][ T3690] usbhid: probe of 3-1:0.0 failed with error -71 [ 2158.284182][ T3697] usb 2-1: USB disconnect, device number 40 [ 2158.292616][ T3690] usb 3-1: USB disconnect, device number 73 [ 2158.303870][ T3697] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2158.313023][ T3697] cp210x 2-1:0.0: device disconnected 15:12:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:12:29 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x0, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:29 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa1000000}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0xa6, &(0x7f00000002c0)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:12:29 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:29 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000080)={'bond_slave_1\x00', @ifru_data=0x0}) 15:12:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:12:29 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d80)={0x14, r1, 0x321, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) 15:12:29 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0xe000}}], 0x48}, 0x0) 15:12:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a300000000010010000030a010300000000000000000500fffe0900010073797a30000000004c0004800800024046a41085080002400dbe733e0800024073b034da1400030067726574617030000000000000000000140003006272696467653000000000000000000008000140000000010900010073797a3000000000090003"], 0x16c}}, 0x0) 15:12:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000a540)={0x0, 0x0, &(0x7f000000a500)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80e000030000101000000000000002000000000a40e0100a00e01000a0001007065646974000000740e0280380e020001000000000000000000000000000000000000006d"], 0xeb8}}, 0x0) 15:12:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2158.902833][T30592] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.5'. 15:12:29 executing program 5: r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1a98108cd060202d4920000000109021b0001000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2158.954500][T30594] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2158.966755][T30594] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2158.979065][T30594] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2159.057219][ T3692] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2159.066706][T29146] usb 2-1: new high-speed USB device number 41 using dummy_hcd 15:12:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2159.286618][T21516] usb 6-1: new low-speed USB device number 77 using dummy_hcd [ 2159.426608][ T3692] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2159.437733][T29146] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2159.447185][T29146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.455441][ T3692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2159.468335][T29146] usb 2-1: config 0 descriptor?? [ 2159.473531][ T3692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2159.483636][ T3692] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2159.497383][ T3692] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2159.506979][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.517908][T29146] cp210x 2-1:0.0: cp210x converter detected 15:12:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x0, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) [ 2159.524013][ T3692] usb 3-1: config 0 descriptor?? [ 2159.646587][T21516] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 2159.655237][T21516] usb 6-1: config 0 has no interface number 0 [ 2159.664507][T21516] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2159.675058][T21516] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2159.686933][T21516] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2159.696141][T21516] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.706000][T21516] usb 6-1: config 0 descriptor?? [ 2159.956788][T29146] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2160.008037][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.014362][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.066625][ T3692] usbhid 3-1:0.0: can't add hid device: -71 [ 2160.072900][ T3692] usbhid: probe of 3-1:0.0 failed with error -71 [ 2160.082932][ T3692] usb 3-1: USB disconnect, device number 74 [ 2160.216589][T29146] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2160.224430][T29146] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2160.232258][T29146] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2160.241227][T29146] usb 2-1: USB disconnect, device number 41 [ 2160.254041][T29146] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2160.262260][T29146] cp210x 2-1:0.0: device disconnected [ 2160.412837][T21516] usb 6-1: USB disconnect, device number 77 15:12:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:12:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:12:31 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2160.778506][ T3697] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2160.788377][T30627] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2160.798080][T30627] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 15:12:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:12:31 executing program 5: r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1a98108cd060202d4920000000109021b0001000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 15:12:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2161.010570][T21516] usb 2-1: new high-speed USB device number 42 using dummy_hcd 15:12:31 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2161.148514][ T3697] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2161.160338][ T3697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2161.173839][ T3697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2161.184293][ T3697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 15:12:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2161.197303][ T3692] usb 6-1: new low-speed USB device number 78 using dummy_hcd [ 2161.210242][ T3697] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2161.224289][ T3697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.241613][ T3697] usb 3-1: config 0 descriptor?? [ 2161.376750][T21516] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2161.393921][T21516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.415825][T21516] usb 2-1: config 0 descriptor?? [ 2161.458153][T21516] cp210x 2-1:0.0: cp210x converter detected [ 2161.556590][ T3692] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 2161.564984][ T3692] usb 6-1: config 0 has no interface number 0 [ 2161.571707][ T3692] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2161.582029][ T3692] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2161.592558][ T3692] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2161.601954][ T3692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.611432][ T3692] usb 6-1: config 0 descriptor?? [ 2161.786700][ T3697] usbhid 3-1:0.0: can't add hid device: -71 [ 2161.792702][ T3697] usbhid: probe of 3-1:0.0 failed with error -71 [ 2161.800600][ T3697] usb 3-1: USB disconnect, device number 75 [ 2161.896564][T21516] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -121 15:12:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2162.318438][ T3692] usb 6-1: USB disconnect, device number 78 [ 2162.336682][T21516] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2162.344470][T21516] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2162.352983][T21516] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2162.362142][T21516] usb 2-1: USB disconnect, device number 42 [ 2162.370755][T21516] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2162.379391][T21516] cp210x 2-1:0.0: device disconnected [ 2162.506599][T29416] usb 3-1: new high-speed USB device number 76 using dummy_hcd 15:12:33 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:12:33 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:12:33 executing program 5: r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1a98108cd060202d4920000000109021b0001000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) [ 2162.868418][T29416] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2162.889036][T29416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2162.900064][T29416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2162.913056][T29416] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2162.926163][T29416] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2162.926734][T30670] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2162.937428][T29416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.956741][T29416] usb 3-1: config 0 descriptor?? [ 2162.962001][T30670] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 15:12:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f8bfc0064f30f10290f79950700818c000000000f0666b9e90b00000f32f3a40fc732baf80c66b8c6fc938366efbafc0ced66b80500000066b9006000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@efer], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2163.136582][T16154] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2163.149056][ T3692] usb 6-1: new low-speed USB device number 79 using dummy_hcd 15:12:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) io_setup(0x401, &(0x7f0000000000)=0x0) r2 = syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x2) io_submit(r1, 0x2, &(0x7f0000000600)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffe, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 15:12:34 executing program 0: r0 = shmget(0x0, 0x2000, 0x10, &(0x7f0000ff5000/0x2000)=nil) shmget(0x2, 0x1000, 0x10, &(0x7f0000ffb000/0x1000)=nil) r1 = shmget(0x3, 0x3000, 0x78001246, &(0x7f0000ff7000/0x3000)=nil) shmat(r1, &(0x7f0000ff7000/0x2000)=nil, 0x800) mmap$usbmon(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x4090030, 0xffffffffffffffff, 0x7fffffffffffffff) shmctl$SHM_UNLOCK(r0, 0xc) r2 = shmget(0x2, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r3, 0x6) shmctl$IPC_RMID(r2, 0x0) 15:12:34 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:34 executing program 0: r0 = shmget(0x0, 0x2000, 0x10, &(0x7f0000ff5000/0x2000)=nil) shmget(0x2, 0x1000, 0x10, &(0x7f0000ffb000/0x1000)=nil) r1 = shmget(0x3, 0x3000, 0x78001246, &(0x7f0000ff7000/0x3000)=nil) shmat(r1, &(0x7f0000ff7000/0x2000)=nil, 0x800) mmap$usbmon(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x0, 0x4090030, 0xffffffffffffffff, 0x7fffffffffffffff) shmctl$SHM_UNLOCK(r0, 0xc) r2 = shmget(0x2, 0x3000, 0x20, &(0x7f0000ffb000/0x3000)=nil) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r3, 0x6) shmctl$IPC_RMID(r2, 0x0) [ 2163.496630][T29416] usbhid 3-1:0.0: can't add hid device: -71 [ 2163.496875][T16154] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2163.502609][T29416] usbhid: probe of 3-1:0.0 failed with error -71 [ 2163.507382][T29416] usb 3-1: USB disconnect, device number 76 [ 2163.516640][ T3692] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 2163.535295][T16154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2163.544049][ T3692] usb 6-1: config 0 has no interface number 0 [ 2163.551612][ T3692] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 2163.563833][T16154] usb 2-1: config 0 descriptor?? [ 2163.569530][ T3692] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2163.580103][ T3692] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2163.590167][ T3692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2163.600618][ T3692] usb 6-1: config 0 descriptor?? [ 2163.608958][T16154] cp210x 2-1:0.0: cp210x converter detected 15:12:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) [ 2164.005351][T30689] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2164.015068][T30689] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2164.046741][T16154] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 2164.216575][T21516] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2164.299082][ T3692] usb 6-1: USB disconnect, device number 79 [ 2164.486707][T16154] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2164.494561][T16154] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2164.502863][T16154] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2164.513641][T16154] usb 2-1: USB disconnect, device number 43 [ 2164.524529][T16154] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2164.533257][T16154] cp210x 2-1:0.0: device disconnected [ 2164.576673][T21516] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2164.588617][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2164.599841][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2164.609910][T21516] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2164.623479][T21516] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2164.632803][T21516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.645815][T21516] usb 3-1: config 0 descriptor?? 15:12:35 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:12:35 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:35 executing program 0: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSIG(r0, 0x5406, 0x20fffffc) 15:12:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) socket$inet6(0x10, 0x3, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:35 executing program 5: syz_clone3(&(0x7f0000000300)={0x40880000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:12:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x9, 0x5, 0x0, 0x200}, 'syz0\x00', 0x4b}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x1000, 0x7, {0x3, 0x3f}, {0xaa}, @period={0x0, 0x1f, 0x0, 0x10, 0x40, {0x5, 0x7fff, 0x3, 0x3e}, 0x0, 0x0}}, {0x52, 0x3, 0x0, {0x0, 0x1}, {0x6}, @period={0x0, 0x0, 0x0, 0x6, 0x2, {0x0, 0x9b80, 0x7}, 0x2, &(0x7f00000000c0)=[0x0, 0x0]}}}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x7, {0x0, 0x2, 0x0, 0xb8, 0xffffffff80000000}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x2b, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000003a40)="b83b0000000f23d80f21f835c00000200f23f80f01c53e2e3667f3a5640f01c80f98dbb9800000c00f3235010000000f300fc75bd866b88e000f00d8b93a0b00000f320f210d", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000400)={"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"}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000200)={0x6, 0x0, [{0x1000, 0x3, 0x0, 0x0, @adapter={0x0, 0x0, 0x5, 0x8, 0x6}}, {0x0, 0x2, 0x0, 0x0, @sint={0x5, 0x7}}, {0x80000000, 0x1, 0x0, 0x0, @sint={0x7, 0x7fffffff}}, {0x6, 0x4, 0x0, 0x0, @msi={0xc0dc, 0x0, 0x9, 0xfff}}, {0x0, 0x0, 0x0, 0x0, @adapter={0x5, 0x0, 0x100000000, 0x0, 0x5}}, {0x200, 0x1, 0x0, 0x0, @msi={0x4c2, 0x445, 0x0, 0x5}}]}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000340)=0x3000) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2165.062511][T30701] input: syz0 as /devices/virtual/input/input641 15:12:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = getpgid(0x0) fcntl$setown(r0, 0x6, r1) 15:12:35 executing program 5: syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000040)=ANY=[@ANYBLOB="12010001000000106b1d010140000102030109029a"], &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x0, 0x9, 0xff, 0x0, 0x40}, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x81d}}, {0x81, &(0x7f0000000300)=@string={0x81, 0x3, "e46c7e5c0400371a55dfaefc416ebbfec24b78645a4d715e1ac07af384ebbd9d2592c97e9bda65e6b7a8d45dfdb55c197ebd815d9ed10a299813b28e5006f9436c99caacb4b1c7496ef0051b2db1e278a6101cef84f485446a9d77c0f1fe54d77f4d9d1812cf97a3fb1c7257cf4f05c6fda26cd1dd866af21d2bc7ac760021"}}, {0x2, &(0x7f00000003c0)=@string={0x2}}]}) [ 2165.186587][T21516] usbhid 3-1:0.0: can't add hid device: -71 [ 2165.192789][T21516] usbhid: probe of 3-1:0.0 failed with error -71 [ 2165.201421][T21516] usb 3-1: USB disconnect, device number 77 [ 2165.286482][ T3697] usb 2-1: new high-speed USB device number 44 using dummy_hcd 15:12:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000140)={0xc0, 0x0, 0x4000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xaec7, 0x0) [ 2165.516547][T16154] usb 6-1: new high-speed USB device number 80 using dummy_hcd 15:12:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x58, {0x58, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2aa"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:36 executing program 0: mlock(&(0x7f0000f92000/0x13000)=nil, 0x13000) munlock(&(0x7f0000f95000/0x1000)=nil, 0x1000) munmap(&(0x7f0000f94000/0x2000)=nil, 0x2000) 15:12:36 executing program 0: syz_clone(0xdc227480, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2165.677879][ T3697] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2165.696230][ T3697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2165.725085][ T3697] usb 2-1: config 0 descriptor?? [ 2165.768446][T16154] usb 6-1: Using ep0 maxpacket: 16 [ 2165.778024][ T3697] cp210x 2-1:0.0: cp210x converter detected [ 2165.896653][T16154] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2165.907482][T16154] usb 6-1: config 0 has no interfaces? [ 2165.946737][ T3690] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2166.146621][T16154] usb 6-1: string descriptor 0 read error: -22 [ 2166.153227][T16154] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2166.162608][T16154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2166.172179][T16154] usb 6-1: config 0 descriptor?? [ 2166.206619][ T3697] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 2166.306660][ T3690] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2166.317642][ T3690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2166.329177][ T3690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2166.339192][ T3690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2166.352455][ T3690] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2166.362489][ T3690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2166.376279][ T3690] usb 3-1: config 0 descriptor?? [ 2166.423677][T16154] usb 6-1: USB disconnect, device number 80 [ 2166.636689][ T3697] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2166.644297][ T3697] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2166.655363][ T3697] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2166.663610][ T3697] usb 2-1: USB disconnect, device number 44 [ 2166.678178][ T3697] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2166.686243][ T3697] cp210x 2-1:0.0: device disconnected [ 2166.916649][ T3690] usbhid 3-1:0.0: can't add hid device: -71 [ 2166.924015][ T3690] usbhid: probe of 3-1:0.0 failed with error -71 [ 2166.936428][ T3690] usb 3-1: USB disconnect, device number 78 15:12:37 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:12:37 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:37 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x2}) 15:12:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) socket$inet6(0x10, 0x3, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) 15:12:37 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xab}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2400c011) 15:12:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r0 = getpgrp(0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000240)=[{&(0x7f00000002c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad00000000000006040000000000000000f528", 0x39}], 0x1) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="39cf5689bbc0712511693947054f6768e34b7ed403ce4b014a2a7c67a24ed9e5ed4b41e36ea843440bc19f2653c90fd102672e27368bcb9263d3b9f0f5b6a5a95e750f373c94166c3bfad9bd4f91911cb42978e7bbb3587c2db7d43eb87c711f08cd534b2a01a7a876140b103132887c10fd82b4883b1195a5e68e2878a76d5213c4c10c4757df1a0952175c7e", 0x8d}, {&(0x7f0000000300)="e931235d6e5942c0d6310054c818ce0aec9e2f7e2253d570224fc84e7562dcaaec7b1c014514b70c2a05ae96b3f77fbbc1713393f56eea35c8090b1115f132dbe5dadf53cd6cb2298384d869b385c4634605842d2642f889fce91643ac4b5d8279ebc6955bf854460b26e40cdd8a4f5a3fac8b009833d4cd574bb533532c0380216d544cf621", 0x86}, {&(0x7f00000001c0)}], 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000003b80)) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) [ 2167.436791][ T3692] usb 2-1: new high-speed USB device number 45 using dummy_hcd 15:12:38 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 2167.751831][T30750] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2167.831594][T30755] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2167.877128][ T3692] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2167.894526][ T3692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2167.914872][ T3692] usb 2-1: config 0 descriptor?? [ 2167.926525][T29416] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2167.958015][ T3692] cp210x 2-1:0.0: cp210x converter detected 15:12:38 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f00000008c0)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup2(r3, r0) ioctl$KVM_CREATE_VM(r4, 0x4004ae8b, 0x0) 15:12:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) socket$inet6(0x10, 0x3, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000000", 0x4c, 0x0, 0x0, 0x0) [ 2168.174221][ T3692] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2168.206541][ T3692] cp210x 2-1:0.0: querying part number failed [ 2168.283087][ T3692] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2168.316780][T29416] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2168.393632][T29416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 15:12:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 2168.521226][T29416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2168.558225][T29416] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 15:12:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 2168.638741][T29416] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2168.664889][T29416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.676245][T29416] usb 3-1: config 0 descriptor?? 15:12:39 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) [ 2169.256645][T29416] usbhid 3-1:0.0: can't add hid device: -71 [ 2169.262643][T29416] usbhid: probe of 3-1:0.0 failed with error -71 [ 2169.270414][T29416] usb 3-1: USB disconnect, device number 79 15:12:40 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:12:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x58, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x58}}, 0x0) 15:12:40 executing program 0: timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x2010080, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x40, 0x31, 0x0, "000000000000000000000000000000225f15d80700000000000000000003008000000000080000000000000003080000e7ffffff000000000000000000000000002000"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="00d461436bab7d93e86087f0b3a51504f6cf402058fa1dbe77dc9f98a75b36fe0151466263074b8b798eebcdc5a23dffa3583b0558f35dbc2ce712c15e651900121388997932fb8c24a84fb5162fe76a6c5d6117787bfb29d6b56e3826a2", @ANYRES16, @ANYBLOB="ec2f0fa93cd904b91ce8aa6bc9450e171012226e990e88c20871d23b133e9d3e78e40d4e30222836f3989fec0cc2c5f98e82e197901310de8ade78e57e14dcb798098fc29cb1db4eab4b868e35f0b9dd309e784baf9d27f1b5e57abaaf70c17988f7f833f1b1a8ffa5831636d210cecb56873db4245a564d5226f5c3a2ce688f7d3bc2d33d3fc8bf721f91da85b68fcee6223ee90c12ab337eb7eb62ea8e5df063cf0ae64a5b86fb9d88f01dcb5b46a1ed2800238909619a7800339e1cbd73036a823b1af69c7dc42c28ea1199f34c164831abde9aaff3ded1c2606130df80bf96c93e4254450d5ac3747fa4fb", @ANYRES64], 0x100000530) 15:12:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 15:12:40 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15:12:40 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000000830008001200000001000000ff000000400000001ea0abff7f00005d96000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae000a5000003000500001e001e02"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) [ 2170.159579][ T3697] usb 2-1: USB disconnect, device number 45 [ 2170.190713][ T3697] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2170.214900][ T3697] cp210x 2-1:0.0: device disconnected 15:12:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x22, 0x2}, @timestamp={0x8, 0xa}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}, @mptcp=@mp_fclose={0x1e, 0xc}, @fastopen={0x22, 0x6, "59366cea"}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 15:12:40 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lchown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xee01) getdents(r3, 0x0, 0x2) 15:12:41 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@default, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 15:12:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000010c0)={0x0, 0x0, 0x0}) syz_usb_disconnect(r0) 15:12:41 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) [ 2170.506515][T29416] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2170.586501][ T3697] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2170.876679][T29416] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2170.888167][T29416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2170.899189][T29416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2170.909016][T29416] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2170.922044][T29416] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2170.931223][T29416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2170.940312][T29416] usb 3-1: config 0 descriptor?? [ 2170.966649][ T3697] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2170.975737][ T3697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2170.988407][ T3697] usb 2-1: config 0 descriptor?? [ 2171.033676][ T3697] cp210x 2-1:0.0: cp210x converter detected [ 2171.246665][ T3697] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2171.254200][ T3697] cp210x 2-1:0.0: querying part number failed [ 2171.261331][ T3697] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2171.486708][T29416] usbhid 3-1:0.0: can't add hid device: -71 [ 2171.492709][T29416] usbhid: probe of 3-1:0.0 failed with error -71 [ 2171.501452][T29416] usb 3-1: USB disconnect, device number 80 15:12:43 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:12:43 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 15:12:43 executing program 0: syz_emit_ethernet(0x52, &(0x7f0000000280)={@multicast, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "7bef9d", 0x1c, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x1c, 0x3}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 15:12:43 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:12:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 2173.241401][T29416] usb 2-1: USB disconnect, device number 46 [ 2173.248737][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:12:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev}}}}) [ 2173.283109][T29416] cp210x 2-1:0.0: device disconnected [ 2173.322369][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 15:12:44 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, &(0x7f00000016c0)="17", 0x0}, 0x48) [ 2173.341726][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 15:12:44 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7555, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x3f, 0x1, 0x0, "ff45d4ec373c7db3cf9222baa42a4497a01c38650b45c85308e25114788c31b0"}) [ 2173.383274][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.392583][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.410112][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 15:12:44 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2173.441110][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.451903][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.462527][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.476659][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.476752][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.476850][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.476932][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.477013][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 15:12:44 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 2173.477127][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.477213][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.477310][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.477393][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.477478][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.477573][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.477707][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.477792][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.477892][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.477975][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.478055][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.478156][T30865] binder: 30862:30865 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2173.577684][T20888] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2173.645335][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.645415][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.645486][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.645556][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.645623][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.645703][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.645773][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.645841][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 15:12:44 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 2173.645908][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.645976][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.646045][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.646114][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.646181][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.646251][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.646320][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.646390][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.647730][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.647812][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.647887][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.647960][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.648031][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.648100][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.648171][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.648241][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.648312][T30884] binder: 30883:30884 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2173.726945][T29416] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2173.938950][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.946921][T20888] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2173.959411][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.967888][T20888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2173.978521][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.979450][T20888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2173.989567][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2173.996560][T20888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2174.017582][T20888] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2174.027023][T20888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.035340][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.037187][T20888] usb 3-1: config 0 descriptor?? [ 2174.048313][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.056135][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.063948][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.071814][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.079679][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.087532][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.095183][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.104943][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.112815][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.120795][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.128512][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.136162][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.144444][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2174.153829][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.161453][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.162528][T29416] usb 2-1: config 0 descriptor?? [ 2174.171398][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.182758][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.190524][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.198459][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.206194][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.214067][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bded10 returned -22 [ 2174.218497][T29416] cp210x 2-1:0.0: cp210x converter detected [ 2174.222393][T30888] binder: 30887:30888 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2174.426588][T29416] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2174.434117][T29416] cp210x 2-1:0.0: querying part number failed [ 2174.441318][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2174.586562][T20888] usbhid 3-1:0.0: can't add hid device: -71 [ 2174.592560][T20888] usbhid: probe of 3-1:0.0 failed with error -71 [ 2174.605299][T20888] usb 3-1: USB disconnect, device number 81 15:12:47 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x81, 0x7, 0x80, 0x10, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 15:12:47 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:12:47 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 15:12:47 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:12:47 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:47 executing program 0: syz_clone3(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xffffffc5}, 0x57) [ 2176.304712][T20888] usb 2-1: USB disconnect, device number 47 [ 2176.335482][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2176.364247][T20888] cp210x 2-1:0.0: device disconnected 15:12:47 executing program 0: ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x3) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0xffffffff) read$watch_queue(0xffffffffffffffff, &(0x7f0000000080)=""/231, 0xe7) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x9, 0x0}, 0x8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x38000, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000200), 0x2, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000400)={"bb2e4eecdef66b21f06c8fc9b939629c", 0x0, 0x0, {0x1000}, {0x0, 0x737}, 0x1f, [0x3, 0x0, 0x8000000000000000, 0x0, 0x4000000000000, 0xdd52, 0x7, 0x0, 0x0, 0x3, 0x6, 0x8, 0x20, 0x0, 0x4, 0xfffffffffffffffd]}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={r1}, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, r4, 0x12}, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000600), &(0x7f0000000640)=0x40) [ 2176.385012][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.411574][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 15:12:47 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$hidraw(r0, &(0x7f0000000100)=""/145, 0x91) [ 2176.431817][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.449904][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 15:12:47 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0xfffffffe, 0x4) [ 2176.478435][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.498344][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.506808][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.514713][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 15:12:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@mpls_getroute={0x1c, 0x1a, 0x201}, 0x1c}}, 0x0) [ 2176.523850][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.532304][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.540520][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.559560][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.568273][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 15:12:47 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_modinfo}) [ 2176.583527][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.591543][T21516] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2176.600456][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.613793][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.622677][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.631175][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 15:12:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x260004, &(0x7f0000000700)={'trans=virtio,', {[{@privport}, {@dfltuid}, {@access_user}, {@cache_none}], [{@euid_eq}, {@dont_hash}, {@euid_gt}]}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x801e4, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {&(0x7f0000011700)="ed8100000a000000ddf4655fddf4655fddf4655f00000000000001", 0x1b, 0x2200}, {&(0x7f0000011a00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x4000}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}, {&(0x7f0000000480)="96", 0x1, 0x10400}], 0x0, &(0x7f0000000040)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) [ 2176.654918][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.667326][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.690894][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.699463][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.707509][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.715513][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2176.725533][T30909] binder: 30892:30909 ioctl 4020ae46 7fe580bbda10 returned -22 [ 2176.824768][T30924] loop0: detected capacity change from 0 to 1024 [ 2176.986764][T21516] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 15:12:47 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) [ 2177.140013][T30924] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2177.192022][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2177.209131][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2177.229121][T21516] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 15:12:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) 15:12:47 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:12:47 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) [ 2177.243821][T21516] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2177.253596][T21516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2177.265121][T21516] usb 3-1: config 0 descriptor?? [ 2177.304085][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.316289][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.327811][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.335838][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.348083][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.356181][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.366043][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.378494][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.387788][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.395840][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.405961][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.414081][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.422462][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.430847][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.439845][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.448888][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.458027][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.465897][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.473757][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.481688][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.489545][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.498315][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.506120][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.514245][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bded10 returned -22 [ 2177.523079][T30932] binder: 30930:30932 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2177.562459][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 2177.806764][T21516] usbhid 3-1:0.0: can't add hid device: -71 [ 2177.812968][T21516] usbhid: probe of 3-1:0.0 failed with error -71 [ 2177.821323][T21516] usb 3-1: USB disconnect, device number 82 15:12:48 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x260004, &(0x7f0000000700)={'trans=virtio,', {[{@privport}, {@dfltuid}, {@access_user}, {@cache_none}], [{@euid_eq}, {@dont_hash}, {@euid_gt}]}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x801e4, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {&(0x7f0000011700)="ed8100000a000000ddf4655fddf4655fddf4655f00000000000001", 0x1b, 0x2200}, {&(0x7f0000011a00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x4000}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}, {&(0x7f0000000480)="96", 0x1, 0x10400}], 0x0, &(0x7f0000000040)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 15:12:48 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:12:48 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:48 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:12:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) [ 2178.300649][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.308717][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.322149][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.369702][T30956] loop0: detected capacity change from 0 to 1024 [ 2178.551905][T30956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2178.561872][T21516] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2178.715287][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.743945][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.752115][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.760086][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.770323][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.780152][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.790395][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.800932][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.811517][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 15:12:49 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) [ 2178.819515][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.828783][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.850860][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.866680][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.879801][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.891531][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.899444][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.907330][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.915182][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.923077][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.930985][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.940542][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bded10 returned -22 [ 2178.948429][T30947] binder: 30942:30947 ioctl 4020ae46 7fe580bdea10 returned -22 15:12:49 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:12:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) [ 2179.048158][T21516] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2179.060078][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2179.072244][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2179.085908][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 15:12:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x260004, &(0x7f0000000700)={'trans=virtio,', {[{@privport}, {@dfltuid}, {@access_user}, {@cache_none}], [{@euid_eq}, {@dont_hash}, {@euid_gt}]}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x801e4, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000011100)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000040000000020000000400000042", 0x49, 0x1700}, {&(0x7f0000011700)="ed8100000a000000ddf4655fddf4655fddf4655f00000000000001", 0x1b, 0x2200}, {&(0x7f0000011a00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x4000}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a09000000000006", 0x15, 0x10000}, {&(0x7f0000000480)="96", 0x1, 0x10400}], 0x0, &(0x7f0000000040)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) [ 2179.089187][T21516] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2179.111599][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.128362][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.132009][T21516] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 15:12:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) [ 2179.138512][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.153184][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.162565][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.172814][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.180200][T21516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.180548][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.196037][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.203763][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.211503][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.219902][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.227607][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.235639][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.236829][ T3635] EXT4-fs (loop0): unmounting filesystem. [ 2179.243401][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.260035][T21516] usb 3-1: config 0 descriptor?? [ 2179.265637][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.274289][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.282851][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.291544][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.302681][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.315816][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.326627][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.347744][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.355938][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bded10 returned -22 [ 2179.364615][T30964] binder: 30963:30964 ioctl 4020ae46 7fe580bdea10 returned -22 15:12:50 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) [ 2179.485287][T30976] loop0: detected capacity change from 0 to 1024 [ 2179.705466][T30976] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2179.906920][T21516] usbhid 3-1:0.0: can't add hid device: -71 [ 2179.913432][T21516] usbhid: probe of 3-1:0.0 failed with error -71 [ 2179.929610][T21516] usb 3-1: USB disconnect, device number 83 [ 2180.214244][ T3635] EXT4-fs (loop0): unmounting filesystem. 15:12:51 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:12:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5", 0x26, 0x0, 0x0, 0x0) 15:12:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:51 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0x70000) epoll_wait(r1, &(0x7f0000000300)=[{}], 0x1, 0x0) 15:12:51 executing program 1: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) [ 2180.366971][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.399914][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 15:12:51 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000003440)=@nat={'nat\x00', 0x1b, 0x5, 0x420, 0x270, 0x1c8, 0xffffffff, 0x270, 0x0, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'batadv_slave_1\x00', 'sit0\x00'}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}}, @common=@ttl={{0x28}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @remote, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0xd8, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv4=@multicast1, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @remote, @gre_key, @icmp_id}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'pimreg0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}}, @common=@set={{0x40}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @dev, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) [ 2180.413866][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.424931][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.432958][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.441503][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.459246][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 15:12:51 executing program 0: set_mempolicy(0x2, &(0x7f0000001600)=0x9, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x6, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a004178, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x1000a00}]) socket$inet6(0xa, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000001c0), 0x2) [ 2180.470537][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.483223][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.501675][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.513855][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.522871][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.531129][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.539171][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.547203][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.555237][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.563240][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.574657][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.584508][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.593265][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.603213][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.611423][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 15:12:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 2180.622350][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.634987][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.645068][T30988] binder: 30981:30988 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2180.656577][T21516] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2180.712864][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.721032][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.731502][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.740154][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.750612][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 15:12:51 executing program 0: set_mempolicy(0x2, &(0x7f0000001600)=0x9, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x6, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a004178, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x1000a00}]) socket$inet6(0xa, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000001c0), 0x2) [ 2180.758745][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.779748][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.790546][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.799192][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.808244][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.816215][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.826544][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.834563][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.845025][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.853025][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.863558][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.871798][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.891142][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 15:12:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:51 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) [ 2180.911001][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.921151][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.929362][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.937657][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.969609][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.978845][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bded10 returned -22 [ 2180.988901][T31003] binder: 31002:31003 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2181.026683][T21516] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2181.038073][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2181.049761][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2181.059851][T21516] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2181.074464][T21516] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2181.085377][T21516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.099040][T21516] usb 3-1: config 0 descriptor?? [ 2181.276650][ T3697] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2181.466502][ T3697] usb 2-1: device descriptor read/64, error 18 [ 2181.636627][T21516] usbhid 3-1:0.0: can't add hid device: -71 [ 2181.642781][T21516] usbhid: probe of 3-1:0.0 failed with error -71 [ 2181.650879][T21516] usb 3-1: USB disconnect, device number 84 [ 2181.736500][ T3697] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2181.940528][ T3697] usb 2-1: device descriptor read/64, error 18 15:12:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5", 0x26, 0x0, 0x0, 0x0) 15:12:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:52 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:12:52 executing program 0: r0 = socket(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002440)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x40) [ 2182.066627][ T3697] usb usb2-port1: attempt power cycle [ 2182.086579][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 15:12:52 executing program 0: add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) setfsgid(0xee00) 15:12:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) [ 2182.111470][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.123891][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.150557][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 15:12:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000}) 15:12:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x10, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) [ 2182.162689][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.179506][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.201129][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.210641][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.219915][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.232798][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.243932][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.252100][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 15:12:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x10, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) [ 2182.260226][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.268238][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.281167][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.289293][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.300032][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.308122][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 15:12:53 executing program 0: r0 = syz_io_uring_setup(0x7f7e, &(0x7f0000000080), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x8, &(0x7f0000000280), 0x1) [ 2182.316017][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.331610][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.343994][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.354170][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.362363][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.370390][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bded10 returned -22 [ 2182.378779][T31017] binder: 31015:31017 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2182.404273][ T3690] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2182.506616][ T3697] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2182.676642][ T3697] usb 2-1: device descriptor read/8, error -61 [ 2182.766653][ T3690] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2182.777529][ T3690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2182.788741][ T3690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2182.798757][ T3690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2182.811878][ T3690] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2182.820982][ T3690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.834538][ T3690] usb 3-1: config 0 descriptor?? [ 2182.946578][ T3697] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2183.116583][ T3697] usb 2-1: device descriptor read/8, error -61 [ 2183.237866][ T3697] usb usb2-port1: unable to enumerate USB device [ 2183.317711][ T3690] appleir 0003:05AC:8243.01F9: item fetching failed at offset 0/1 [ 2183.325902][ T3690] appleir 0003:05AC:8243.01F9: parse failed [ 2183.332364][ T3690] appleir: probe of 0003:05AC:8243.01F9 failed with error -22 [ 2183.523351][ T3692] usb 3-1: USB disconnect, device number 85 15:12:54 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:12:54 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x10, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:54 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x12, 0xb8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1007, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000300)=""/56}, 0x20) 15:12:54 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:12:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5", 0x26, 0x0, 0x0, 0x0) 15:12:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009}) ioctl$TUNSETFILTEREBPF(r0, 0x401054d6, 0x0) 15:12:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) [ 2184.054314][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.078100][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.089532][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.105436][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.124813][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.135046][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.143394][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 15:12:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}]}, 0x20}}, 0x0) [ 2184.153459][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.161479][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.172549][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.182300][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.193052][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 15:12:54 executing program 0: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="e8a6f8ff76109d93cf422592f1ee756052c8aa3f0d403582c9e80060d5dc28b5df346ab9979352ed8e4d357a41668aa6e0c30b409e6961867267c66d16c1909e282bc29c0c1830a0ec264e36df659a56de032ee5a3240f62c3a9e82a618623c55255cce1213ed7769001fa8676ec34b3de7ede5e2f22cc1ec4c2cb91dde675247a9c97bb598c0394d1a37593b6711c33e5585bba903fbc859b79a03ac8a53f53e860caa8cccf0998d189ed2d644537a706b69ecd7f31b9edd7cc067659f5ca13", 0xc0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="d6", 0x1, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="d6", 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r2}, &(0x7f0000000040)=""/27, 0x1b, &(0x7f0000000280)={&(0x7f0000000080)={'sha512\x00'}, &(0x7f0000000240)='r', 0x1}) [ 2184.201564][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.211702][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.223053][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.237393][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.245217][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.254594][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.263776][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.278982][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.288281][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 15:12:55 executing program 0: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) read(r1, &(0x7f0000000280)=""/248, 0xf8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0x32b, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc08c5334, &(0x7f00000005c0)={{}, 'port1\x00'}) tkill(r0, 0xb) 15:12:55 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 2184.301806][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.311050][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.319137][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.327237][T31044] binder: 31043:31044 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2184.337708][T21516] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2184.375774][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.384143][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.393898][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.401927][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.412527][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.420942][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.430486][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.438854][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.447064][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.455045][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.456545][ T3692] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2184.463131][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.478254][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.487165][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.495032][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.503090][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.511019][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.518879][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.527139][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.534985][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.542760][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.552284][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.560068][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.568309][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.575959][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bded10 returned -22 [ 2184.583972][T31063] binder: 31062:31063 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2184.656473][ T3692] usb 2-1: device descriptor read/64, error 18 [ 2184.706610][T21516] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2184.717743][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2184.728956][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2184.739069][T21516] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2184.752390][T21516] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2184.761711][T21516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.772699][T21516] usb 3-1: config 0 descriptor?? [ 2184.926504][ T3692] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2185.116555][ T3692] usb 2-1: device descriptor read/64, error 18 [ 2185.236701][ T3692] usb usb2-port1: attempt power cycle [ 2185.257594][T21516] appleir 0003:05AC:8243.01FA: item fetching failed at offset 0/1 [ 2185.265826][T21516] appleir 0003:05AC:8243.01FA: parse failed [ 2185.272345][T21516] appleir: probe of 0003:05AC:8243.01FA failed with error -22 [ 2185.462421][T21516] usb 3-1: USB disconnect, device number 86 [ 2185.656767][ T3692] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2185.826937][ T3692] usb 2-1: device descriptor read/8, error -61 [ 2186.096494][ T3692] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2186.266687][ T3692] usb 2-1: device descriptor read/8, error -61 [ 2186.386750][ T3692] usb usb2-port1: unable to enumerate USB device 15:12:57 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:12:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:12:57 executing program 0: syz_io_uring_setup(0x1ba0, &(0x7f0000000040), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 15:12:57 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:12:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9", 0x39, 0x0, 0x0, 0x0) 15:12:57 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:12:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x7f, 0x0, 0xfb, 0x1, @private0, @remote, 0x0, 0x0, 0x2, 0x10000000}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r2, 0x4, 0x6, 0x6, 0x0, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x8000, 0x8000, 0x0, 0x4}}) [ 2187.019473][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.068479][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.083996][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.094079][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.102047][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 15:12:57 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x0) read$FUSE(r0, &(0x7f00000081c0)={0x2020}, 0x2020) [ 2187.112117][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.120545][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.133231][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.141201][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 15:12:57 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "d2d861546409ff4622"}]}, 0x24}}, 0x0) [ 2187.162775][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.172757][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.181085][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.189717][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.201596][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 15:12:57 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}, 0xb80b) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) [ 2187.220268][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.228267][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.236217][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.244485][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.257986][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 15:12:58 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xd, &(0x7f0000000040), &(0x7f0000000100)=0x4) [ 2187.276326][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.284724][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.292741][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.297605][ T3692] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2187.310271][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 15:12:58 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2187.331704][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bded10 returned -22 [ 2187.338662][T31090] sctp: [Deprecated]: syz-executor.0 (pid 31090) Use of int in maxseg socket option. [ 2187.338662][T31090] Use struct sctp_assoc_value instead [ 2187.339857][T31069] binder: 31068:31069 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2187.476588][ T3690] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2187.666540][ T3690] usb 2-1: device descriptor read/64, error 18 [ 2187.676651][ T3692] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2187.688029][ T3692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2187.699285][ T3692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2187.709300][ T3692] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2187.722562][ T3692] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2187.731972][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.741295][ T3692] usb 3-1: config 0 descriptor?? [ 2187.936536][ T3690] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2188.126493][ T3690] usb 2-1: device descriptor read/64, error 18 [ 2188.218480][ T3692] appleir 0003:05AC:8243.01FB: item fetching failed at offset 0/1 [ 2188.226794][ T3692] appleir 0003:05AC:8243.01FB: parse failed [ 2188.232868][ T3692] appleir: probe of 0003:05AC:8243.01FB failed with error -22 [ 2188.248838][ T3690] usb usb2-port1: attempt power cycle [ 2188.420189][ T3697] usb 3-1: USB disconnect, device number 87 [ 2188.656517][ T3690] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2188.826791][ T3690] usb 2-1: device descriptor read/8, error -61 [ 2189.096485][ T3690] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2189.266573][ T3690] usb 2-1: device descriptor read/8, error -61 [ 2189.386935][ T3690] usb usb2-port1: unable to enumerate USB device 15:13:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:00 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:00 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x15) 15:13:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9", 0x39, 0x0, 0x0, 0x0) 15:13:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2d, {0x2d, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2190.149235][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.164103][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.172257][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.180516][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.188547][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 15:13:00 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2190.196355][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.209337][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.222151][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.230550][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.240000][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.250815][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.258846][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.266844][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.274638][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.282707][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.290726][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 15:13:01 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2190.299149][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.307151][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.314934][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.328824][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.342131][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 15:13:01 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2190.352548][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.361146][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.372146][ T3690] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2190.384759][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bded10 returned -22 [ 2190.395328][T31100] binder: 31093:31100 ioctl 4020ae46 7fe580bdea10 returned -22 15:13:01 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x0) 15:13:01 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 2190.536653][ T3692] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2190.736590][ T3692] usb 2-1: device descriptor read/64, error 18 [ 2190.746830][ T3690] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2190.766488][ T3690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2190.777738][ T3690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2190.787726][ T3690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2190.800827][ T3690] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2190.810110][ T3690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2190.819464][ T3690] usb 3-1: config 0 descriptor?? [ 2191.006556][ T3692] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2191.196503][ T3692] usb 2-1: device descriptor read/64, error 18 [ 2191.298118][ T3690] appleir 0003:05AC:8243.01FC: item fetching failed at offset 0/1 [ 2191.306274][ T3690] appleir 0003:05AC:8243.01FC: parse failed [ 2191.312332][ T3690] appleir: probe of 0003:05AC:8243.01FC failed with error -22 [ 2191.316591][ T3692] usb usb2-port1: attempt power cycle [ 2191.500279][ T3690] usb 3-1: USB disconnect, device number 88 [ 2191.727781][ T3692] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2191.896557][ T3692] usb 2-1: device descriptor read/8, error -61 [ 2192.167908][ T3692] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2192.336568][ T3692] usb 2-1: device descriptor read/8, error -61 [ 2192.456760][ T3692] usb usb2-port1: unable to enumerate USB device 15:13:03 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:03 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2d, {0x2d, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:13:03 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:03 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x0) 15:13:03 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9", 0x39, 0x0, 0x0, 0x0) 15:13:03 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:03 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:04 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:04 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:04 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:04 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2193.426676][ T3692] usb 3-1: new high-speed USB device number 89 using dummy_hcd 15:13:04 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2193.586604][T20888] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2193.776513][T20888] usb 2-1: device descriptor read/64, error 18 [ 2193.796563][ T3692] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2193.807875][ T3692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2193.819151][ T3692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2193.829217][ T3692] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2193.842808][ T3692] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2193.852302][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.862175][ T3692] usb 3-1: config 0 descriptor?? [ 2194.046539][T20888] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2194.236609][T20888] usb 2-1: device descriptor read/64, error 18 [ 2194.348030][ T3692] appleir 0003:05AC:8243.01FD: item fetching failed at offset 0/1 [ 2194.356223][ T3692] appleir 0003:05AC:8243.01FD: parse failed [ 2194.362389][ T3692] appleir: probe of 0003:05AC:8243.01FD failed with error -22 [ 2194.366635][T20888] usb usb2-port1: attempt power cycle [ 2194.550445][ T3690] usb 3-1: USB disconnect, device number 89 [ 2194.776491][T20888] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2194.946654][T20888] usb 2-1: device descriptor read/8, error -61 [ 2195.216491][T20888] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2195.386611][T20888] usb 2-1: device descriptor read/8, error -61 [ 2195.506904][T20888] usb usb2-port1: unable to enumerate USB device 15:13:06 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:06 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:06 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000004000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x800000000009031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00009d0000/0x3000)=nil, 0x3000, 0x0) 15:13:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec", 0x43, 0x0, 0x0, 0x0) 15:13:06 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x2d, {0x2d, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:13:06 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:06 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:07 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:07 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:07 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:07 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2196.448901][ T3692] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2196.616579][T20888] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2196.806598][T20888] usb 2-1: device descriptor read/64, error 18 [ 2196.816642][ T3692] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2196.828995][ T3692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2196.840296][ T3692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2196.850453][ T3692] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2196.863778][ T3692] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2196.873278][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2196.887206][ T3692] usb 3-1: config 0 descriptor?? [ 2197.086502][T20888] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 2197.276570][T20888] usb 2-1: device descriptor read/64, error 18 [ 2197.371305][ T3692] appleir 0003:05AC:8243.01FE: item fetching failed at offset 0/1 [ 2197.379561][ T3692] appleir 0003:05AC:8243.01FE: parse failed [ 2197.385850][ T3692] appleir: probe of 0003:05AC:8243.01FE failed with error -22 [ 2197.400426][T20888] usb usb2-port1: attempt power cycle [ 2197.571765][ T3690] usb 3-1: USB disconnect, device number 90 [ 2197.806526][T20888] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2197.976653][T20888] usb 2-1: device descriptor read/8, error -61 [ 2198.246572][T20888] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2198.416703][T20888] usb 2-1: device descriptor read/8, error -61 [ 2198.537322][T20888] usb usb2-port1: unable to enumerate USB device 15:13:09 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:09 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:09 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:09 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000003800), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x0, [0x80, 0x3, 0x7], [{0x0, 0x4}, {}, {0x81, 0x0, 0x0, 0x1}], 0x20}) 15:13:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec", 0x43, 0x0, 0x0, 0x0) 15:13:09 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x43, {0x43, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:13:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000c17d4508ca0818201c8a010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 15:13:09 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:10 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:10 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:10 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:10 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2199.486655][ T3692] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2199.696656][ T3690] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2199.847702][ T3692] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2199.858766][ T3692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2199.869957][ T3692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2199.879997][ T3692] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2199.893312][ T3692] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2199.902623][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2199.912347][ T3692] usb 3-1: config 0 descriptor?? [ 2199.997813][ T3690] usb 2-1: no configurations [ 2200.002442][ T3690] usb 2-1: can't read configurations, error -22 [ 2200.156577][ T3690] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2200.399552][ T3692] appleir 0003:05AC:8243.01FF: item fetching failed at offset 0/1 [ 2200.407859][ T3692] appleir 0003:05AC:8243.01FF: parse failed [ 2200.413867][ T3692] appleir: probe of 0003:05AC:8243.01FF failed with error -22 [ 2200.446745][ T3690] usb 2-1: no configurations [ 2200.451421][ T3690] usb 2-1: can't read configurations, error -22 [ 2200.458193][ T3690] usb usb2-port1: attempt power cycle [ 2200.602380][T29146] usb 3-1: USB disconnect, device number 91 [ 2200.866494][ T3690] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2200.996669][ T3690] usb 2-1: no configurations [ 2201.001303][ T3690] usb 2-1: can't read configurations, error -22 [ 2201.156531][ T3690] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2201.286651][ T3690] usb 2-1: no configurations [ 2201.291285][ T3690] usb 2-1: can't read configurations, error -22 [ 2201.299528][ T3690] usb usb2-port1: unable to enumerate USB device 15:13:12 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:12 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:12 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:12 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)) 15:13:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec", 0x43, 0x0, 0x0, 0x0) 15:13:12 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x43, {0x43, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:13:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000010", 0x18, 0x6, 0x0, @private2, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x3, 0x4}]}}}}}}}}, 0x0) 15:13:13 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0xb2, &(0x7f0000000240)=@string={0xb2, 0x3, "6e762d386028b4350c711bdebc6a72645d0c87ea5f79f83c8336838105584f4372c8288ed72b0c0217b9756e885489baf51dd792ee12824a811fd55e059fb52f3cb99a4ca523c48e17ed782243ee13709b85c13298b8f996f3c8f682e852cb819f26a8b5d11027489d109c604eded21d64564231deb5b69aa54541d59a2fc1a0aaf48ab63145e062686fb13cdc4340e636757f5c2b904251b353a438e001869359d17d4200c3288def178d8775584bd9"}}]}) 15:13:13 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:13 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:13 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:13 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2202.536554][T29146] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2202.726671][ T3690] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2202.896635][T29146] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2202.907967][T29146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2202.919550][T29146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2202.929645][T29146] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2202.943069][T29146] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2202.952451][T29146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2202.962592][T29146] usb 3-1: config 0 descriptor?? [ 2203.016604][ T3690] usb 2-1: no configurations [ 2203.021264][ T3690] usb 2-1: can't read configurations, error -22 [ 2203.176570][ T3690] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2203.447878][T29146] appleir 0003:05AC:8243.0200: item fetching failed at offset 0/1 [ 2203.456050][T29146] appleir 0003:05AC:8243.0200: parse failed [ 2203.462260][T29146] appleir: probe of 0003:05AC:8243.0200 failed with error -22 [ 2203.466632][ T3690] usb 2-1: no configurations [ 2203.477026][ T3690] usb 2-1: can't read configurations, error -22 [ 2203.483580][ T3690] usb usb2-port1: attempt power cycle [ 2203.651260][ T3697] usb 3-1: USB disconnect, device number 92 [ 2203.896556][ T3690] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2204.026644][ T3690] usb 2-1: no configurations [ 2204.031287][ T3690] usb 2-1: can't read configurations, error -22 [ 2204.186549][ T3690] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2204.316594][ T3690] usb 2-1: no configurations [ 2204.321230][ T3690] usb 2-1: can't read configurations, error -22 [ 2204.327778][ T3690] usb usb2-port1: unable to enumerate USB device 15:13:16 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:16 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:16 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:16 executing program 3: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 15:13:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792c", 0x48, 0x0, 0x0, 0x0) 15:13:16 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x43, {0x43, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:13:16 executing program 3: r0 = socket(0x21, 0x2, 0x2) setsockopt$inet_dccp_buf(r0, 0x110, 0x4, 0x0, 0x4) 15:13:16 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:16 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) futimesat(r1, 0x0, 0x0) 15:13:16 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:16 executing program 3: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x24, &(0x7f0000000200)=[{&(0x7f0000016300)="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", 0x1ee}, {&(0x7f0000010000)="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"/312, 0x138, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a\x00'/32, 0x20, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e400005001000000000000800000000000020000000000000000000100000000002200000000000000000001000000010000100000020001000100000000000000000050010000000068ec300d682443b280c15683d9dd1cb101000000000000000000d0010000000068ec300d682443b280c15683d9dd1cb10000000100000000002200000000000000000001000000010000100000020001000100000000000000000050010000000068ec300d682443b280c15683d9dd1cb101000000000000000000d0010000000068ec300d682443b280c15683d9dd1cb100"/254, 0xfe, 0x10320}, {&(0x7f0000010400)="00000000000000000000000090d001000000000500000000000000001050010000000005000000000000000070d0010000000005000000000000000000d0010000000004000000000000000080d0010000000005000000000000000040d00100000000040000000000000000000008000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0d0010000000006000000000000000010500100000000050000000000000000a0d00100000000060000000000000000b0d00100000000060000000000000000e0d0010000000006000000000000000030d001000000000600000000000000000000080000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000d001000000000700000000000000001050010000000005000000000000000010d00100000000070000000000000000b0d00100000000060000000000000000e0d0010000000006000000000000000030d001000000000600000000000000000000080000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000010d001000000000400000000000000000050010000000004000000000000000020d0010000000004000000000000000000d0010000000004000000000000000030d0010000000004000000000000000040d001000000000400000000000000000000080000000000800000000000000100"/638, 0x27e, 0x10b20}, {&(0x7f00000000c0)="000053bc645f000000000000f822d6d29d5ee2fd74bf7c8e4b0a5b9daf44173a9b6a9c21bd3a88b5dfa6f5dfc2ceb49776eb47698b724b471b350f65e854cb26", 0x40, 0x500c20}, {&(0x7f0000011e00)="0000000000000000000000000000000000000100"/30, 0x1e, 0x500c80}, {&(0x7f0000013400)="0000000000000000000000000000000000000000000000000000000002002e2e0300"/48, 0x30, 0x504f40}, {&(0x7f0000013500)="5cebd97b00000000000000000000000000000000000000000000000000000000da33867de3824163b5e0ea15c91cfb38000050010000000001000000000000012fb4e3c071b7474b9338dc78fa300fa50400000000000000030000000000000006000000000100000000000000d80100000000000000390f0000620000000001000000000000e40000100000000000e90e0000", 0x93, 0x1500000}, {&(0x7f0000013600)="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", 0x33a, 0x1500dc0}, {&(0x7f0000013a00)="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", 0x240, 0x1501dc0}, {&(0x7f0000013e00)="00000000000000000000000000000000000200000000020000000000000000000100000000002400000000000000000001000000010000100000020001000100000000000000000050020000000068ec300d682443b280c15683d9dd1cb10100000000000000000050040000000068ec300d682443b280c156", 0x79, 0x1d00dc0}, {&(0x7f0000014500)="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", 0x160, 0x2500000}, {&(0x7f0000014700)="0000000000000000000000000000000000000000040000000000000000010000000000000050d0010000000000000000000000000010000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x69, 0x2500560}, {&(0x7f0000014800)="0000000000000000000000040000000000000000000000000000000060d001000000000000000000000000001000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000004000000", 0x5e, 0x2500720}, {&(0x7f0000014900)="000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100000000", 0x3c, 0x2500840}, {&(0x7f0000014a00)="0000060000000000000000000000000000000030d0010000000000000000000000000010000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000060000000000000000", 0x5a, 0x25008e0}, {&(0x7f0000014b00)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000100000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed410000000000000000000000000080ffffffff", 0x132, 0x25009e0}, {&(0x7f0000014d00)="000000000000000000000600000000000000000100000000000000b0d00100000000000000000000000000300000000000000000000000000000000000000000000001000000000000000000000000000000000000000000010600000000000000cd69a5fa4312404a985677503928c3ec0000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000054bc645f000000004b03321c53bc645f00"/218, 0xda, 0x2500b60}, {&(0x7f0000014e00)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100"/84, 0x54, 0x2500c80}, {&(0x7f0000014f00)="0000000000000000000000000000000000000600000000000000000000000000000000e0d00100000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/123, 0x7b, 0x2500d20}, {&(0x7f0000015000)="00000000000000000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed41", 0x3f, 0x2500e40}, {&(0x7f0000015100)="000000000000000000070000000000000000000000000000000010d00100000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000700", 0x5a, 0x2500ee0}, {&(0x7f0000015200)="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", 0x1c0, 0x2501000}, {&(0x7f0000015400)="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"/1038, 0x40e, 0x2501e20}, {&(0x7f0000015900)="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", 0x39b, 0x2502ca0}, {&(0x7f0000015e00)="c69f853800000000000000000000000000000000000000000000000000000000da33867de3824163b5e0ea15c91cfb380050d0010000000001000000000000012fb4e3c071b7474b9338dc78fa300fa50400000000000000f7ffffffffffffff02000000000001000000000000010000000000000000fb0e0000a000000000010000000000000c0001000000000000ef0e00000c", 0x94, 0x2505000}, {&(0x7f0000015f00)="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", 0x13b, 0x2505f40}, {&(0x7f0000000d40)="00000000000000000000000000000000000000000000000005000000000000004aa387b800000000000000000000000000000000000000000000000000000000da33867de3824163b5e0ea15c91cfb380070d0010000000001000000000000012fb4e3c071b7474b9338dc78fa300fa5050000000000000002000000000000000b000000000000d00000000000c00000800000000000830f0000180000000000500100000000c000008000000000006b0f0000180000000010500100000000a900000000000000004a0f0000210000000000d00100000000a90000000000000000290f0000210000000000d00100000000c00000000200000000110f0000180000000040d00100000000a90000000000000000f00e0000210000000050d00100000000a90000000000000000cf0e0000210000000060d00100000000a90000000000000000ae0e0000210000000070d00100000000a900000000000000008d0e0000210000000080", 0x168, 0x2506fe0}, {&(0x7f0000017700)="00000000000000000000000000000000000000000000000000010000000000000006000000000000000200000000000000b00400000000000000010000000000000006000000000000000200000000000000b00100000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00200000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000006000000000000000200000000000000b00700000000000000010000000000000006000000000000000200000000000000b00500000000000000009000000000000000010000000000002400000000000000010000000000000005000000000000000200000000000000b00300000000000000001000000000000000010000000000002200000000000000003000000000000000010000000000000100000000000000010000000000000006000000000000000100000000000000b2050000000000000005010000000000000000000000000000010000005f3fec2e00000000000000000000000000000000000000000000000000000000da33867de3824163b5e0ea15c91cfb3800b0d0010000000001000000000000012fb4e3c071b7474b9338dc78fa300fa506000000000000000500000000000000020000000100010000000000000100000000000000000020d001000000000600000000000000020100000000000001000000000000000000c0d0010000000006", 0x280, 0x250ae20}, {&(0x7f0000017a00)="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"/541, 0x21d, 0x250c000}, {&(0x7f0000017d00)="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", 0x9d8, 0x250c6e0}, {&(0x7f0000019300)="223e63d300000000000000000000000000000000000000000000000000000000da33867de3824163b5e0ea15c91cfb3800e0d0010000000001000000000000012fb4e3c071b7474b9338dc78fa300fa50600000000000000040000000000000006000000000000000000000000f90100000000000000730f0000280000000100000000000000cc0000d00000000000430f0000300000000100000000000000cc0000500100000000130f0000300000000100000000000000cc0000d00100000000e30e0000300000000100000000000000cc0000500200000000b30e0000300000000100000000000000cc0000500400000000830e000030", 0xf8, 0x250e000}, {&(0x7f0000019400)="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", 0x100, 0x250eee0}, {&(0x7f000001b000)="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", 0x3df, 0x4502ca0}, {&(0x7f000001b400)="00000000000000000000000000000000000000008941f9988941f9988941f9989f66c59100000000000000000000000000000000000000000000000000000000da33867de3824163b5e0ea15c91cfb380040d0010000000001000000000000012fb4e3c071b7474b9338dc78fa300fa504000000000000000700000000000000", 0x80, 0x4503fe0}], 0x0, &(0x7f0000000040)={[{@enospc_debug}, {@rescan_uuid_tree}, {@treelog}, {@space_cache_v2}, {@nodatacow}, {@datacow}, {@noautodefrag}, {@nossd}]}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) 15:13:16 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2205.586491][ T3698] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2205.756517][ T3690] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2205.956629][ T3698] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2205.967681][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2205.978783][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2205.990738][ T3698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2206.003775][ T3698] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2206.014510][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2206.024147][ T3698] usb 3-1: config 0 descriptor?? [ 2206.056609][ T3690] usb 2-1: no configurations [ 2206.061241][ T3690] usb 2-1: can't read configurations, error -22 [ 2206.216529][ T3690] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2206.496966][ T3690] usb 2-1: no configurations [ 2206.501607][ T3690] usb 2-1: can't read configurations, error -22 [ 2206.509574][ T3698] appleir 0003:05AC:8243.0201: item fetching failed at offset 0/1 [ 2206.517564][ T3690] usb usb2-port1: attempt power cycle [ 2206.523325][ T3698] appleir 0003:05AC:8243.0201: parse failed [ 2206.529376][ T3698] appleir: probe of 0003:05AC:8243.0201 failed with error -22 [ 2206.714931][T29146] usb 3-1: USB disconnect, device number 93 [ 2206.936492][ T3690] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 2207.066655][ T3690] usb 2-1: no configurations [ 2207.071298][ T3690] usb 2-1: can't read configurations, error -22 [ 2207.228173][ T3690] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 2207.366819][ T3690] usb 2-1: no configurations [ 2207.371462][ T3690] usb 2-1: can't read configurations, error -22 [ 2207.377866][ T3690] usb usb2-port1: unable to enumerate USB device 15:13:19 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:19 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:19 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:19 executing program 3: r0 = socket(0x28, 0x0, 0x1f) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd26, 0x7f, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x39e7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xe9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000200)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xbc, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1e}]}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x90}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8c0}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x81}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc4c}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x89d}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) r2 = accept$unix(r0, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e) r3 = socket(0x29, 0xa, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8050) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0xf0, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0x89, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0xdc, 0x6, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0xff, 0x16}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x1, 0x2, 0x6, 0x10, 0xb}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1801}}]}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x2, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x17}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040090}, 0x2000c010) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000880)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file0\x00'}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000008c0)={0x1, &(0x7f0000000840), 0x0, r6, 0x8}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r3) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r7, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4004) 15:13:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792c", 0x48, 0x0, 0x0, 0x0) 15:13:19 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x4e, {0x4e, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:13:19 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:13:19 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:13:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:13:19 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2208.616511][ T3690] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2208.796510][T29146] usb 2-1: new high-speed USB device number 84 using dummy_hcd 15:13:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0xb, &(0x7f00000000c0)={0x0, 0x5}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008008, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=ANY=[@ANYBLOB="4400000010000507000300"/20, @ANYRES32=0x0, @ANYBLOB="4080000000006088240012809a564de3113709000100626f6e640000028005001d0000000000050016000000573db2871c64204a8f255c9cd010b3e796bcd26c9cf1e72a1fa4ef4cb23a06b8d4e4b6789edd0d26ee1896c2957f55c88799b10a831167f4a672ef00519c04d261bf6ef528a897ca0091ec420bc8368db585cc20311d7fbe42a7223ee63548455f48532c08a247e2e1488c648eba023d25d3253d636188eefa10"], 0x44}}, 0x0) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x303}, "b68b2883669eaa72", "42c10ff3f3828e5f610750ab541e63f1", "73de3715", "fd00"}, 0x28) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x40000, 0x0, &(0x7f0000001f80), 0x8010, &(0x7f00000005c0)=ANY=[@ANYBLOB="db7d682f7c64ff9c7a727d24daee634150b3e874514177a2839bd61c41d0b42725672e9d6df7e7c9cbb1d99f5184cd934a80524c7102273a7de1c3f060b376407d3fd8fc3f61467896723bfd39413e912323460610ef8fe14f9906b65db49ae79a7b51977886a8542eac17476b253fd0997bb63cea2f904036056f37921e26ec7916b94e", @ANYBLOB="210000000045f760d834764b8b7c88bfff7f1900137946dad1961a81f0a3b83160e789af5cd8ccc4055d915dce10a408520a948751dcf99b721f5d66"], 0x0) [ 2208.976823][ T3690] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2209.013262][ T3690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2209.024751][ T3690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2209.036292][ T3690] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2209.289822][T31312] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2209.429168][ T3690] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2209.445156][ T3690] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2209.474949][ T3690] usb 3-1: config 0 descriptor?? [ 2209.586546][T29146] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2209.596920][T29146] usb 2-1: config 0 has no interfaces? [ 2209.602540][T29146] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2209.612046][T29146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2209.621579][T29146] usb 2-1: config 0 descriptor?? [ 2209.967787][ T3690] appleir 0003:05AC:8243.0202: item fetching failed at offset 0/1 [ 2209.976029][ T3690] appleir 0003:05AC:8243.0202: parse failed [ 2209.982547][ T3690] appleir: probe of 0003:05AC:8243.0202 failed with error -22 [ 2210.174544][T29146] usb 3-1: USB disconnect, device number 94 15:13:22 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:22 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792c", 0x48, 0x0, 0x0, 0x0) 15:13:22 executing program 3: setitimer(0x0, &(0x7f0000000780)={{}, {0x9}}, 0x0) getitimer(0x0, &(0x7f0000000000)) 15:13:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x4e, {0x4e, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:13:22 executing program 3: r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xa, 0x0, 0x81}) [ 2211.371760][ T3690] usb 2-1: USB disconnect, device number 84 15:13:22 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:22 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1) sendmmsg(0xffffffffffffffff, &(0x7f000000dfc0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f00000032c0)="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", 0xece}], 0x1}}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 15:13:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:22 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2211.472301][T31332] xt_hashlimit: max too large, truncated to 1048576 [ 2211.484330][T31332] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 15:13:22 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2211.666529][T29146] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2211.836526][ T3690] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 2212.036604][T29146] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2212.047757][T29146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2212.059113][T29146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2212.069337][T29146] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2212.082880][T29146] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2212.092292][T29146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.108005][T29146] usb 3-1: config 0 descriptor?? [ 2212.206577][ T3690] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2212.216813][ T3690] usb 2-1: config 0 has no interfaces? [ 2212.222388][ T3690] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2212.232205][ T3690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.245769][ T3690] usb 2-1: config 0 descriptor?? [ 2212.588078][T29146] appleir 0003:05AC:8243.0203: item fetching failed at offset 0/1 [ 2212.596274][T29146] appleir 0003:05AC:8243.0203: parse failed [ 2212.602416][T29146] appleir: probe of 0003:05AC:8243.0203 failed with error -22 [ 2212.792574][T29146] usb 3-1: USB disconnect, device number 95 15:13:25 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:25 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:25 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd800", 0x4a, 0x0, 0x0, 0x0) 15:13:25 executing program 3: syz_usb_connect$uac1(0x0, 0xb0, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x3, 0x1, 0x0, 0x0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0xa, 0x24, 0x4, 0x4, 0x0, "d923b237a2"}, @extension_unit={0x8, 0x24, 0x8, 0x0, 0x20, 0x3, "ac"}, @extension_unit={0xa, 0x24, 0x8, 0x5, 0x3, 0x0, "5b7610"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x6, {0x7, 0x25, 0x1, 0x42, 0x7f, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x2, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x0, 0x7, 0xfc, 'H', "e2daa9"}, @format_type_i_continuous={0x8}, @as_header={0x7, 0x24, 0x1, 0xab}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x1, 0x1, 0x81, {0x7, 0x25, 0x1, 0x0, 0x47, 0x154}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x60, 0x8, 0x7, 0x8}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000480)={'sit0\x00', 0x0}) 15:13:25 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x4e, {0x4e, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2214.465008][ T3697] usb 2-1: USB disconnect, device number 85 15:13:25 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:25 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:25 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:25 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:25 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:25 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2214.776479][T29146] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2214.896537][ T3697] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2215.137621][T29146] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2215.148906][T29146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2215.161321][T29146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2215.171510][T29146] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2215.185014][T29146] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2215.194355][T29146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.205458][T29146] usb 3-1: config 0 descriptor?? [ 2215.266605][ T3697] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2215.276803][ T3697] usb 2-1: config 0 has no interfaces? [ 2215.282293][ T3697] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2215.291381][ T3697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.301810][ T3697] usb 2-1: config 0 descriptor?? [ 2215.688477][T29146] appleir 0003:05AC:8243.0204: item fetching failed at offset 0/1 [ 2215.696795][T29146] appleir 0003:05AC:8243.0204: parse failed [ 2215.702826][T29146] appleir: probe of 0003:05AC:8243.0204 failed with error -22 [ 2215.890900][T29146] usb 3-1: USB disconnect, device number 96 15:13:28 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:28 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)="a5fffc2fea992b473904797502e4ef50238f9038710c36494fe5d75c93e52b75", 0x20}], 0x1}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x80}, 0x11) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x37, r0}, 0x38) 15:13:28 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd800", 0x4a, 0x0, 0x0, 0x0) 15:13:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x53, {0x53, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2217.515441][ T3692] usb 2-1: USB disconnect, device number 86 15:13:28 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:28 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) bind(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @local}, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) bind(r1, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @local}, 0x80) 15:13:28 executing program 3: r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045"], 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2}, 0x8000000) 15:13:28 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:28 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)) 15:13:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x4305000000000000) [ 2217.816549][ T3697] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2217.916532][ T3692] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2218.176586][ T3697] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2218.187506][ T3697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2218.198454][ T3697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2218.208255][ T3697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2218.221244][ T3697] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2218.230425][ T3697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2218.239925][ T3697] usb 3-1: config 0 descriptor?? [ 2218.277827][ T3692] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2218.288210][ T3692] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2218.297453][ T3692] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2218.306800][ T3692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2218.315902][ T3692] usb 2-1: config 0 descriptor?? [ 2218.707952][ T3697] appleir 0003:05AC:8243.0205: item fetching failed at offset 0/1 [ 2218.716133][ T3697] appleir 0003:05AC:8243.0205: parse failed [ 2218.722153][ T3697] appleir: probe of 0003:05AC:8243.0205 failed with error -22 [ 2218.910872][T20888] usb 3-1: USB disconnect, device number 97 15:13:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:31 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) listen(r0, 0x0) close(r0) 15:13:31 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd800", 0x4a, 0x0, 0x0, 0x0) 15:13:31 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x53, {0x53, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:13:31 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}}, 0x0) [ 2220.556277][ T3692] usb 2-1: USB disconnect, device number 87 15:13:31 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:31 executing program 3: r0 = socket(0xa, 0x2, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @mcast2}, 0x20) 15:13:31 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delvlan={0x18, 0x13, 0x4445a77109f9e3ff}, 0x18}}, 0x0) 15:13:31 executing program 3: timer_create(0x9, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xc5a48000) getresuid(&(0x7f0000000280), &(0x7f00000004c0), &(0x7f0000000500)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) write$binfmt_misc(r1, 0x0, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f00000002c0)=""/168, 0xa8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x4a040000) [ 2220.856639][T20888] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2220.996519][ T3692] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2221.216593][T20888] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2221.227455][T20888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2221.239285][T20888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2221.249494][T20888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2221.262517][T20888] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2221.271621][T20888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.281200][T20888] usb 3-1: config 0 descriptor?? [ 2221.356702][ T3692] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2221.370447][ T3692] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2221.380466][ T3692] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2221.392836][ T3692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.405615][ T3692] usb 2-1: config 0 descriptor?? [ 2221.448037][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.454357][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.757823][T20888] appleir 0003:05AC:8243.0206: item fetching failed at offset 0/1 [ 2221.765972][T20888] appleir 0003:05AC:8243.0206: parse failed [ 2221.772198][T20888] appleir: probe of 0003:05AC:8243.0206 failed with error -22 [ 2221.961721][ T3690] usb 3-1: USB disconnect, device number 98 15:13:34 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:34 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x6558}}}}]}, 0x78}}, 0x0) 15:13:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd80000", 0x4b, 0x0, 0x0, 0x0) 15:13:34 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x53, {0x53, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2223.605762][ T3690] usb 2-1: USB disconnect, device number 88 [ 2223.644320][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 15:13:34 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 15:13:34 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2223.660316][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.680363][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.712415][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.724130][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.733532][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.741634][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.749747][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 15:13:34 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2223.757891][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.765983][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.774098][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.796804][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 15:13:34 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2223.812057][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.833151][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.841900][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.858799][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.873237][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.889298][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.902354][T20888] usb 3-1: new high-speed USB device number 99 using dummy_hcd 15:13:34 executing program 3: r0 = syz_io_uring_setup(0x62a0, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000080)) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x9f) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_enter(r0, 0x1ed, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4240a2a0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:13:34 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2223.907783][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.933849][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.941936][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.952063][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.959866][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.969986][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bded10 returned -22 [ 2223.978699][T31449] binder: 31445:31449 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2224.076494][ T3690] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2224.266598][T20888] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2224.277517][T20888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2224.288441][T20888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2224.298391][T20888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2224.311551][T20888] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2224.321024][T20888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.330340][T20888] usb 3-1: config 0 descriptor?? [ 2224.446555][ T3690] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2224.456816][ T3690] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2224.465867][ T3690] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2224.475064][ T3690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.484203][ T3690] usb 2-1: config 0 descriptor?? [ 2224.808036][T20888] appleir 0003:05AC:8243.0207: item fetching failed at offset 0/1 [ 2224.816207][T20888] appleir 0003:05AC:8243.0207: parse failed [ 2224.822209][T20888] appleir: probe of 0003:05AC:8243.0207 failed with error -22 [ 2225.012498][T20888] usb 3-1: USB disconnect, device number 99 15:13:37 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:37 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:37 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDMKTONE(r0, 0x4b48, 0xffffffffffff4b4a) 15:13:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd80000", 0x4b, 0x0, 0x0, 0x0) 15:13:37 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x56, {0x56, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:13:37 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000280)={0x0, "4e2678584c96149cfbdca189f9f3458f58484673214db884c5f0f2e329fd54fb7b07ae3d43151568840c924433b7b5e1e1a0df8555b6148ebe950e0881277bcc"}, 0x48, 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc4}, &(0x7f0000000280)={0x0, "4e2678584c96149cfbdca189f9f3458f58484673214db884c5f0f2e329fd54fb7b07ae3d43151568840c924433b7b5e1e1a0df8555b6148ebe950e0881277bcc"}, 0x48, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, r1) [ 2226.661253][T20888] usb 2-1: USB disconnect, device number 89 [ 2226.684163][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 15:13:37 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:37 executing program 3: syz_usb_connect(0x0, 0x63, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd2, 0x4b, 0x13, 0x8, 0xc52, 0x9020, 0x20c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1a, 0x0, 0x2, 0x35, 0x92, 0x7a, 0x0, [], [{{0x9, 0x5, 0xf, 0x0, 0x3af}}, {{0x9, 0x5, 0x3}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x4, 0xa1, 0x59, 0xa8, 0x0, [], [{{0x9, 0x5, 0x9, 0x1, 0x0, 0x8}}, {{0x9, 0x5, 0xd}}, {{0x9, 0x5, 0xc, 0x1}}, {{0x9, 0x5, 0x3}}]}}]}}]}}, 0x0) [ 2226.726859][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.758372][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.767156][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 15:13:37 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2226.775497][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.785927][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.797172][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.804819][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.815139][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 15:13:37 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2226.823397][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.833216][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.841061][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.851388][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.861321][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 15:13:37 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2226.871538][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.880086][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.889860][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.897973][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.905614][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.916575][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.924220][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.934149][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.941987][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.951985][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bded10 returned -22 [ 2226.959813][T31476] binder: 31472:31476 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2226.969626][ T3698] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2227.096493][T20888] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2227.336569][ T3698] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2227.348315][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2227.359254][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2227.369241][ T3698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2227.382359][ T3698] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2227.391992][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.401488][ T3698] usb 3-1: config 0 descriptor?? [ 2227.466686][T20888] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2227.475734][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2227.484886][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.494817][T20888] usb 2-1: config 0 descriptor?? [ 2227.887792][ T3698] appleir 0003:05AC:8243.0208: item fetching failed at offset 0/1 [ 2227.895964][ T3698] appleir 0003:05AC:8243.0208: parse failed [ 2227.902462][ T3698] appleir: probe of 0003:05AC:8243.0208 failed with error -22 [ 2228.090736][ T3698] usb 3-1: USB disconnect, device number 100 15:13:40 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:40 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x0, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:40 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:40 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffc55}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x26c, &(0x7f0000000080)={[{}, {0x261, 0x4e00, "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"}]}) 15:13:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) r1 = socket$inet6(0x10, 0x3, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd80000", 0x4b, 0x0, 0x0, 0x0) 15:13:40 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x56, {0x56, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2229.733305][T20888] usb 2-1: USB disconnect, device number 90 [ 2229.772440][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 15:13:40 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x0, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2229.791646][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.800390][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.808519][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.816340][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.830020][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 15:13:40 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x0, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2229.839623][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.850131][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.858482][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.866343][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.880148][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 15:13:40 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x0, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2229.888760][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.898811][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.906693][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.914477][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.928082][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 15:13:40 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x0, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2229.935940][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.944550][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.955692][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.964499][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.977957][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 15:13:40 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x0, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:40 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 2229.985722][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2229.994977][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.003631][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.017306][T31505] binder: 31501:31505 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2230.031966][ T3698] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 2230.074978][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.083095][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.093783][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.101848][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.110404][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.118099][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.125730][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.133683][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.141323][T20888] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2230.141887][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.157460][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.165247][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.173283][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.181149][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.189137][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.196843][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.204474][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.212159][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.219951][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.227654][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.235289][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.243003][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.250992][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.259534][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.267857][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bded10 returned -22 [ 2230.276099][T31523] binder: 31522:31523 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2230.406625][ T3698] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2230.417549][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2230.429108][ T3698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2230.439350][ T3698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2230.452859][ T3698] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2230.462778][ T3698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2230.472815][ T3698] usb 3-1: config 0 descriptor?? [ 2230.506591][T20888] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2230.515596][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2230.526481][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2230.535523][T20888] usb 2-1: config 0 descriptor?? [ 2230.947818][ T3698] appleir 0003:05AC:8243.0209: item fetching failed at offset 0/1 [ 2230.956012][ T3698] appleir 0003:05AC:8243.0209: parse failed [ 2230.962013][ T3698] appleir: probe of 0003:05AC:8243.0209 failed with error -22 [ 2231.151893][ T3698] usb 3-1: USB disconnect, device number 101 15:13:43 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:43 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:43 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x0, 0x0, 0x3, 0xe, 0xfffffffffffffff8, 0x1}, @alu={0x7, 0x0, 0x4, 0x1, 0x3, 0x1}]}, &(0x7f0000000540)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xc, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0x1]}, 0x80) io_submit(0x0, 0x5, &(0x7f0000000800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x8, r0, &(0x7f0000000080)="0d03a5145eca0faeddb6ee", 0xb, 0x3, 0x0, 0x5, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f00000003c0)="71b904d20b19c7b256ea4aa8a6e7f775147c50238d08221bcb2c52", 0x1b, 0x5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x6, r3, &(0x7f0000000440)="e404fd8ff84beb457f2a65324b7c98a9c5d7e34c06dcab194b9a49dcaf137efdec1bbefe19f435eee901b03736abbb57fad516e7c82fe303eeaa8c7998bd920a30b02fc26e5b3e873bae2d", 0x4b, 0x4, 0x0, 0x2}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x7, r4, &(0x7f00000006c0)="b0fe773548a9a041ebead7fd9b3e08e9bc73f4b41948eab2b366b343c2285fc6916e64eb876a97d63b07e62e04a307f034b030943596f215912692d7f1c2dddfcb697bcfec52616c5c9f6c2952eb850e57e699f16dc5e33fd318ccb9232621b404a54d343e4642b085dd02a9091d8a34751918463182e7e2", 0x78, 0x7}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000780)="f66ae9fefee4d0", 0x7, 0x7fff, 0x0, 0x1}]) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="74756e6c000000482f485028bca5b8e392f20735ea6b673ad113de3b0e1820a7f27ee95cef6ec9749d01465820a5f703b76c901f4d3ad15c4549e0843f0d2ff400a75465e0302fa62cdaa4b3c8f5fed1f7ce09bf58a0253f888b8869c588f65cd5d1382a3b43a6c906901919a77a3e383b8e659555a8d0a8e6db6488a9eeadeb9a2a61161063d60d60906fdb8f59241111fea1ee8706ecee4fc18482e9e15969188404ede503fc", @ANYRES32=0x0, @ANYBLOB="00800700000000070000000744a000500067000020009078e00000016401010144147030000007ff00000001000000060000540794040000830bedac1e0001ac14140f0717f8ac1414aaac1414bb7f000001ac1414aaffffffff0000"]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', r6, 0x1, 0x40, 0x1, 0x4, {{0x35, 0x4, 0x1, 0x20, 0xd4, 0x67, 0x0, 0xe9, 0x29, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x23, 0x7e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, @empty, @local, @empty, @multicast1]}, @ssrr={0x89, 0xf, 0xfd, [@multicast2, @local, @remote]}, @timestamp_prespec={0x44, 0x44, 0x63, 0x3, 0x4, [{@loopback, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x8001}, {@loopback, 0x5}, {@remote, 0xfffff5aa}, {@dev={0xac, 0x14, 0x14, 0x24}}, {@loopback, 0x6}, {@multicast2, 0x6}]}, @ssrr={0x89, 0xb, 0x2a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @timestamp={0x44, 0x14, 0xf0, 0x0, 0x6, [0xfff, 0x8, 0x177, 0xfffffffd]}, @generic={0x83, 0xf, "a7ca6c01cbd057f98b035091d4"}, @end, @rr={0x7, 0x17, 0x66, [@broadcast, @rand_addr=0x64010102, @multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x4, 0xb5, 0x0, 0x2}]}}}}}) io_setup(0x9cbf, &(0x7f0000000840)=0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r8, 0x4008af04, 0x0) io_submit(r7, 0x1, &(0x7f0000000900)=[&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x7, 0x400, r8, &(0x7f0000000880)="24876aeb5a4b697eec26f170fdcd27819c5f2cc1da0e819ef4f01021f6473dadf1", 0x21, 0xe000, 0x0, 0x2, r2}]) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x5452, &(0x7f0000000040)={'sit0\x00', 0x0}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4) 15:13:43 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 15:13:43 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x56, {0x56, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2232.780758][ T3698] usb 2-1: USB disconnect, device number 91 15:13:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x2c}}, 0x0) [ 2232.827077][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2232.834737][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 15:13:43 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:43 executing program 4: r0 = eventfd(0x0) r1 = eventfd(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r1}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r0}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r1, 0x9eb0, 0x1}) [ 2232.882179][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2232.918636][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 15:13:43 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2232.945130][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2232.958470][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2232.966872][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2232.976705][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 15:13:43 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:43 executing program 4: r0 = eventfd(0x0) r1 = eventfd(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r1}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r0}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r1, 0x9eb0, 0x1}) [ 2232.994928][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.004261][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.013357][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.022859][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.030998][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.055165][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.069574][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.077893][T21516] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2233.094240][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.104982][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.113265][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.121435][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.130765][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.138673][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.147233][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.155119][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.163268][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bded10 returned -22 [ 2233.171183][T31536] binder: 31535:31536 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2233.246473][ T3698] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2233.446656][T21516] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2233.457820][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2233.469370][T21516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2233.479458][T21516] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2233.492786][T21516] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2233.502160][T21516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.513149][T21516] usb 3-1: config 0 descriptor?? [ 2233.606655][ T3698] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2233.615658][ T3698] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2233.624757][ T3698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2233.634955][ T3698] usb 2-1: config 0 descriptor?? [ 2233.997770][T21516] appleir 0003:05AC:8243.020A: item fetching failed at offset 0/1 [ 2234.005953][T21516] appleir 0003:05AC:8243.020A: parse failed [ 2234.012251][T21516] appleir: probe of 0003:05AC:8243.020A failed with error -22 [ 2234.200530][T21516] usb 3-1: USB disconnect, device number 102 15:13:46 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:46 executing program 3: r0 = eventfd(0x0) r1 = eventfd(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r1}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r0}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r1, 0x9eb0, 0x1}) 15:13:46 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:46 executing program 4: r0 = eventfd(0x0) r1 = eventfd(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r1}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r0}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r1, 0x9eb0, 0x1}) 15:13:46 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:46 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x57, {0x57, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:13:46 executing program 3: r0 = eventfd(0x0) r1 = eventfd(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r1}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r0}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r1, 0x9eb0, 0x1}) [ 2235.831756][ T3698] usb 2-1: USB disconnect, device number 92 [ 2235.860678][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 15:13:46 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:46 executing program 3: r0 = eventfd(0x0) r1 = eventfd(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r1}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r0}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r1, 0x9eb0, 0x1}) [ 2235.899107][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2235.917809][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2235.928890][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2235.950732][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2235.962308][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2235.971297][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2235.979707][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2235.988420][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 15:13:46 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="d00800002400fffff70091e10000000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x8d0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0xf, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 15:13:46 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:46 executing program 4: r0 = eventfd(0x0) r1 = eventfd(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r1}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000080)={r0}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000000c0)={r1, 0x9eb0, 0x1}) [ 2235.996388][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.020515][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.025118][T31584] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2236.030095][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.048576][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.058597][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.072877][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.094396][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.102684][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.110983][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.120012][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.128086][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.135807][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.143581][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.151397][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.159365][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bded10 returned -22 [ 2236.167017][T29416] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2236.169303][T31568] binder: 31564:31568 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2236.296505][ T3698] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2236.526576][T29416] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2236.537565][T29416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2236.548489][T29416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2236.558384][T29416] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2236.571503][T29416] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2236.581423][T29416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2236.590523][T29416] usb 3-1: config 0 descriptor?? [ 2236.656629][ T3698] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2236.665704][ T3698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2236.676184][ T3698] usb 2-1: config 0 descriptor?? [ 2236.729954][ T3698] cp210x 2-1:0.0: cp210x converter detected [ 2236.936609][ T3698] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2236.944141][ T3698] cp210x 2-1:0.0: querying part number failed [ 2236.951329][ T3698] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2237.077852][T29416] appleir 0003:05AC:8243.020B: item fetching failed at offset 0/1 [ 2237.086008][T29416] appleir 0003:05AC:8243.020B: parse failed [ 2237.091991][T29416] appleir: probe of 0003:05AC:8243.020B failed with error -22 [ 2237.280940][T29416] usb 3-1: USB disconnect, device number 103 15:13:49 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:49 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:13:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f00000002c0), 0x8a400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getpid() syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x8100000, 0x0, &(0x7f00000002c0), 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB="6a00000000000000d0f31f847590c71d9b8ed6dc7275672c7569643ca3039061993bcd38b4eec491568a8daf481efc677e22f133accee6e5b74dc5fed19e079929556acd3ff6f3547a1d37592c3ff86cc43c0685cc819b419f7179f6290f007d09166da3113802ac8c27aa6d65", @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="c87d6adf1e8df329d5739b713c93783161368169d429af678cfd4617b1cd9df34f28119a9836d9c49d07905b653db71daefde3a5f052f87b59d83780cb9e514a3c2992366c03a19d72498ccc0ec49c776eb27e9f275357850ae0fa33fcdd38a1d01b717c1496f19d6bb606398914e0a4d1a9aa0283662329fab799540c70ed19ff06d284433a4896f518e92d47da91bdac549e5392f067ba61bb8c80c326c9a75c4c16b62aa22206debeb601d78c33328f962e5823d48d3ef51d0a9b7c60e57a5cfffd39f05fcaddbd81973293059348f78ca7c2f6967f"], 0x1) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) 15:13:49 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:49 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:49 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x57, {0x57, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 2238.912047][T20888] usb 2-1: USB disconnect, device number 93 [ 2238.943803][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2238.952442][T20888] cp210x 2-1:0.0: device disconnected [ 2238.976677][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 15:13:49 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2239.188549][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.366215][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.392041][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.399809][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.407497][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 15:13:50 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:50 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) [ 2239.415184][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.424629][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.453232][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 15:13:50 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2239.464700][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.477337][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.485115][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.493092][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.502163][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.509898][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.518052][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.525750][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.533643][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.541468][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.549153][T29416] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2239.549773][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 15:13:50 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:50 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) [ 2239.566401][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.578534][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.592433][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.610531][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bded10 returned -22 [ 2239.630417][T31594] binder: 31591:31594 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2239.736602][T20888] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2239.926622][T29416] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2239.937761][T29416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2239.948679][T29416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2239.958636][T29416] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2239.971638][T29416] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2239.980721][T29416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2239.990627][T29416] usb 3-1: config 0 descriptor?? [ 2240.106653][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2240.115720][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.125175][T20888] usb 2-1: config 0 descriptor?? [ 2240.167756][T20888] cp210x 2-1:0.0: cp210x converter detected [ 2240.386592][T20888] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2240.394715][T20888] cp210x 2-1:0.0: querying part number failed [ 2240.402722][T20888] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2240.467867][T29416] appleir 0003:05AC:8243.020C: item fetching failed at offset 0/1 [ 2240.476021][T29416] appleir 0003:05AC:8243.020C: parse failed [ 2240.482272][T29416] appleir: probe of 0003:05AC:8243.020C failed with error -22 [ 2240.671595][T20888] usb 3-1: USB disconnect, device number 104 15:13:52 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:52 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:52 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:13:52 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x800455d1, &(0x7f0000000200)=""/245) 15:13:52 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x57, {0x57, 0x0, "449b49923f28b10045e1eed1807181c73943276cc88be6cca38e01a847afb69b66b81d48a1dd8ecc4b08f34888f5af7289888eeddee887071f98abcd4d5d7bda79973f8a1ac2b51624b01935ca36ec7158af1570a2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:13:52 executing program 3: prctl$PR_GET_UNALIGN(0x3a, 0x0) [ 2241.989706][T20888] usb 2-1: USB disconnect, device number 94 [ 2242.031187][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2242.069822][T20888] cp210x 2-1:0.0: device disconnected 15:13:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0xfeffffff00000000}, 0x0) 15:13:52 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:13:52 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2242.079911][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.093909][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.132552][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.141810][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.150188][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.158234][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.166064][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.174164][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 15:13:52 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2242.182169][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.190266][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.200163][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.208320][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.216082][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.224115][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 15:13:52 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) [ 2242.232050][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.240457][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.248412][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.256136][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.264269][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.272813][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.280732][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.301309][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.311427][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.319704][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bded10 returned -22 [ 2242.328685][T31637] binder: 31628:31637 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2242.368319][T29416] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2242.446575][T20888] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2242.736637][T29416] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2242.748347][T29416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2242.759353][T29416] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2242.769157][T29416] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2242.782160][T29416] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 2242.791877][T29416] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.801066][T29416] usb 3-1: config 0 descriptor?? [ 2242.826598][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2242.835669][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.846550][T20888] usb 2-1: config 0 descriptor?? [ 2242.887358][T20888] cp210x 2-1:0.0: cp210x converter detected [ 2243.106579][T20888] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2243.114086][T20888] cp210x 2-1:0.0: querying part number failed [ 2243.121312][T20888] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2243.267806][T29416] appleir 0003:05AC:8243.020D: item fetching failed at offset 0/1 [ 2243.275981][T29416] appleir 0003:05AC:8243.020D: parse failed [ 2243.281951][T29416] appleir: probe of 0003:05AC:8243.020D failed with error -22 [ 2243.473044][T29416] usb 3-1: USB disconnect, device number 105 15:13:55 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "00c9e71410a330a36f4f8fc909fcd5000064f3"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2006) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "d483d9431e1833cacaa2398910474e3af434b9"}) 15:13:55 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:55 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:55 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:13:55 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x1f00}], 0x4000000000005cd, 0x42, 0x0) [ 2245.027184][T29416] usb 2-1: USB disconnect, device number 95 [ 2245.062464][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:13:55 executing program 3: syz_emit_ethernet(0x32, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv4={0x800, @igmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @multicast1, {[@rr={0x7, 0x2}, @rr={0x7, 0x3}]}}, {0x0, 0x0, 0x0, @private}}}}}, 0x0) 15:13:55 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2245.084950][T29416] cp210x 2-1:0.0: device disconnected 15:13:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0x58, 0x1, 0x0, 0x0, &(0x7f0000000300)=[{}]}) 15:13:55 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2245.121998][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.147700][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.165305][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.173876][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.183391][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.191957][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.200150][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.208816][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 15:13:55 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2245.217364][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.225794][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.234039][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.242146][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.250799][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.259033][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 15:13:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) [ 2245.267313][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.278124][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.297014][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.305033][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.314367][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.337802][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.352730][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.360890][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.370381][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.378458][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2245.386282][T31679] binder: 31662:31679 ioctl 4020ae46 7fe580bbda10 returned -22 [ 2245.506512][T29416] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2245.876721][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2245.885806][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2245.895092][T29416] usb 2-1: config 0 descriptor?? [ 2245.943917][T29416] cp210x 2-1:0.0: cp210x converter detected [ 2246.146677][T29416] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2246.154209][T29416] cp210x 2-1:0.0: querying part number failed [ 2246.162383][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 15:13:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:13:58 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x24, 0x0, 0x0) 15:13:58 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:58 executing program 4: eventfd(0x0) r0 = eventfd(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:13:58 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:58 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2248.106717][T29146] usb 2-1: USB disconnect, device number 96 [ 2248.130138][T29146] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:13:58 executing program 4: eventfd(0x0) r0 = eventfd(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:13:58 executing program 4: eventfd(0x0) r0 = eventfd(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:13:58 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:13:58 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) [ 2248.178181][T29146] cp210x 2-1:0.0: device disconnected 15:13:58 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:13:58 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) [ 2248.556462][T29146] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2248.916609][T29146] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2248.926030][T29146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.935399][T29146] usb 2-1: config 0 descriptor?? [ 2248.978956][T29146] cp210x 2-1:0.0: cp210x converter detected [ 2249.186515][T29146] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2249.194121][T29146] cp210x 2-1:0.0: querying part number failed [ 2249.201709][T29146] usb 2-1: cp210x converter now attached to ttyUSB0 15:14:01 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:01 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:01 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:01 executing program 3: syz_clone(0x52080080, 0x0, 0x0, 0x0, 0x0, 0x0) 15:14:01 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:14:01 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:01 executing program 4: eventfd(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x9eb0, 0x1}) [ 2251.175255][T29146] usb 2-1: USB disconnect, device number 97 15:14:01 executing program 3: r0 = syz_clone(0x0, 0x0, 0x61, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$getregs(0xf, r0, 0x0, &(0x7f0000000140)=""/143) 15:14:01 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r1 = memfd_create(&(0x7f0000000300)='\x00', 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000340)={r1, 0x0, 0x0, 0x1000}) 15:14:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002800050ad25a802e8c63940d0424fc600c7a0c400200000002ac0f00f0153e370a360080e0900808d1bd", 0x33fe0}], 0x1}, 0x0) [ 2251.224589][T29146] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:14:02 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2251.280726][T29146] cp210x 2-1:0.0: device disconnected [ 2251.296179][T31752] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 2251.304494][T31752] netlink: 181696 bytes leftover after parsing attributes in process `syz-executor.3'. 15:14:02 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:02 executing program 3: geteuid() syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 15:14:02 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2251.696535][T29146] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2252.056700][T29146] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2252.069039][T29146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.085813][T29146] usb 2-1: config 0 descriptor?? [ 2252.133091][T29146] cp210x 2-1:0.0: cp210x converter detected [ 2252.336605][T29146] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2252.344428][T29146] cp210x 2-1:0.0: querying part number failed [ 2252.361363][T29146] usb 2-1: cp210x converter now attached to ttyUSB0 15:14:04 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:04 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:14:04 executing program 3: r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r1}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 15:14:04 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:04 executing program 4: eventfd(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x9eb0, 0x1}) 15:14:04 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2254.259313][T20888] usb 2-1: USB disconnect, device number 98 [ 2254.293640][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:14:05 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2254.315123][T20888] cp210x 2-1:0.0: device disconnected 15:14:05 executing program 3: mlock(&(0x7f0000ff2000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000ff0000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000ff0000/0x10000)=nil, 0x10000) [ 2254.394792][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.405925][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.413879][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.422301][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.430151][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 15:14:05 executing program 3: r0 = syz_open_dev$vivid(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bf05eafc"}}) [ 2254.439690][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.447552][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.455487][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.463355][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.484487][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 15:14:05 executing program 4: eventfd(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x9eb0, 0x1}) 15:14:05 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) setrlimit(0x5, &(0x7f00000000c0)={0x4, 0xe422}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f00000002c0), 0x8a400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getpid() syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x8100000, 0x0, &(0x7f00000002c0), 0x10000, &(0x7f0000000780)=ANY=[@ANYBLOB="6a00000000000000d0f31f847590c71d9b8ed6dc7275672c7569643ca3039061993bcd38b4eec491568a8daf481efc677e22f133accee6e5b74dc5fed19e079929556acd3ff6f3547a1d37592c3ff86cc43c0685cc819b419f7179f6290f007d09166da3113802ac8c27aa6d65", @ANYRESDEC=0xee00, @ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="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"], 0x1) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) [ 2254.492780][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.506108][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.530061][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.552078][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.563909][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.572510][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.582136][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.592533][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.601049][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.609150][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.637668][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.645858][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.654757][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.663471][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bded10 returned -22 [ 2254.680785][T31768] binder: 31765:31768 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2255.136529][T20888] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2255.496677][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2255.505754][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.516529][T20888] usb 2-1: config 0 descriptor?? [ 2255.557460][T20888] cp210x 2-1:0.0: cp210x converter detected [ 2255.776567][T20888] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2255.784097][T20888] cp210x 2-1:0.0: querying part number failed [ 2255.791266][T20888] usb 2-1: cp210x converter now attached to ttyUSB0 15:14:08 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:08 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:08 executing program 4: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:08 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:14:08 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) 15:14:08 executing program 3: syz_usb_connect$uac1(0x0, 0x78, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 2257.330844][ T3698] usb 2-1: USB disconnect, device number 99 15:14:08 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2257.373139][ T3698] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2257.386058][ T3698] cp210x 2-1:0.0: device disconnected [ 2257.405601][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.414147][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.422949][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.430987][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.438795][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.446741][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 15:14:08 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:08 executing program 4: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) [ 2257.467225][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.475350][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.500213][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.510504][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 15:14:08 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x0, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2257.520839][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.533828][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.543744][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.552002][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.560553][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.568692][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.576889][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.584720][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.592944][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.601649][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.609912][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 15:14:08 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x0, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:08 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x0, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2257.619623][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.628702][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.636728][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bded10 returned -22 [ 2257.644556][T31809] binder: 31803:31809 ioctl 4020ae46 7fe580bdea10 returned -22 [ 2257.766753][ T3698] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2258.126578][ T3698] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2258.135650][ T3698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.146831][ T3698] usb 2-1: config 0 descriptor?? [ 2258.194622][ T3698] cp210x 2-1:0.0: cp210x converter detected [ 2258.396660][ T3698] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2258.404167][ T3698] cp210x 2-1:0.0: querying part number failed [ 2258.413296][ T3698] usb 2-1: cp210x converter now attached to ttyUSB0 15:14:11 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:11 executing program 4: r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:11 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 15:14:11 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:11 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "453ac4", 0x43}) 15:14:11 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) [ 2260.395188][T20888] usb 2-1: USB disconnect, device number 100 [ 2260.402720][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:14:11 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) 15:14:11 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2260.439044][T20888] cp210x 2-1:0.0: device disconnected 15:14:11 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_page_scan_type={{}, {0x7f}}}}, 0x8) 15:14:11 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_page_scan_type={{}, {0x7f}}}}, 0x8) [ 2260.494925][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.519997][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 15:14:11 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:11 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_page_scan_type={{}, {0x7f}}}}, 0x8) [ 2260.541597][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.551690][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.571110][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.592866][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.605993][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.615467][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.623632][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.631731][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.640721][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.648673][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.656331][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.664087][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.672331][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.680546][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.688491][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.696140][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.704235][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.712037][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.719934][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.727699][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.735475][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.743272][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbdd10 returned -22 [ 2260.750962][T31856] binder: 31839:31856 ioctl 4020ae46 7fe580bbda10 returned -22 [ 2260.916542][T20888] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2261.296876][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2261.305970][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2261.315759][T20888] usb 2-1: config 0 descriptor?? [ 2261.358002][T20888] cp210x 2-1:0.0: cp210x converter detected [ 2261.576580][T20888] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2261.584124][T20888] cp210x 2-1:0.0: querying part number failed [ 2261.592265][T20888] usb 2-1: cp210x converter now attached to ttyUSB0 15:14:14 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:14 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:14 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_page_scan_type={{}, {0x7f}}}}, 0x8) 15:14:14 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:14 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 15:14:14 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) 15:14:14 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) [ 2263.488130][T29416] usb 2-1: USB disconnect, device number 101 [ 2263.521555][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:14:14 executing program 3: 15:14:14 executing program 4: eventfd(0x0) r0 = eventfd(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:14 executing program 3: 15:14:14 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:14 executing program 3: [ 2263.555739][T29416] cp210x 2-1:0.0: device disconnected [ 2263.966538][T29416] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 2264.327218][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2264.336294][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2264.347697][T29416] usb 2-1: config 0 descriptor?? [ 2264.388180][T29416] cp210x 2-1:0.0: cp210x converter detected [ 2264.566579][T19296] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2264.574878][T19296] Bluetooth: hci5: Injecting HCI hardware error event [ 2264.582596][T28212] Bluetooth: hci5: hardware error 0x00 [ 2264.596580][T29416] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2264.604173][T29416] cp210x 2-1:0.0: querying part number failed [ 2264.611949][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 15:14:17 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:17 executing program 3: syz_emit_vhci(0x0, 0x0) 15:14:17 executing program 4: eventfd(0x0) r0 = eventfd(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:17 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:17 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 15:14:17 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:17 executing program 4: eventfd(0x0) r0 = eventfd(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:17 executing program 3: syz_emit_vhci(0x0, 0x0) [ 2266.553835][T29416] usb 2-1: USB disconnect, device number 102 [ 2266.587379][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2266.595645][T29416] cp210x 2-1:0.0: device disconnected 15:14:17 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:17 executing program 3: syz_emit_vhci(0x0, 0x0) [ 2266.646615][T28212] Bluetooth: hci5: Opcode 0x c03 failed: -110 15:14:17 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:17 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2267.036490][T29416] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 2267.396634][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2267.405715][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.414800][T29416] usb 2-1: config 0 descriptor?? [ 2267.457487][T29416] cp210x 2-1:0.0: cp210x converter detected [ 2267.676604][T29416] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2267.684206][T29416] cp210x 2-1:0.0: querying part number failed [ 2267.691839][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 15:14:20 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:20 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_page_scan_type}}, 0x8) 15:14:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 15:14:20 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:20 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:20 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2269.611531][ T3698] usb 2-1: USB disconnect, device number 103 [ 2269.618846][ T3698] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:14:20 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_page_scan_type}}, 0x8) 15:14:20 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2269.668655][ T3698] cp210x 2-1:0.0: device disconnected 15:14:20 executing program 3: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_read_page_scan_type}}, 0x8) 15:14:20 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x22, &(0x7f0000000240)=[@in={0x2, 0x0, @dev}], 0x3) 15:14:20 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f00000026c0)) [ 2270.066585][ T3698] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 2270.426705][ T3698] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2270.435777][ T3698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2270.446241][ T3698] usb 2-1: config 0 descriptor?? [ 2270.488634][ T3698] cp210x 2-1:0.0: cp210x converter detected [ 2270.706613][ T3698] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2270.714210][ T3698] cp210x 2-1:0.0: querying part number failed [ 2270.723546][ T3698] usb 2-1: cp210x converter now attached to ttyUSB0 15:14:23 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:23 executing program 3: r0 = add_key$keyring(&(0x7f0000001700), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "237522174ee3cb02aa08bc66da37bcbad924799254090bc1654f884f3b2b7615e877f6c60894dbeddbe22022766f76c77066263f55f9b9eab3e4379d17a6b3ee"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r0, 0x0) 15:14:23 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x20}]}}}]}, 0x3c}}, 0x0) 15:14:23 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:23 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:23 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) syz_open_dev$video(&(0x7f00000066c0), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000006540), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/xfrm_stat\x00') pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000000)={0x1fe}, &(0x7f0000000200), 0x0) 15:14:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, &(0x7f0000000200)={'batadv_slave_0\x00'}) 15:14:23 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8224", 0x2}], 0x1}}], 0x1, 0x4048040) write(r0, &(0x7f0000000140)="3d4b4cb767ddb40b5d9a80dd85b92904c733250e0e3c8e3fcdb7", 0x1a) [ 2272.663793][T29416] usb 2-1: USB disconnect, device number 104 [ 2272.697490][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:14:23 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:23 executing program 5: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) read$dsp(r0, &(0x7f0000000280)=""/4096, 0x1000) read$dsp(r0, &(0x7f0000000180)=""/200, 0xc8) ioctl$SNDCTL_DSP_CHANNELS(r0, 0x5000, 0x0) [ 2272.760388][T29416] cp210x 2-1:0.0: device disconnected 15:14:23 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 2273.146498][T29416] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2273.516619][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2273.525699][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.539984][T29416] usb 2-1: config 0 descriptor?? [ 2273.578428][T29416] cp210x 2-1:0.0: cp210x converter detected [ 2274.016642][T29416] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 2274.436613][T29416] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2274.444217][T29416] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2274.453292][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2274.467101][T29416] usb 2-1: USB disconnect, device number 105 [ 2274.477096][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2274.485103][T29416] cp210x 2-1:0.0: device disconnected 15:14:25 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:25 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:25 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)=0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x1208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000380)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) 15:14:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 15:14:25 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:25 executing program 5: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_group_source_req(r0, 0x84, 0x76, &(0x7f00000001c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x8) 15:14:25 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:25 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:25 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:25 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2275.266457][T20888] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2275.626512][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2275.635609][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2275.644675][T20888] usb 2-1: config 0 descriptor?? [ 2275.687588][T20888] cp210x 2-1:0.0: cp210x converter detected [ 2276.116733][T20888] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 2276.556664][T20888] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2276.564261][T20888] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2276.572260][T20888] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2276.581972][T20888] usb 2-1: USB disconnect, device number 106 [ 2276.592177][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2276.600234][T20888] cp210x 2-1:0.0: device disconnected 15:14:27 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:27 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:27 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:27 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:27 executing program 3: r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000004240), 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x70000480, 0x0, 0x0, 0x0, &(0x7f0000004440), &(0x7f0000004480)="426e1904d7686cb583ae0796965fe1e7651639b6bc38b3631e65afaaff0ad3c48d9640aba6fd32825e395bda6ba494c13236295e71abbb8b48967f47780fd73233781578619bcc6640715d785d") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004bc0)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000200)="0dfa88e6e865608589a2e5988aaff0c483de9c07f8445d9474ae63cb1f1929b498c7b7a6863b44514b99ccffe57658346c78869cbf332de440503b67f4c32849105b5f3e0717523f4c08e19fe1157b98d53729a95217f98f42d46b05b876973013ebdfa395515af4087f8a607c4a757546e36f58edfb5806f3deaa12e21c02ec188be9b68f336931adc02f49acb25caf5afcf813a250ea12334531f5022c3ca6e887f44dce776602b177fa24f6358ebfa221c8adc09860625cb42b9920a010f5d59cc9edfbd051287ec9e46c52f05d581d321b3cd12cee6aaef51900f6c561d2a808d9a1338c4a6adb", 0xe9}, {&(0x7f0000000300)="0b35e4483f552a7994d2dcd120cdb50bbf48a7effde74414b68de92d3fa5bd8e80839828deed86edf7f82cfad863b7325be3847ffd9f8dd39b059e0d7689f0ba3be15ae3109497df4a1334ccfc1a2cf3a907d27a7474aa6eef371b752a8fd07182940fa766395ea0fde5cd5b04a848aeaa90af6c1d75f5feac7e8eb6f91131595039349b44c0e2ae22d61c0fdc40d8d48d", 0x91}, {&(0x7f00000003c0)="e784633c5bf9ab34301d073e4fb56b626c444203c02ae9ecaf5f17d51644300eb1c41e03b3a076cac3d4f967402d5819a31eb364a74509e8c0be8963daa99e81a4e9cccc88ae4170c0579a98aa284e146662f315954733b1bd0cb53c2721088cc97ae9d4c7e5fa46631105922bc924d9c7e19e92e43c1db58ba88967c4b972dfd9b7488c5d7c57dd79a60438359eb2e50ae25918aae8025efd6aa7c2c7be1053db7ce8e8826cf65b386f3ebe761e69e9edac553b4a54fb48b81e85d0891253ff068eb89a02c94bac77a97e", 0xcb}, {&(0x7f00000004c0)="2047065e6b56fde941d35e9b55334bba7ced430a1203655ddc517379edcd62fc6668e9662768a9a93fbe4ae52cec315bf4c927dd8b912a4766670a1856c544abd386e23ac3af443c998c49abb5dd75785fbd7965d385d82c2fa16246902bc1f5e8c55f0cb926823e00f2153849404bb0864615fc24a7435258eb05c2aaa1efc45f2db50e1a798db8f7ed231c06f595a23cf1645174265ac73c35defab39ec41c6fd703307c9a4bc209f07bf1d1a8b3f477e5722843fb470fd53d559b9d5f038da76eaf2be0c75541e9aacdd7ff226a51da8311f94c070dc3e9f9235e3d4fcba05f44df26e7c3605a1102911db77e", 0xee}, {&(0x7f00000005c0)="fdbbc97e7509ff60bb91600e82b8cd27098cf0bbf740c057cc300fd15c0b28dc183f325843bab51c9cb7e21a53d2d98d17f3e117898c56181832cd5dfe61fadcb17b1d322383d69ce9c51d60a160dcc9e4014252b520fbb9e9fc1abfbdfea24cd16caf96c8578deb431df818d3526b770b3b071ccd9609857fdb97e2d5eba3a30a9b7b1b96675b128dea95f11e9754a335ec66d630a6b699", 0x98}, {&(0x7f0000000680)="abf7376e8f47b1184a757238ec270b2a5a55aa0004a835a754355143b4eb95f6d0c9e2f52a209b22332f3ac18dcdc4755812d50c0e1b03258ceb4050f895fbdfff7809a20e4b587bf8697597b2aa016870aa4ab96640e6050ee24e4175a706d89b6571d42d29bec8faaea95aa0741497afe348387a5fde5a5b63b226b5eb641ac7d23c2bad01c1d57d1974989dd173344807fabd0ee7fa994a032bbc131a075ea5e111e32c6994dbca9af583b15087718cd31ccbe3c95dd059", 0xb9}, {&(0x7f0000000740)="1e55074aedeab4b4dbd072b9dd557f6ca730927a3761ab1fea522fd70693b1986049de722c638dce58ba154e0b812a735af8f9c86445d1520b8c70c3e4c43fa7195d73178123798c1eca1278f801780d1ea361507ff0a30af5718275c78fb20bc535d3c007d0ce09be7e0e092c2c6180e51632252191bfcabb892d5448b5", 0x7e}, {&(0x7f00000007c0)="a3060eb5a3c25b53231728cdcf3e983cfd58a681ef3c69cfc35972f485216d84d6c6085e054c87aacb925a2b68aa8b7653a1b9776081e0ab31593a634671b34a1c66e63f63d7bf1eec872155a37287640b87027acb60e3995d2da29cd35b5d426ba87357b358d5411fe047a058c614b5377945ae718271270b907b9f2af50786436e3fefa074b4", 0x87}], 0x8, &(0x7f0000000c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x128, 0x400c010}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000dc0)="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", 0xbf0}], 0x1, &(0x7f0000001e40)=[@cred={{0x1c}}], 0x20, 0x20000000}}, {{&(0x7f0000001e80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000001f00)="bac6a48f3da72c0bbb54fe7c1ceee8916d79616dbcb1eddb9cff93e88239cd3df3845a190a8e5f946893493e6ace", 0x2e}, {&(0x7f0000001f40)}, {&(0x7f0000002000)="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", 0x800}, {&(0x7f0000003000)}], 0x4, &(0x7f0000004500)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000107000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x20008000}}, {{&(0x7f0000004600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004b00)=[{&(0x7f0000004680)="c842f4822303c72bce5cf89f689cbf09c8a1a9cc77611a297463147f6683cbedb6358cde30", 0x25}, {&(0x7f00000046c0)="38480285d461a14f1ab6848ca23e04ab1d125813fb4a0ce6361e91", 0x1b}, {&(0x7f0000004780)="689c054cbb8e34b9c6bc7857d1ec26e5aa65bbf55e484e1d80a9f62dbc407c564df35605a12d6019705bd1c944988294713645b94724304a1e23deace07ff8b0e573cc8659161ffdf6f30a780605ab453c0d1089b47273d0cc05233f4cb139367792c8154a7b4b3e2bd50aa825b3d0a02e1d4b1b7939d3338d703de74911a3cbb4392e1ae66273eafc3d87e3755ec5ae", 0x90}, {&(0x7f0000004840)="44e2e46f5e7c9b2833a27de30f826bd2cce4ba918d7760f352b47cc2beb25681f36cd64883014ecf8b96818970ed4f3239f15e8bf3cf60d3c8d128ac07fa13607ce1330fe3bddd119bad9e5b5d166080ac897de5b86db9ca6a6bfed7522995a7058522d7e6a3e6e5842daef86fb06f8e3fc3da69d0865db3b2b1609b12513f692a1da02b14d16e37f47049907d70fb8ff970299bd9987101d20345f6bc610a532c26f1133d797df99f7d0ee8b74487757cf457c4c4efae31d4808825d917971c36571a35c1c2cf2431b8670c1aa97a3e3aaddf92a49dfc098391be", 0xdb}, {&(0x7f0000004940)="db62ebc5505759b96d373a327e0c9ea8cf133d9fe7829d63086791e8c8", 0x1d}, {&(0x7f0000004980)="4297ae370fb7e6bebb0869b6ec41f9e3f3ce878e73b80fe3a1646b2725a0e6d7ad392ec584232e4d802895fb80f423d8dbcbe408", 0x34}, {&(0x7f00000049c0)="4eef04041774b20cbf09887b3c7633ed951f7b8a4d5ecaea0ca53072d5f42f5af0a3142f2deb0bc7d870f439661b725a97833e8035cc9172f04a7037faef45af65cc3c78192745757dc970df96123e36884e2dce5ed26e1975406214e6324d9ccd875c3c749277d7dfd03815a4562568564ff127b5626985e213dd133c2e24e3758961d856c31ca2042f1ff773cc3de6c662663f5005188e761de3d8c48bd3fc7e3a27f51dde4cb77f646f9c82fbfd134d9329c5c30d15006573e00418256ac7b48b377cd2b5127ed5ed895a", 0xcc}, {&(0x7f0000004ac0)="a0c042b54711e079619101c8f1c4560caddac9330e6e61317d06f47c83fa0143841507e0b11c605c1879a0c284aa10c24f04", 0x32}], 0x8, 0x0, 0x0, 0x20000000}}], 0x4, 0x20000000) 15:14:27 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:27 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000140)={0x0}) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 15:14:27 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:27 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:27 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2277.356458][T20888] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 2277.716626][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2277.725693][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.740413][T20888] usb 2-1: config 0 descriptor?? [ 2277.777230][T20888] cp210x 2-1:0.0: cp210x converter detected [ 2278.216737][T20888] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 2278.656608][T20888] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2278.664203][T20888] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2278.671861][T20888] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2278.687184][T20888] usb 2-1: USB disconnect, device number 107 [ 2278.695949][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2278.703996][T20888] cp210x 2-1:0.0: device disconnected 15:14:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='vxfs\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000006c0)="66baf80cb8060ddf8fef66bafc0c66ed450f013d634c0f7c360f01770d66baf80cb8a8807289ef66bafc0c66ed66baf80cb8f5cb2d80ef66bafc0cb00dee3e0f07b805000000b970ced6240f01c143a5c443fd01e03066ba6100ed", 0x5b}], 0x1, 0x0, &(0x7f0000000240)=[@cr4={0x1, 0x5023b}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000440)="66b8d7000f00d80f0fae3616e8a1ae66baf80cb8b8ed4086ef66bafc0ced0f01775066b8c3008ed00f18e2c4c1d310dec4c22d165397c4e29598c966baf80cb8d043f38eef66bafc0ce893", 0x4b}], 0x1, 0x37, 0x0, 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:14:29 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x0, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:29 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:29 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:29 executing program 3: pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x5760, 0x0) 15:14:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f00000004c0)={"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"}) 15:14:29 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x7e7}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x23, &(0x7f0000000080)={0x5, 0xf, 0x23, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ss_cap={0xa}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0xe, &(0x7f00000001c0)=@string={0xe, 0x3, "301546e82f51f2cd80dbb1e5"}}]}) 15:14:29 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:29 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:30 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2279.466444][T16154] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2279.826563][T16154] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2279.836089][T16154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2279.849949][T16154] usb 2-1: config 0 descriptor?? [ 2279.889626][T16154] cp210x 2-1:0.0: cp210x converter detected [ 2280.326603][T16154] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2280.586557][T16154] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2280.594351][T16154] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2280.602273][T16154] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2280.615194][T16154] usb 2-1: USB disconnect, device number 108 [ 2280.623856][T16154] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2280.632458][T16154] cp210x 2-1:0.0: device disconnected 15:14:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:31 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:31 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:31 executing program 3: io_setup(0x9, &(0x7f0000000000)=0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) io_submit(r0, 0x1, &(0x7f00000018c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 15:14:31 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:31 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000007340)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}}], 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:14:31 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:31 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:31 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x2, @broadcast, 'bond_slave_0\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x6b03, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) 15:14:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) [ 2281.396595][T20888] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2281.756545][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2281.766014][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2281.776018][T20888] usb 2-1: config 0 descriptor?? [ 2281.817267][T20888] cp210x 2-1:0.0: cp210x converter detected [ 2282.256582][T20888] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2282.516632][T20888] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2282.524227][T20888] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2282.532741][T20888] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2282.544896][T20888] usb 2-1: USB disconnect, device number 109 [ 2282.553758][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2282.562020][T20888] cp210x 2-1:0.0: device disconnected [ 2282.887739][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 2282.894054][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 15:14:33 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:33 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:33 executing program 3: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x0) 15:14:33 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:33 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:33 executing program 3: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SLAVE(r0, 0x720, 0x20000006) 15:14:33 executing program 3: ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x3, 0x0, [{}, {0x0, 0x0, 0x8f1}, {}]}) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f00000000c0)={0x9, 0x7, 0x1}) syz_clone(0x40808680, 0x0, 0x0, 0x0, 0x0, 0x0) 15:14:33 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:33 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) 15:14:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) [ 2283.306570][T20888] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2283.666520][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2283.675609][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2283.684957][T20888] usb 2-1: config 0 descriptor?? [ 2283.736564][T20888] cp210x 2-1:0.0: cp210x converter detected [ 2284.156528][T20888] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2284.416618][T20888] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2284.424978][T20888] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2284.433244][T20888] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2284.446287][T20888] usb 2-1: USB disconnect, device number 110 [ 2284.453751][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2284.461804][T20888] cp210x 2-1:0.0: device disconnected 15:14:35 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:35 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:35 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) 15:14:35 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:35 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:35 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) 15:14:35 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:35 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) 15:14:35 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) [ 2285.266476][T20888] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2285.626610][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2285.635702][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2285.644837][T20888] usb 2-1: config 0 descriptor?? [ 2285.689130][T20888] cp210x 2-1:0.0: cp210x converter detected [ 2286.126601][T20888] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2286.169328][T20888] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 2286.176887][T20888] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 2286.184373][T20888] usb 2-1: cp210x converter now attached to ttyUSB0 15:14:38 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:38 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:38 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x0, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:38 executing program 3: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) 15:14:38 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0, 0x1}) 15:14:38 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2287.957120][T21516] usb 2-1: USB disconnect, device number 111 [ 2287.997111][T21516] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:14:38 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:38 executing program 3: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) [ 2288.009018][T21516] cp210x 2-1:0.0: device disconnected 15:14:38 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:38 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x0, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:38 executing program 3: sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) 15:14:38 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x0, 0xfff, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2288.426493][T21516] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 2288.786635][T21516] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2288.795946][T21516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2288.805548][T21516] usb 2-1: config 0 descriptor?? [ 2288.847303][T21516] cp210x 2-1:0.0: cp210x converter detected [ 2289.286722][T21516] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2289.327054][T21516] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 2289.334690][T21516] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 2289.342721][T21516] usb 2-1: cp210x converter now attached to ttyUSB0 15:14:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:41 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) 15:14:41 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) 15:14:41 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0x0, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:41 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:41 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) 15:14:41 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2290.997000][T21516] usb 2-1: USB disconnect, device number 112 [ 2291.030492][T21516] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:14:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:41 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:41 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0x0, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) [ 2291.066555][T21516] cp210x 2-1:0.0: device disconnected 15:14:41 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) [ 2291.446486][T21516] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 2291.806665][T21516] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2291.815969][T21516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.825971][T21516] usb 2-1: config 0 descriptor?? [ 2291.867581][T21516] cp210x 2-1:0.0: cp210x converter detected [ 2292.306556][T21516] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2292.347170][T21516] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 2292.354835][T21516] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 2292.362835][T21516] usb 2-1: cp210x converter now attached to ttyUSB0 15:14:44 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:44 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) 15:14:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 15:14:44 executing program 2: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:44 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0x0, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:44 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 15:14:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 2294.054006][T20888] usb 2-1: USB disconnect, device number 113 [ 2294.062036][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2294.088930][T20888] cp210x 2-1:0.0: device disconnected 15:14:44 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:44 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440), 0x0, 0x0) [ 2294.546660][T20888] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2294.906643][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2294.915724][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2294.925932][T20888] usb 2-1: config 0 descriptor?? [ 2294.967508][T20888] cp210x 2-1:0.0: cp210x converter detected [ 2295.396531][T20888] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2295.436528][T20888] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 2295.444032][T20888] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 2295.451596][T20888] usb 2-1: cp210x converter now attached to ttyUSB0 15:14:47 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:47 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:47 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, 0x0) 15:14:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440), 0x0, 0x0) 15:14:47 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440), 0x0, 0x0) 15:14:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) [ 2297.187563][T29416] usb 2-1: USB disconnect, device number 114 [ 2297.213837][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2297.242547][T29416] cp210x 2-1:0.0: device disconnected 15:14:47 executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff}) close_range(r0, 0xffffffffffffffff, 0x0) 15:14:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:14:48 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x9eb0, 0x1}) 15:14:48 executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2297.636464][T29416] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2297.996546][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2298.005627][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2298.021380][T29416] usb 2-1: config 0 descriptor?? [ 2298.067420][T29416] cp210x 2-1:0.0: cp210x converter detected [ 2298.506506][T29416] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2298.546648][T29416] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 2298.554743][T29416] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 2298.562248][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 15:14:50 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 15:14:50 executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:14:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:50 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x9eb0, 0x1}) 15:14:50 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 2300.260610][T29416] usb 2-1: USB disconnect, device number 115 [ 2300.268782][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:14:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x0, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) 15:14:51 executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3b, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x4, 0x1, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x401, 0x6, 0x2c0}) r2 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x80, 0x3f, 0x82}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x4, 0xfff, 0x9}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2300.340826][T29416] cp210x 2-1:0.0: device disconnected 15:14:51 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x0, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) 15:14:51 executing program 0: r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001a82200000904000002ca743600090503032000ff00ef0805840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/12, 0xc) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) [ 2300.729178][T29416] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2300.756528][T16154] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 2301.098386][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2301.107553][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.117032][T29416] usb 2-1: config 0 descriptor?? [ 2301.119626][T16154] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2301.129620][T16154] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 2301.140603][T16154] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2301.157362][T29416] cp210x 2-1:0.0: cp210x converter detected [ 2301.386550][T16154] usb 1-1: string descriptor 0 read error: -22 [ 2301.392932][T16154] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 2301.402341][T16154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.450176][T16154] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2301.586570][T29416] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2301.628514][T29416] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 2301.636019][T29416] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 2301.643493][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2301.759422][T29416] usb 1-1: USB disconnect, device number 99 15:14:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x0, 0x0, @mcast2, 0x42}, 0x1c, 0x0}}], 0x1, 0x0) 15:14:54 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0x9eb0, 0x1}) 15:14:54 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:54 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:54 executing program 0: r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001a82200000904000002ca743600090503032000ff00ef0805840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/12, 0xc) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 15:14:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) [ 2303.299082][T29416] usb 2-1: USB disconnect, device number 116 [ 2303.338477][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:14:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 15:14:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2303.384531][T29416] cp210x 2-1:0.0: device disconnected 15:14:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006440)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 15:14:54 executing program 3: r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e00010203010902240001a82200000904000002ca743600090503032000ff00ef0805840250"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/12, 0xc) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 15:14:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:54 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x0, 0x1}) 15:14:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) [ 2303.586556][T21516] usb 1-1: new low-speed USB device number 100 using dummy_hcd 15:14:54 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x0, 0x1}) [ 2303.776525][T29416] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2303.946528][T21516] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2303.954308][T21516] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 2303.965474][T21516] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 2304.156623][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2304.165692][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2304.181901][T29416] usb 2-1: config 0 descriptor?? [ 2304.206623][T21516] usb 1-1: string descriptor 0 read error: -22 [ 2304.213195][T21516] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 2304.223012][T21516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2304.237897][T29416] cp210x 2-1:0.0: cp210x converter detected [ 2304.268822][T21516] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2304.591402][ T3697] usb 1-1: USB disconnect, device number 100 [ 2304.676578][T29416] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2304.716586][T29416] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 2304.724179][T29416] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2304.731742][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 15:14:57 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x0, 0x1}) 15:14:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x2, 0x0, 0x0, @adapter}]}) 15:14:57 executing program 3: syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000fee0508ac05dfad033d0102030109022400010000000009040f0102fffd010009050326000000000009058106"], 0x0) 15:14:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:14:57 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:14:57 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0046d00, &(0x7f0000000080)=0x2) 15:14:57 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) fcntl$setsig(r0, 0xa, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)=0x2) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x1208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000380)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) [ 2306.338785][T21516] usb 2-1: USB disconnect, device number 117 [ 2306.374776][T21516] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2306.387009][T21516] cp210x 2-1:0.0: device disconnected 15:14:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) 15:14:57 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0}) 15:14:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) 15:14:57 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0}) 15:14:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) 15:14:57 executing program 4: eventfd(0x0) r0 = eventfd(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r0}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r0, 0x9eb0}) 15:14:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) [ 2306.776719][T21516] usb 2-1: new high-speed USB device number 118 using dummy_hcd 15:14:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000000c0)='#$-.\x00', 0x0, 0xffffffffffffffff) unshare(0xa6040180) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x1c0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) read(r4, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) syz_open_dev$usbfs(0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000000c0)=[@dstype3], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000100)="0f38047526baf80c66b8fe0db08e66efbafc0cb817f2ef6565f30f09d8aa18aa660fe19908000f060f21210f238066660f388122660fc732", 0x38}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15:14:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2307.146546][T21516] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2307.156350][T21516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2307.165802][T21516] usb 2-1: config 0 descriptor?? [ 2307.207483][T21516] cp210x 2-1:0.0: cp210x converter detected [ 2307.646507][T21516] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2307.686732][T21516] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 2307.694463][T21516] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2307.703949][T21516] usb 2-1: cp210x converter now attached to ttyUSB0 15:15:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:15:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:00 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005440)=[{{0x0, 0xfffffffffffffcfb, 0x0}}], 0xfb93a852dd518c, 0x0) fcntl$setsig(r0, 0xa, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)=0x2) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x1208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003], 0x10000}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000380)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) 15:15:00 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000280), 0x8, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000002900)={0x10, 0x0, "88f9889a3fca7479e5bd32455ceca56e2eedd5bdac9a75ef"}) 15:15:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) 15:15:00 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8000000a, 0x0) wait4(0x0, 0x0, 0x8000000a, 0x0) 15:15:00 executing program 4: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x7000006, 0x11, r0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001d80)="bf", 0x1}], 0x2}, 0x0) [ 2309.376200][ T3697] usb 2-1: USB disconnect, device number 118 15:15:00 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @remote, 0x1}]}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000001", @ANYRES32=0x0], &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x7b, &(0x7f0000000340)={r1}, &(0x7f0000000380)=0xc) [ 2309.419000][ T3697] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2309.433893][ T3697] cp210x 2-1:0.0: device disconnected 15:15:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)) 15:15:00 executing program 3: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8000000a, 0x0) wait4(0x0, 0x0, 0x8000000a, 0x0) 15:15:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter}]}) 15:15:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter}]}) [ 2309.786451][ T3697] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2310.156626][ T3697] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2310.165726][ T3697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2310.175435][ T3697] usb 2-1: config 0 descriptor?? [ 2310.217729][ T3697] cp210x 2-1:0.0: cp210x converter detected [ 2310.656609][ T3697] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2310.696671][ T3697] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 2310.704266][ T3697] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2310.712442][ T3697] usb 2-1: cp210x converter now attached to ttyUSB0 15:15:03 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:15:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000340)={@void, @void, @ipv4=@tipc={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x88a8ffff, @private}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb}}}}}}}}, 0x40) 15:15:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter}]}) 15:15:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x487}]}) 15:15:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) [ 2312.419511][ T3697] usb 2-1: USB disconnect, device number 119 [ 2312.452228][ T3697] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:15:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) [ 2312.472416][T32490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2312.484932][T32490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2312.492696][ T3697] cp210x 2-1:0.0: device disconnected [ 2312.493397][T32490] device bond0 left promiscuous mode [ 2312.505518][T32490] device bond_slave_0 left promiscuous mode [ 2312.512423][T32490] device bond_slave_1 left promiscuous mode 15:15:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:03 executing program 3: r0 = socket(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x0, @empty}, 0x1c) 15:15:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000680), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x93, &(0x7f00000002c0)=""/147}) 15:15:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) [ 2312.520617][T32490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2312.533332][T32490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 15:15:03 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2, 0x0, &(0x7f00000004c0)) [ 2312.876521][ T3697] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2313.236582][ T3697] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2313.245655][ T3697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.257628][ T3697] usb 2-1: config 0 descriptor?? [ 2313.298634][ T3697] cp210x 2-1:0.0: cp210x converter detected [ 2313.736638][ T3697] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2313.776584][ T3697] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 2313.784174][ T3697] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2313.791779][ T3697] usb 2-1: cp210x converter now attached to ttyUSB0 15:15:06 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:15:06 executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000002000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004340)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000066c0)={0x90, 0x0, 0x0, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x183}}}, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000002100)='./file0/file0\x00', 0xc03, 0x0) 15:15:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000680)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 15:15:06 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x0, 0x0, 0x0, @adapter}]}) 15:15:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:06 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) [ 2315.470103][T29416] usb 2-1: USB disconnect, device number 120 [ 2315.481536][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2315.505716][T32529] input: syz1 as /devices/virtual/input/input642 15:15:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x40c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d800000000000000024e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dcffff000065a0e3ccae669e173a649c1cfd6587d452d66b7cc957d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff050011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a13ed38ae89d24e1cebfba2f87925bfacba83109753f541cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b70a70000000000000000000000d7900a820b63278f4e9a217b98000000002a92895614cd50cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d62ad0a97aec773713a66b223fa8b148871c8d31d24291c25449f106a99893ed20fa7a050fbbef90327e827e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed200ada12f7a1525320e71666f472a97214d0b2874df30ed5eb1affb87ba55b2d72078e9f40e4ffffffffffffff00000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r4 = gettid() socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002500)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000002380)}, {&(0x7f00000023c0)="8aae4f44f5f884798d32b1a0f2", 0xd}, {&(0x7f0000002400)="b4424dff21184a86a1d5339f", 0xc}, {0x0}], 0x7, &(0x7f00000025c0), 0x0, 0x4040810}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x50, 0x8000}}, {{&(0x7f00000029c0)=@abs={0x0, 0x0, 0x6}, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002b80)="1997c3cb6ae7cc2703b503576ac8e31b60a994e7cf5aced28f9c404758b7bbf25bd0ec8aeef6851a7ba8ebe633b5ac2d18c7f2114a1f86dc29d283d130bca66b8f99d9741bc53e80d89463", 0x4b}, {&(0x7f0000002c40)="a3fe1f3d4a8dd1017f63d6b0fa", 0xd}], 0x2, 0x0, 0x0, 0x20000040}}, {{0x0, 0x0, &(0x7f00000041c0)=[{0x0}, {&(0x7f0000002d40)}, {&(0x7f0000002e80)="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", 0x7fb}, {0x0}, {&(0x7f0000004040)="dad86bc823020b517dfc301d191fd4529dc123e75d0886b79bd4c6ca7995a5996ff13e8e288e16612835887d996add07ec8e438c742ed5b841a9e7a60a460c020cabe2fc7d5749a605d8379eb6c27af724f49ff92bac7007e08c7a6422cbb1618ca370492ee4a9edc31248a2cd6aa603c0c171f02630e8bdc2d8da1771e714333dd100332e379d019a4df7add55253879c692a55c00fd3de872a0d396da1e18be271dad26301f758ddd05b0504c25f582bb01e9f556dc8d9dc46847ab021cbea7fe594b855dfbe11f33ed986318ef3affadcf7a42975ab2193680d328b", 0xdd}, {&(0x7f0000004140)="ffe0a25c9a73e7e9aed773c38c3b200dd003fb347623338ef68fc74865930c88490e4cdfe5405211e79f7afc1c14fe3bf54592aeaa1e0e83ca65601c5804f7dbc8d2e72b0229b13c52c62e95d9f0866bec5566a3825a5a97a3b92eb053fbb6a9dd774e6d9f6a415430cb9270fe56f9b81e17f5b9586a55c3590c17f36a8c", 0x7e}], 0x6, &(0x7f0000004500)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee01}}}], 0xe0}}], 0x5, 0x40044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000024c0)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000000100)={0x2020}, 0x2020) sendfile(r3, 0xffffffffffffffff, 0x0, 0x11f06) 15:15:06 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xdc, 0xbb, 0xb0, 0x40, 0x11ca, 0x201, 0xf8b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xc5, 0x7a, 0x21, 0x0, [@uac_control], [{}]}}]}}]}}, 0x0) [ 2315.520990][T32527] fuse: Bad value for 'fd' [ 2315.526054][T29416] cp210x 2-1:0.0: device disconnected 15:15:06 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:06 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x0, 0x0, 0x0, @adapter}]}) [ 2315.906705][ T3697] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2315.996575][T29416] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2316.286487][ T3697] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2316.297029][ T3697] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2316.396787][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2316.406192][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2316.417119][T29416] usb 2-1: config 0 descriptor?? [ 2316.459168][T29416] cp210x 2-1:0.0: cp210x converter detected [ 2316.466827][ T3697] usb 1-1: New USB device found, idVendor=11ca, idProduct=0201, bcdDevice=f8.b2 [ 2316.475904][ T3697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.484451][ T3697] usb 1-1: Product: syz [ 2316.488951][ T3697] usb 1-1: Manufacturer: syz [ 2316.493569][ T3697] usb 1-1: SerialNumber: syz [ 2316.499743][ T3697] usb 1-1: config 0 descriptor?? [ 2316.539079][ T3697] cdc_acm 1-1:0.0: skipping garbage [ 2316.741909][ T3697] usb 1-1: USB disconnect, device number 101 [ 2316.886566][T29416] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2316.928422][T29416] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 2316.936009][T29416] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2316.943996][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 15:15:09 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:15:09 executing program 0: syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "a74e3b73a4ba"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 15:15:09 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x500, 0x0, 0x0, 0x0, @adapter}]}) 15:15:09 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r0, &(0x7f0000002240)=[{&(0x7f0000004400)=""/117, 0x75}], 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15:15:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "947a00", "b11d00000000000000004000", "3faf4d7f", "a7ca6b00df4649a8"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="9e", 0x1}], 0x1) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={0x77359400}, 0x10) write$binfmt_script(r0, 0x0, 0x0) [ 2318.541797][T29146] usb 2-1: USB disconnect, device number 121 [ 2318.574951][T29146] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:15:09 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 15:15:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 2318.615309][T29146] cp210x 2-1:0.0: device disconnected 15:15:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 15:15:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x68}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005073a859bcd7000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024000b0f00"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff33bc00000c000100696e6772657373"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000002c0071be8288bb6f1de7000080000000", @ANYRES32=r2, @ANYBLOB="00040000000000000e000f000a000100726f757465000000140002000800020000000000080003"], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 2318.721695][T32583] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2318.836440][T21516] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2318.996429][T29146] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2319.196612][T21516] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2319.205814][T21516] usb 1-1: config 1 has no interface number 1 [ 2319.212345][T21516] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2319.223251][T21516] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2319.236626][T21516] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2319.248348][T21516] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2319.356483][T29146] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2319.365911][T29146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2319.379851][T29146] usb 2-1: config 0 descriptor?? [ 2319.416650][T21516] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2319.426629][T29146] cp210x 2-1:0.0: cp210x converter detected [ 2319.433451][T21516] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.441966][T21516] usb 1-1: Product: syz [ 2319.446498][T21516] usb 1-1: Manufacturer: syz [ 2319.451244][T21516] usb 1-1: SerialNumber: syz [ 2319.807883][T21516] usb 1-1: USB disconnect, device number 102 [ 2319.846563][T29146] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2319.887712][T29146] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 2319.895458][T29146] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2319.904591][T29146] usb 2-1: cp210x converter now attached to ttyUSB0 15:15:12 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:15:12 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18}, 0xffffff54) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0xc004500a, &(0x7f0000000100)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045009, &(0x7f00000002c0)) 15:15:12 executing program 5: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="90170ee7ff00002200000e2108060001080006045f831d3d90a495f40f"], 0x120) 15:15:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 15:15:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:12 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r0, 0xc0045003, &(0x7f0000001080)) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x10000) [ 2321.584164][T21516] usb 2-1: USB disconnect, device number 122 [ 2321.592542][T21516] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:15:12 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000003c0)=0x871, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20024ffc, &(0x7f0000000200)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000400)="5b7a4bbd44febeb5fa46afbaa5c5ab96ed7ea0f7f65eceaccc358f9ee894709247d41ff258f4fdb0ee60934c8ab2b06fd2be187060b08f800e48f31da9185144f82a3f7391b415c1cd3f7b76bfc9ab53bc9e74beb382017c972dc03402e757d964a4ae988793fe0dab06d2adb460dcf25c82184aef5e578d0af401f3a7885e8e5ebb59507a880d210c5ecb06979a14cfb8daf6ade2097820991fc1fc9ac585a8e5245b454177b7b804b1076d8c09bb9dc0f197988323e961469f4f55cdf20000000000aec8be03be", 0xc8, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x6d) recvmsg(r0, &(0x7f0000001500)={0x0, 0x1300, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x2af8}], 0x1, 0x0, 0xb2c86da597010000, 0x2700}, 0x100) 15:15:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 15:15:12 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) unshare(0x0) r0 = socket(0x11, 0x800000003, 0x0) unshare(0x48020000) bind(r0, &(0x7f00000004c0)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x4008080) socket(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40080) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000840)={&(0x7f00000003c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000880)=ANY=[@ANYRES16=0x0], 0x58}, 0x1, 0x0, 0x0, 0x24008800}, 0x20044004) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x8, 0x6, @random="3b73740635d6"}, 0x14) sendmmsg(r1, &(0x7f0000000d00), 0x1bdd307, 0x0) socket(0x26, 0x2, 0x0) 15:15:12 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001480)={0x53, 0x0, 0x9, 0x4, @buffer={0x0, 0xb7, &(0x7f00000012c0)=""/183}, &(0x7f0000001380)="55bceac165c3a39b46", &(0x7f00000011c0)=""/62, 0x0, 0x0, 0x0, 0x0}) [ 2321.633271][T21516] cp210x 2-1:0.0: device disconnected 15:15:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 15:15:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000022c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r0, &(0x7f000000ab80)={&(0x7f000000a640), 0x80, 0x0, 0x0, &(0x7f000000a700)=[{0x18, 0x0, 0x0, '\r'}, {0x10}], 0x28}, 0x0) [ 2322.046522][T21516] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2322.406698][T21516] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2322.416072][T21516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2322.427940][T21516] usb 2-1: config 0 descriptor?? [ 2322.467518][T21516] cp210x 2-1:0.0: cp210x converter detected [ 2322.906539][T21516] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2322.946554][T21516] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 2322.954284][T21516] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2322.962461][T21516] usb 2-1: cp210x converter now attached to ttyUSB0 15:15:15 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:15:15 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) unshare(0x0) 15:15:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 15:15:15 executing program 5: r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x3}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) 15:15:15 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004ac0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)='Z', 0x1}], 0x1, &(0x7f00000003c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x200}}], 0x30}], 0x1, 0x0) 15:15:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) [ 2324.631486][ T3697] usb 2-1: USB disconnect, device number 123 15:15:15 executing program 3: r0 = syz_usb_connect$cdc_ecm(0x0, 0x62, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x20, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}, @dmm={0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x9}}]}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@generic={0x7, 0x10, 0x2, "5b4435b5"}]}, 0x2, [{0x2, &(0x7f0000000140)=@string={0x2}}, {0xe6, &(0x7f0000000280)=@string={0xe6, 0x3, "5348f90cb3a496653a06063b486fcfa12e61320974483fc2b45f96c8ccc9af978ccc979dbc304c827ef781fce2cbee72eae458e66d89ba8ea573f39f179b91eaec27454e1795c6b57c3f8e44f5b39b5111027f42ceaee6bc15dfc1a781a406246632ec9f0183be430e1466847fcb4606fec509b46a7f1ad77828879b116c2eb7d88331e89362fb631f45a5587237817ce729a7685ce2f1bcd2410d1aa373d181db93345e6d5fc12fc6a8e49b49710e059d112db372c37d7f001f172a830cd5fdac9ea1fec8c5bc79e8b4a879269534ea5d5dcdac679c9e11cc88a46e78f9bafd52d867fd"}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 15:15:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) 15:15:15 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044160, 0x0) 15:15:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) [ 2324.674926][ T3697] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2324.710850][ T3697] cp210x 2-1:0.0: device disconnected 15:15:15 executing program 5: pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000000, 0xffffffffffffffff) [ 2325.086628][ T3697] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2325.456567][ T3697] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2325.465642][ T3697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2325.476930][ T3697] usb 2-1: config 0 descriptor?? [ 2325.517532][ T3697] cp210x 2-1:0.0: cp210x converter detected [ 2325.956523][ T3697] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2325.997977][ T3697] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 2326.005576][ T3697] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2326.014094][ T3697] usb 2-1: cp210x converter now attached to ttyUSB0 15:15:18 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:15:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x0, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:18 executing program 5: syz_io_uring_setup(0x51c6, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x0, 0x0) 15:15:18 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c24, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@generic={0x3}]}}) 15:15:18 executing program 0: r0 = landlock_create_ruleset(&(0x7f00000004c0)={0x2000}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000500)={0x1020}, 0x0) 15:15:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2327.674055][ T3697] usb 2-1: USB disconnect, device number 124 15:15:18 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000def1260a00"/32, 0x20) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000002500)=ANY=[], 0xffffffef) recvmmsg(r1, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000100)=""/14, 0xe}], 0x1}}], 0x1, 0x0, 0x0) 15:15:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x0, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:18 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)) [ 2327.718744][ T3697] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2327.731064][ T3697] cp210x 2-1:0.0: device disconnected 15:15:18 executing program 5: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)) 15:15:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x0, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a300000000090000000030a01030000000000000000050000000900010073797a30000000004c0004800800024046a41085080002400dbe733e0800024073b034da1400030067726574617030000000000000000000140003006272696467653000000000000000000008000140000000000900010073797a3000000000090003"], 0xec}}, 0x0) [ 2327.821217][T32662] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2328.106490][ T3697] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2328.476559][ T3697] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2328.485718][ T3697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2328.500856][ T3697] usb 2-1: config 0 descriptor?? [ 2328.549110][ T3697] cp210x 2-1:0.0: cp210x converter detected [ 2328.986594][ T3697] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2329.026627][ T3697] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 2329.034222][ T3697] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2329.043586][ T3697] usb 2-1: cp210x converter now attached to ttyUSB0 15:15:21 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:15:21 executing program 0: r0 = socket(0x2, 0x3, 0x100000001) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto(r0, &(0x7f0000000040)="04d7", 0x2, 0x8002, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[], 0x20}}, 0x0) 15:15:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:21 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0xffffffffffffff8e}, 0x15) 15:15:21 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x10}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 15:15:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:21 executing program 5: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x2080, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000080)=r1) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup=r0, r2, 0x11, 0x5}, 0x14) waitid$P_PIDFD(0x3, r0, &(0x7f0000000140), 0x4, &(0x7f00000001c0)) r3 = syz_io_uring_complete(0x0) io_uring_setup(0x83c, &(0x7f0000000380)={0x0, 0x21f3, 0x10, 0x0, 0x7d}) pipe2$watch_queue(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) process_madvise(r4, &(0x7f0000002700)=[{&(0x7f0000000440)="f1abef52316e723ae2b3f04858d4e4a71226269ff6d8ad2f5a455af8d0ad67777feca3bf719bec716a58f0a2e2159d73b7768fc35ea48b7569a34f2c80ac0e9d15964a488face4e9aa99f3282a7470434fd2002ed142308c8aacad605c7f1bb061faf9527dc56e28867dfc1e4a3785e0eddc25c6825dee89e5c13c3073150190f9b0003bf36671fffc281bfa68dca62d90726596b25ed2e9b42d82d2a4cd1cd77ab44d6caee523155af2b6aab3c7748fc8ec2b8c5cf4", 0xb6}, {&(0x7f0000000500)="83d5d07b2b8faaac2cf0dd3e705764bb35c621f759be202561f9477d84cfa4984b3db930097103f78a9e122a999315bd1447b54c77e10d", 0x37}, {&(0x7f0000000540)}, {0x0}], 0x4, 0x16, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002840)={'ip6_vti0\x00', &(0x7f00000027c0)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x45, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x0, 0x7, 0x8562}}) sendmsg$nl_route(r5, &(0x7f0000002940)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)=@ipv4_getnexthop={0x54, 0x6a, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r6}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x801) process_mrelease(r4, 0x0) sendmsg$nl_route(r3, &(0x7f0000002a80)={&(0x7f0000002980), 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)=@ipv6_getaddr={0x58, 0x16, 0x0, 0x70bd2c, 0x0, {0xa, 0x81, 0x8, 0x0, r6}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_FLAGS={0x8, 0x8, 0xb0}, @IFA_CACHEINFO={0x14, 0x6, {0x701, 0xfffffe01, 0x7, 0x2}}, @IFA_TARGET_NETNSID={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x40, 0x2, 0x8}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0xc840) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002ac0)={'vxcan0\x00'}) syz_clone(0xc0000000, &(0x7f0000002b40)="a2a1a4182fa3a9d16f386e9a96212166280210d4eff99077876fa8068a35aa674248ae", 0x23, 0x0, &(0x7f0000002bc0), &(0x7f0000002c00)="c590b89e9edd23a40bbc988b011afceb02e4b752868f2a522ce38a94a0038d4fa9be2619b35c0124d43a") 15:15:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) [ 2330.751636][T29416] usb 2-1: USB disconnect, device number 125 [ 2330.760824][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 15:15:21 executing program 3: r0 = socket(0x1d, 0x802, 0x6) recvmsg$can_bcm(r0, &(0x7f0000002100)={0x0, 0x0, 0x0}, 0x100) 15:15:21 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585611, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3bca32ea"}}) 15:15:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) [ 2330.835576][T29416] cp210x 2-1:0.0: device disconnected [ 2331.216516][T29416] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2331.586485][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2331.595556][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2331.609060][T29416] usb 2-1: config 0 descriptor?? [ 2331.647369][T29416] cp210x 2-1:0.0: cp210x converter detected [ 2332.086610][T29416] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2332.356605][T29416] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2332.364200][T29416] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2332.371980][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2332.381946][T29416] usb 2-1: USB disconnect, device number 126 [ 2332.389700][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2332.397893][T29416] cp210x 2-1:0.0: device disconnected 15:15:23 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:15:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4048aec9, &(0x7f0000000040)) 15:15:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x1, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f00000000c0)="1c00000016009b8a14e5f407000904240a000003ff00000000000000", 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 15:15:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0x128}}, 0x0) 15:15:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}]}}}]}, 0x3c}}, 0x0) 15:15:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0x128}}, 0x0) 15:15:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x7, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:15:23 executing program 5: sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x14}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x8) 15:15:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}}, 0x128}}, 0x0) 15:15:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1508000000000000000001000000140002007767320000000000000000000000000024000300000029"], 0x4c}}, 0x0) [ 2332.864309][T32696] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 2332.891715][T32699] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:15:23 executing program 3: syz_clone(0x80409400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2333.166498][T20888] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2333.526603][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2333.535677][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2333.545157][T20888] usb 2-1: config 0 descriptor?? [ 2333.589354][T20888] cp210x 2-1:0.0: cp210x converter detected [ 2334.016566][T20888] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2334.276553][T20888] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2334.284147][T20888] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2334.292923][T20888] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2334.305418][T20888] usb 2-1: USB disconnect, device number 127 [ 2334.313569][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2334.321918][T20888] cp210x 2-1:0.0: device disconnected 15:15:25 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xf, "e3573d2054873e62ba4b03d82027a9"}, 0x0, 0x0, 0x0, 0x0}) 15:15:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1508000000000000000001000000140002007767320000000000000000000000000024000300000029"], 0x4c}}, 0x0) 15:15:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}]}]}, 0x16c}}, 0x0) 15:15:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x82) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x802c550a, &(0x7f0000000500)={0x0, 0x0, "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"}) 15:15:25 executing program 3: syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) 15:15:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:25 executing program 0: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x80}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1013]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000200)="66ba4300b001eeb0c25107c75d0dc80dc8d129280000efea0e0020000a00b8050000000f23d80f21f8b835c00000a0a023f8653e65f30f21c60f01c2b8060000000f21f83520008700f30f09c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x3]}, 0x8, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:15:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x82) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x802c550a, &(0x7f0000000500)={0x0, 0x0, "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"}) 15:15:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}]}]}, 0x16c}}, 0x0) 15:15:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1, 0x0, 0x4}]}]}, 0x16c}}, 0x0) 15:15:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) [ 2335.066445][T20888] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2335.426566][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2335.435662][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2335.444751][T20888] usb 2-1: config 0 descriptor?? [ 2335.487337][T20888] cp210x 2-1:0.0: cp210x converter detected [ 2335.926813][T20888] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2336.186692][T20888] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2336.194306][T20888] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2336.203212][T20888] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2336.212176][T20888] usb 2-1: USB disconnect, device number 2 [ 2336.219547][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2336.228590][T20888] cp210x 2-1:0.0: device disconnected 15:15:27 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 15:15:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x16c}}, 0x0) 15:15:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:27 executing program 0: shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 15:15:27 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b67c8140501da1603dc3000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001500)={0x84, &(0x7f00000010c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000012c0)={0x84, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 15:15:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:27 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x16c}}, 0x0) 15:15:27 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:27 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x16c}}, 0x0) [ 2336.986445][T21516] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2337.346537][T21516] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2337.355832][T21516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2337.366684][T21516] usb 2-1: config 0 descriptor?? [ 2337.408650][T21516] cp210x 2-1:0.0: cp210x converter detected [ 2337.846510][T21516] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2338.106540][T21516] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2338.114236][T21516] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2338.123087][T21516] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2338.132004][T21516] usb 2-1: USB disconnect, device number 3 [ 2338.141622][T21516] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2338.149973][T21516] cp210x 2-1:0.0: device disconnected 15:15:29 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 15:15:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:29 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:29 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:29 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:29 executing program 0: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast}, 0x2, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) [ 2338.906477][T21516] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2339.267103][T21516] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2339.278132][T21516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2339.288718][T21516] usb 2-1: config 0 descriptor?? [ 2339.327962][T21516] cp210x 2-1:0.0: cp210x converter detected [ 2339.766545][T21516] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2340.026579][T21516] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2340.034305][T21516] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2340.043493][T21516] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2340.052652][T21516] usb 2-1: USB disconnect, device number 4 [ 2340.063285][T21516] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2340.071665][T21516] cp210x 2-1:0.0: device disconnected 15:15:31 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:31 executing program 0: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:31 executing program 5: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 15:15:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:31 executing program 0: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:31 executing program 5: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:31 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x4}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:31 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:31 executing program 5: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:31 executing program 0: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@multicast2, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x0, 0x2b}, 0x2, @in6=@mcast1}, {{@in6=@mcast1}, 0x0, @in=@local}]}]}, 0x1ac}}, 0x0) 15:15:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) [ 2340.826450][T21516] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2341.186548][T21516] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2341.195884][T21516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2341.207027][T21516] usb 2-1: config 0 descriptor?? [ 2341.248994][T21516] cp210x 2-1:0.0: cp210x converter detected [ 2341.687082][T21516] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2341.946518][T21516] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2341.954275][T21516] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2341.962325][T21516] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2341.973127][T21516] usb 2-1: USB disconnect, device number 5 [ 2341.982618][T21516] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2341.990910][T21516] cp210x 2-1:0.0: device disconnected 15:15:33 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:15:33 executing program 0: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:33 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096fa0026e53f77200000002a6a01070900be0083"], 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) 15:15:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:33 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:33 executing program 0: r0 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:33 executing program 0: syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:33 executing program 0: syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:33 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) [ 2342.726470][T21516] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2342.746433][T29416] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2342.966431][T21516] usb 5-1: Using ep0 maxpacket: 16 [ 2343.086933][T21516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2343.098486][T21516] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2343.108587][T21516] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2343.116490][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2343.121779][T21516] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2343.133187][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2343.140045][T21516] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2343.157934][T29416] usb 2-1: config 0 descriptor?? [ 2343.163659][T21516] usb 5-1: config 0 descriptor?? [ 2343.198035][T29416] cp210x 2-1:0.0: cp210x converter detected [ 2343.636587][T29416] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2343.647662][T21516] microsoft 0003:045E:07DA.020E: unknown main item tag 0x0 [ 2343.654994][T21516] microsoft 0003:045E:07DA.020E: unknown main item tag 0x0 [ 2343.662651][T21516] microsoft 0003:045E:07DA.020E: unknown main item tag 0x0 [ 2343.670159][T21516] microsoft 0003:045E:07DA.020E: unknown main item tag 0x0 [ 2343.677662][T21516] microsoft 0003:045E:07DA.020E: unknown main item tag 0x0 [ 2343.684979][T21516] microsoft 0003:045E:07DA.020E: unknown main item tag 0x0 [ 2343.692695][T21516] microsoft 0003:045E:07DA.020E: unknown main item tag 0x0 [ 2343.700138][T21516] microsoft 0003:045E:07DA.020E: unknown main item tag 0x0 [ 2343.707750][T21516] microsoft 0003:045E:07DA.020E: unknown main item tag 0x0 [ 2343.715317][T21516] microsoft 0003:045E:07DA.020E: unknown main item tag 0x0 [ 2343.723260][T21516] HID 045e:07da: Invalid code 65791 type 1 [ 2343.730822][T21516] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.020E/input/input643 [ 2343.809386][T21516] microsoft 0003:045E:07DA.020E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 2343.850265][T20888] usb 5-1: USB disconnect, device number 12 [ 2343.906590][T29416] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2343.914188][T29416] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2343.923306][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2343.931395][T29416] usb 2-1: USB disconnect, device number 6 [ 2343.938676][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2343.947171][T29416] cp210x 2-1:0.0: device disconnected [ 2344.327972][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.334306][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 15:15:35 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:15:35 executing program 0: syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:35 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)={0x14, 0x28, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 15:15:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7fff, 0x0, 0x0, 0x0, 0x0, "6d88ccf4891f6af0a8db3b5765becb345493ef"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xd) 15:15:35 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, 0x0) 15:15:35 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000080), 0xfffffffffffffffc, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x5}) 15:15:35 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, 0x0) 15:15:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) [ 2344.706449][T29146] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2345.067001][T29146] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2345.076313][T29146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2345.086545][T29146] usb 2-1: config 0 descriptor?? [ 2345.128073][T29146] cp210x 2-1:0.0: cp210x converter detected [ 2345.566542][T29146] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2345.828144][T29146] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2345.836011][T29146] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2345.844332][T29146] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2345.852805][T29146] usb 2-1: USB disconnect, device number 7 [ 2345.861810][T29146] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2345.870614][T29146] cp210x 2-1:0.0: device disconnected 15:15:37 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:15:37 executing program 4: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000040)) 15:15:37 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:37 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, 0x0) 15:15:37 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:37 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000040)) 15:15:37 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:37 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:37 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) [ 2346.626444][T29146] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2346.986640][T29146] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2346.996080][T29146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2347.010096][T29146] usb 2-1: config 0 descriptor?? [ 2347.049747][T29146] cp210x 2-1:0.0: cp210x converter detected [ 2347.486528][T29146] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2347.746478][T29146] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 2347.754263][T29146] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2347.762595][T29146] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2347.771208][T29146] usb 2-1: USB disconnect, device number 8 [ 2347.779283][T29146] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2347.787946][T29146] cp210x 2-1:0.0: device disconnected 15:15:38 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0}) 15:15:38 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:38 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:38 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:38 executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x3ff, 0x1, 0x2}) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @vbi}) 15:15:38 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:39 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:39 executing program 4: syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x12}, @l2cap_cid_signaling={{0xe}, [@l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}}, @l2cap_move_chan_rsp={{0xf, 0x95, 0x4}, {0x0, 0x7fff}}]}}, 0x17) 15:15:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000080)) 15:15:39 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) [ 2348.546433][T29146] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2348.906550][T29146] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2348.915932][T29146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2348.925390][T29146] usb 2-1: config 0 descriptor?? [ 2348.967332][T29146] cp210x 2-1:0.0: cp210x converter detected [ 2349.406522][T29146] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2349.656488][T29146] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2349.664367][T29146] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2349.672569][T29146] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2349.868072][T29146] usb 2-1: USB disconnect, device number 9 [ 2349.875431][T29146] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2349.883701][T29146] cp210x 2-1:0.0: device disconnected 15:15:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0}) 15:15:41 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:41 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@alu={0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9d, &(0x7f0000000080)=""/157, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:15:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 15:15:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:41 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:41 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 15:15:41 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 15:15:41 executing program 4: r0 = syz_usb_connect(0x0, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006c37bb08ec188831ac6e010203010902230001000000000904ec00010e010000090500000000000000080b43e48cc5dc9c"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 15:15:41 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) [ 2350.686504][T29146] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2350.746457][T29416] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2350.986522][T29416] usb 5-1: Using ep0 maxpacket: 8 [ 2351.046646][T29146] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2351.055902][T29146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2351.065742][T29146] usb 2-1: config 0 descriptor?? [ 2351.107356][T29146] cp210x 2-1:0.0: cp210x converter detected [ 2351.117701][T29416] usb 5-1: config 0 has an invalid interface number: 236 but max is 0 [ 2351.125902][T29416] usb 5-1: config 0 has no interface number 0 [ 2351.132107][T29416] usb 5-1: config 0 interface 236 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2351.296584][T29416] usb 5-1: New USB device found, idVendor=18ec, idProduct=3188, bcdDevice=6e.ac [ 2351.305682][T29416] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.313734][T29416] usb 5-1: Product: syz [ 2351.317986][T29416] usb 5-1: Manufacturer: syz [ 2351.322595][T29416] usb 5-1: SerialNumber: syz [ 2351.330049][T29416] usb 5-1: config 0 descriptor?? [ 2351.546535][T29146] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2351.586550][T29416] usb 5-1: Found UVC 0.00 device syz (18ec:3188) [ 2351.592942][T29416] usb 5-1: No valid video chain found. [ 2351.790228][T20888] usb 5-1: USB disconnect, device number 13 [ 2351.806524][T29146] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2351.814523][T29146] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2351.822879][T29146] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2352.010420][T20888] usb 2-1: USB disconnect, device number 10 [ 2352.020636][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2352.029125][T20888] cp210x 2-1:0.0: device disconnected 15:15:43 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0}) 15:15:43 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 15:15:43 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 15:15:43 executing program 4: syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xa0, 0x2, 0x13, 0x7, "c106"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x2}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x2, 0x9, 0x16, "73d6fec7"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x60, 0x3, 0x0, 0x1, ':R'}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x0, 0x80, {0x7, 0x25, 0x1, 0x83, 0x5, 0x1}}}}}}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x250, 0x0, 0x7f, 0x7, 0x40}, 0x13, &(0x7f0000000ac0)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xa, 0x0, 0x7, 0x20, 0x3ff, 0x8}]}, 0x4, [{0x4, &(0x7f0000000b00)=@lang_id={0x4}}, {0xb3, &(0x7f0000000b40)=@string={0xb3, 0x3, "075d89e9eb5f992e58c37aa7e2d35f40a3c8298abb1d92b7d3ac915e24e614712894acdf8dd225b91f8951d76dc29c74574517a4c51a74db648ae0e2aa3aa0bb9f0226d93531297695d7e59c04f7d7fca61a55bc5112fbd8fe986947d67b076031575c62e825ad6f576e2430f5768d25e480764ed1f560fdb7eb5592c9723c25a1d6a9b8e15519b0a62c81e00a2eed258d4c9e77d1266b70b407e0e2463b570fc971d565b87aa52e72cd179d5b371d5429"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x445}}]}) 15:15:43 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:43 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:43 executing program 5: r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea7", 0x89, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r1}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'sha3-224-generic\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000000)='*$\x00', &(0x7f0000000180)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000080)={{}, "07e09f155874181cfb7ce6bced23a5666a240119260f0105f0940e2c5a8835f3", 0x1}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x402002, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0xcf2d) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000240)={0x3, 0x1, [0x1, 0x8, 0xffff, 0x200, 0x80000000, 0x83c, 0x12000000, 0x3ff]}) 15:15:43 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:43 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x8000, '\x00', @ptr=0x20000000}}) [ 2352.816450][T20888] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2352.876429][T29146] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2353.056440][T20888] usb 5-1: Using ep0 maxpacket: 8 [ 2353.176473][T20888] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2353.185188][T20888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2353.197199][T20888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2353.236880][T29146] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2353.246158][T29146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2353.256115][T29146] usb 2-1: config 0 descriptor?? [ 2353.297346][T29146] cp210x 2-1:0.0: cp210x converter detected [ 2353.366689][T20888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2353.375761][T20888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2353.383798][T20888] usb 5-1: Product: ᰉ [ 2353.388048][T20888] usb 5-1: Manufacturer: 崇快⺙썘ꝺ폢䁟좣訩ᶻ랒곓庑焔鐨튍뤥褟흑쉭璜䕗ꐗ᫅詤㪪뮠ʟㄵ瘩힕鳥ﳗ᪦뱕ቑ飾䝩篖怇圱扜◨澭湗〤盵▍胤乶ﵠ鉕狉┼횡뢩嗡뀙Ⲧ⸊◭䲍瞞⛑火޴㭆བྷ燉旕窸⺥쵲鴗㝛吝 [ 2353.414176][T20888] usb 5-1: SerialNumber: х [ 2353.736503][T29146] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2353.736558][T20888] usb 5-1: 0:2 : does not exist [ 2353.759499][T20888] usb 5-1: USB disconnect, device number 14 [ 2353.774980][T20726] udevd[20726]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2354.006566][T29146] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2354.014423][T29146] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2354.023666][T29146] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2354.211006][T20888] usb 2-1: USB disconnect, device number 11 [ 2354.220146][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2354.228320][T20888] cp210x 2-1:0.0: device disconnected 15:15:45 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x8, "e3573d2054873e62"}, 0x0, 0x0, 0x0, 0x0}) 15:15:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x63, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0xbe}, [@NDA_LLADDR={0xa, 0x2, @random="63ccc7632400"}]}, 0x28}}, 0x0) 15:15:45 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:45 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x8000, '\x00', @ptr=0x20000000}}) 15:15:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000e9000000000000000000c1030000030000002004000000000000800200000000000000000000808000005003000050030000500300ff4f030000500300000300000000f7ff0000000000fe8001000074cb8af296109f0f0000bbff020000800000000000000000000001000000000000000000000000100000000000000000000000000000000000000076657468315f746f5f626f6e640000006e65747063693000000000000000000000000000000000000000000000fe00000000000000800000001d000000a2000000000000000000000000000050028002000000000100000000000000000064f700000000000000005001686173686c696d69740000000000000000000000000000000002010000027465616d5f736c6176655f3100080000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000faff000000000000000000008000000000000000000000000001000000000000000000000000000000000000000000000000000000000000a160c480e474f2ac000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000090000000000a90c000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000020b61a000800000000000000000000000000005800686173686c696d69740000000000000000000000000000f3ffffff00000173797a6b616c6c657231000000000000000000000000000084000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000969a2a6b0000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c415353494659000000005e9675e70000000000000000000000000085a6aa7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1) 15:15:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:45 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x0, '\x00', @ptr=0x20000000}}) [ 2354.758188][ T508] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 15:15:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:45 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x0, '\x00', @ptr=0x20000000}}) 15:15:45 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x1a4}, {&(0x7f0000000140)=""/85, 0x44c}, {&(0x7f0000000fc0)=""/4093, 0x29b}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x4c}, {&(0x7f0000000200)=""/77, 0x380}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa8}], 0xc4, &(0x7f0000000280)=""/191, 0x41, 0x40000000}}], 0x400000000000194, 0x0, &(0x7f0000003700)={0x77359400}) 15:15:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2355.036420][T29146] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2355.397110][T29146] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2355.406766][T29146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2355.421183][T29146] usb 2-1: config 0 descriptor?? [ 2355.458133][T29146] cp210x 2-1:0.0: cp210x converter detected [ 2355.896528][T29146] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2356.156548][T29146] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2356.164399][T29146] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2356.172362][T29146] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2356.360423][T29146] usb 2-1: USB disconnect, device number 12 [ 2356.368116][T29146] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2356.377285][T29146] cp210x 2-1:0.0: device disconnected 15:15:47 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x8, "e3573d2054873e62"}, 0x0, 0x0, 0x0, 0x0}) 15:15:47 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x0, '\x00', @ptr=0x20000000}}) 15:15:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:47 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef000000000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x1a4}, {&(0x7f0000000140)=""/85, 0x44c}, {&(0x7f0000000fc0)=""/4093, 0x29b}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x4c}, {&(0x7f0000000200)=""/77, 0x380}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa8}], 0xc4, &(0x7f0000000280)=""/191, 0x41, 0x40000000}}], 0x400000000000194, 0x0, &(0x7f0000003700)={0x77359400}) 15:15:47 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:15:47 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:47 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr}}) 15:15:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:47 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr}}) 15:15:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x23, 0x24, 0x1, 0x0, 0x0, {}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x0) 15:15:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2357.206556][ T3698] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2357.566826][ T3698] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2357.575898][ T3698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2357.585404][ T3698] usb 2-1: config 0 descriptor?? [ 2357.627995][ T3698] cp210x 2-1:0.0: cp210x converter detected [ 2358.066576][ T3698] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2358.326617][ T3698] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2358.334302][ T3698] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2358.342575][ T3698] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2358.530682][ T3698] usb 2-1: USB disconnect, device number 13 [ 2358.538255][ T3698] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2358.546291][ T3698] cp210x 2-1:0.0: device disconnected 15:15:49 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x8, "e3573d2054873e62"}, 0x0, 0x0, 0x0, 0x0}) 15:15:49 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x8000, '\x00', @ptr}}) 15:15:49 executing program 5: syz_io_uring_setup(0x7fdc, &(0x7f0000000040)={0x0, 0x80969b, 0x1fff}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 15:15:49 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:15:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:49 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:49 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 15:15:49 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r2 = socket(0x0, 0x3, 0x0) bind$packet(r2, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 15:15:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0x655cf16bb8237aa6}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x30}}, 0x0) 15:15:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2359.376562][ T3698] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2359.736844][ T3698] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2359.745917][ T3698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2359.759550][ T3698] usb 2-1: config 0 descriptor?? [ 2359.797211][ T3698] cp210x 2-1:0.0: cp210x converter detected [ 2360.236512][ T3698] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2360.496514][ T3698] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2360.504199][ T3698] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2360.512843][ T3698] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2360.700296][ T3698] usb 2-1: USB disconnect, device number 14 [ 2360.707723][ T3698] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2360.716165][ T3698] cp210x 2-1:0.0: device disconnected 15:15:51 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xc, "e3573d2054873e62ba4b03d8"}, 0x0, 0x0, 0x0, 0x0}) 15:15:51 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r2 = socket(0x0, 0x3, 0x0) bind$packet(r2, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 15:15:51 executing program 5: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f00000002c0), 0x8a400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x1}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xe0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x8100000, 0x0, &(0x7f00000002c0), 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB="6a00000000000000d0f31f847590c71d9b8ed6dc7275672c7569643ca3039061993bcd38b4eec491568a8daf481efc677e22f133accee6e5b74dc5fed19e079929556acd3ff6f3547a1d37592c3ff86cc43c0685cc819b419f7179f6290f007d09166da3113802ac8c27aa6d65", @ANYRESDEC=0xee00, @ANYBLOB="2c01", @ANYRES16=r2, @ANYBLOB="c87d6adf1e8df329d5739b713c93783161368169d429af678cfd4617b1cd9df34f28119a9836d9c49d07905b653db71daefde3adf052f87b59d83780cb9e514a3c2992366c03a19d72498ccc0ec49c776eb27e9f275357850ae0fa33fcdd38a1d01b717c1496f19d6bb606398914e0"], 0x1) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) 15:15:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:51 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:51 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000e9000000000000000000c1030000030000002004000000000000800200000000000000000000808000005003000050030000500300ff4f030000500300000300000000f7ff0000000000fe8001000074cb8af296109f0f0000bbff020000800000000000000000000001000000000000000000000000100000000000000000000000000000000000000076657468315f746f5f626f6e640000006e65747063693000000000000000000000000000000000000000000000fe00000000000000800000001d000000a2000000000000000000000000000050028002000000000100000000000000000064f700000000000000005001686173686c696d69740000000000000000000000000000000002010000027465616d5f736c6176655f3100080000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000faff000000000000000000008000000000000000000000000001000000000000000000000000000000000000000000000000000000000000a160c480e474f2ac000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000090000000000a90c000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000020b61a000800000000000000000000000000005800686173686c696d69740000000000000000000000000000f3ffffff00000173797a6b616c6c657231000000000000000000000000000084000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000969a2a6b0000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c415353494659000000005e9675e70000000000000000000000000085a6aa7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1) 15:15:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:51 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) [ 2361.386703][ T602] loop5: detected capacity change from 0 to 264192 [ 2361.393966][ T602] ext3: Unknown parameter 'j' [ 2361.526661][T29146] usb 2-1: new high-speed USB device number 15 using dummy_hcd 15:15:52 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:52 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:52 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r2 = socket(0x0, 0x3, 0x0) bind$packet(r2, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 15:15:52 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) [ 2362.006551][T29146] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2362.016039][T29146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2362.026219][T29146] usb 2-1: config 0 descriptor?? [ 2362.067909][T29146] cp210x 2-1:0.0: cp210x converter detected [ 2362.506446][T29146] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2362.766492][T29146] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2362.774364][T29146] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2362.782384][T29146] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2362.970542][T20888] usb 2-1: USB disconnect, device number 15 [ 2362.980116][T20888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2362.988430][T20888] cp210x 2-1:0.0: device disconnected 15:15:54 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xc, "e3573d2054873e62ba4b03d8"}, 0x0, 0x0, 0x0, 0x0}) 15:15:54 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:54 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:15:54 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) r2 = socket(0x0, 0x3, 0x0) bind$packet(r2, 0x0, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 15:15:54 executing program 5: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f00000002c0), 0x8a400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={0x0, @l2tp={0x2, 0x2, @dev}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x1}}, @generic={0x2, "bcbc5dada046e4d15ddee9502b10"}, 0xe0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='gretap0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) getpid() syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x8100000, 0x0, &(0x7f00000002c0), 0x10000, &(0x7f0000000500)=ANY=[@ANYBLOB="6a00000000000000d0f31f847590c71d9b8ed6dc7275672c7569643ca3039061993bcd38b4eec491568a8daf481efc677e22f133accee6e5b74dc5fed19e079929556acd3ff6f3547a1d37592c3ff86cc43c0685cc819b419f7179f6290f007d09166da3113802ac8c27aa6d65", @ANYRESDEC=0xee00, @ANYBLOB="2c01", @ANYRES16=r2, @ANYBLOB="c87d6adf1e8df329d5739b713c93783161368169d429af678cfd4617b1cd9df34f28119a9836d9c49d07905b653db71daefde3adf052f87b59d83780cb9e514a3c2992366c03a19d72498ccc0ec49c776eb27e9f275357850ae0fa33fcdd38a1d01b717c1496f19d6bb606398914e0"], 0x1) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) 15:15:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:54 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:54 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:15:54 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) [ 2363.744613][ T640] loop5: detected capacity change from 0 to 264192 [ 2363.753749][ T640] ext3: Unknown parameter 'j' [ 2363.809584][T20726] udevd[20726]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 2363.889534][T21516] usb 2-1: new high-speed USB device number 16 using dummy_hcd 15:15:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:15:54 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) [ 2364.346897][T21516] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2364.374248][T21516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2364.395152][T21516] usb 2-1: config 0 descriptor?? [ 2364.437175][T21516] cp210x 2-1:0.0: cp210x converter detected [ 2364.876482][T21516] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2365.136509][T21516] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2365.144356][T21516] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2365.152042][T21516] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2365.339582][T29146] usb 2-1: USB disconnect, device number 16 [ 2365.346857][T29146] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2365.355039][T29146] cp210x 2-1:0.0: device disconnected 15:15:56 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xc, "e3573d2054873e62ba4b03d8"}, 0x0, 0x0, 0x0, 0x0}) 15:15:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000640)='C', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001640)='\t', 0x1}], 0x1}}], 0x2, 0x4000) 15:15:56 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:56 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000e9000000000000000000c1030000030000002004000000000000800200000000000000000000808000005003000050030000500300ff4f030000500300000300000000f7ff0000000000fe8001000074cb8af296109f0f0000bbff020000800000000000000000000001000000000000000000000000100000000000000000000000000000000000000076657468315f746f5f626f6e640000006e65747063693000000000000000000000000000000000000000000000fe00000000000000800000001d000000a2000000000000000000000000000050028002000000000100000000000000000064f700000000000000005001686173686c696d69740000000000000000000000000000000002010000027465616d5f736c6176655f3100080000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000faff000000000000000000008000000000000000000000000001000000000000000000000000000000000000000000000000000000000000a160c480e474f2ac000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000090000000000a90c000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000020b61a000800000000000000000000000000005800686173686c696d69740000000000000000000000000000f3ffffff00000173797a6b616c6c657231000000000000000000000000000084000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000969a2a6b0000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c415353494659000000005e9675e70000000000000000000000000085a6aa7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1) 15:15:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:56 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)) 15:15:56 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x2b1, 0x0, r5}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000002000/0x4000)=nil, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 15:15:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000380), 0xb03, 0x401) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000000)=0x4fd) 15:15:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200, 0x181082) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0xe0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)="c6"}) 15:15:56 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:56 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x200) 15:15:56 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) [ 2366.186489][T20888] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2366.546704][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2366.556195][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2366.565303][T20888] usb 2-1: config 0 descriptor?? [ 2366.607599][T20888] cp210x 2-1:0.0: cp210x converter detected [ 2367.046572][T20888] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2367.306560][T20888] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2367.314261][T20888] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2367.322325][T20888] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2367.511563][T21516] usb 2-1: USB disconnect, device number 17 [ 2367.518836][T21516] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2367.527228][T21516] cp210x 2-1:0.0: device disconnected 15:15:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xe, "e3573d2054873e62ba4b03d82027"}, 0x0, 0x0, 0x0, 0x0}) 15:15:58 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:58 executing program 0: syz_clone(0x4d00f000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 15:15:58 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000e9000000000000000000c1030000030000002004000000000000800200000000000000000000808000005003000050030000500300ff4f030000500300000300000000f7ff0000000000fe8001000074cb8af296109f0f0000bbff020000800000000000000000000001000000000000000000000000100000000000000000000000000000000000000076657468315f746f5f626f6e640000006e65747063693000000000000000000000000000000000000000000000fe00000000000000800000001d000000a2000000000000000000000000000050028002000000000100000000000000000064f700000000000000005001686173686c696d69740000000000000000000000000000000002010000027465616d5f736c6176655f3100080000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000faff000000000000000000008000000000000000000000000001000000000000000000000000000000000000000000000000000000000000a160c480e474f2ac000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000090000000000a90c000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000020b61a000800000000000000000000000000005800686173686c696d69740000000000000000000000000000f3ffffff00000173797a6b616c6c657231000000000000000000000000000084000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000969a2a6b0000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c415353494659000000005e9675e70000000000000000000000000085a6aa7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1) 15:15:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:15:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x1}) 15:15:58 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:58 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(r1, &(0x7f00000003c0)='\t', 0x1) r2 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:15:59 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:59 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:15:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) [ 2368.356482][T20888] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2368.738679][T20888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2368.751363][T20888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2368.784223][T20888] usb 2-1: config 0 descriptor?? [ 2368.837231][T20888] cp210x 2-1:0.0: cp210x converter detected [ 2369.276554][T20888] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2369.526598][T20888] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2369.534301][T20888] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2369.543775][T20888] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2369.732468][T29146] usb 2-1: USB disconnect, device number 18 [ 2369.741942][T29146] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2369.750377][T29146] cp210x 2-1:0.0: device disconnected 15:16:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) 15:16:00 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:00 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00'}, 0x10) r0 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:00 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(r1, &(0x7f00000003c0)='\t', 0x1) r2 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:16:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xe, "e3573d2054873e62ba4b03d82027"}, 0x0, 0x0, 0x0, 0x0}) 15:16:01 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) 15:16:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) 15:16:01 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:01 executing program 0: ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) 15:16:01 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:01 executing program 0: ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) 15:16:01 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:01 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00'}, 0x10) r0 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) [ 2370.586629][T21516] usb 2-1: new high-speed USB device number 19 using dummy_hcd 15:16:01 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(r1, &(0x7f00000003c0)='\t', 0x1) r2 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) [ 2370.946490][T21516] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2370.955981][T21516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2370.969969][T21516] usb 2-1: config 0 descriptor?? [ 2371.008234][T21516] cp210x 2-1:0.0: cp210x converter detected 15:16:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2371.446528][T21516] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2371.706576][T21516] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2371.714463][T21516] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2371.722604][T21516] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2371.910297][T29416] usb 2-1: USB disconnect, device number 19 [ 2371.919466][T29416] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2371.927555][T29416] cp210x 2-1:0.0: device disconnected 15:16:03 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0xe, "e3573d2054873e62ba4b03d82027"}, 0x0, 0x0, 0x0, 0x0}) 15:16:03 executing program 0: ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) 15:16:03 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00'}, 0x10) r0 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:03 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:03 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(r1, &(0x7f00000003c0)='\t', 0x1) r2 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:16:03 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) 15:16:03 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) 15:16:03 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) 15:16:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) 15:16:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) 15:16:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) [ 2372.736557][T29416] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2373.096468][T29416] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2373.105927][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2373.116815][T29416] usb 2-1: config 0 descriptor?? [ 2373.157185][T29416] cp210x 2-1:0.0: cp210x converter detected [ 2373.596499][T29416] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2373.856501][T29416] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 2373.864190][T29416] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 2373.872752][T29416] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2374.060702][T29146] usb 2-1: USB disconnect, device number 20 [ 2374.069817][T29146] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2374.080417][T29146] cp210x 2-1:0.0: device disconnected 15:16:05 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) 15:16:05 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(r1, &(0x7f00000003c0)='\t', 0x1) r2 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:05 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:16:05 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001ac0)=ANY=[@ANYBLOB="12010000000000404355470000000000000109022400010000000009040000010300000009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0ce7c74ec171095cfcdb"}}, 0x0, 0x0}, 0x0) 15:16:05 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) 15:16:05 executing program 0: syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0xd}) 15:16:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, 0x0) 15:16:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, 0x0) 15:16:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, 0x0) 15:16:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)) 15:16:05 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)) [ 2374.906519][T29416] usb 2-1: new high-speed USB device number 21 using dummy_hcd 15:16:05 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(r1, &(0x7f00000003c0)='\t', 0x1) r2 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) [ 2375.266557][T29416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2375.277503][T29416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2375.287397][T29416] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 2375.296480][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2375.306754][T29416] usb 2-1: config 0 descriptor?? 15:16:06 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) [ 2376.706535][T29416] uclogic 0003:5543:0047.020F: v1 frame probing failed: -71 [ 2376.713915][T29416] uclogic 0003:5543:0047.020F: failed probing parameters: -71 [ 2376.721743][T29416] uclogic: probe of 0003:5543:0047.020F failed with error -71 [ 2376.732405][T29416] usb 2-1: USB disconnect, device number 21 15:16:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001ac0)=ANY=[@ANYBLOB="12010000000000404355470000000000000109022400010000000009040000010300000009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0ce7c74ec171095cfcdb"}}, 0x0, 0x0}, 0x0) 15:16:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)) 15:16:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(r1, &(0x7f00000003c0)='\t', 0x1) r2 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:07 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:07 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:16:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYBLOB="b9e583bee235cb070049085141e9fc"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)=ANY=[]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:16:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:08 executing program 0: syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x1f, 0x1, 0x7, 0x1, 0x1, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x0, 0x2}}}}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x11, &(0x7f00000001c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0xfc, 0x0, 0x0, 0xf000, 0x8001}]}, 0x5, [{0x12, &(0x7f0000000200)=@string={0x12, 0x3, "64a22a1cb3feac0dc4950e09cd6611c1"}}, {0x53, &(0x7f0000000280)=@string={0x53, 0x3, "4db5f48b04930c42e096410ec10aac467eec4b0232adadea72e01d77ce4c8dab1d838cb6742cb65186ab153d9b536c4b6a99cba2d5d8e90830393779f4fc429d12c412738c66224bdafb35df51c2df1b11"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x80a}}, {0x0, 0x0}]}) [ 2377.498461][T29416] usb 2-1: new high-speed USB device number 22 using dummy_hcd 15:16:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:08 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(r1, &(0x7f00000003c0)='\t', 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) [ 2377.779104][T29146] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 2377.906590][T29416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2377.919779][T29416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2377.929812][T29416] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 2377.939026][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2377.948198][T29416] usb 2-1: config 0 descriptor?? [ 2378.186529][T29146] usb 1-1: not running at top speed; connect to a high speed hub [ 2378.266628][T29146] usb 1-1: config 1 interface 0 has no altsetting 0 [ 2378.426593][T29146] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2378.435874][T29146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.444677][T29146] usb 1-1: Manufacturer: 땍说錄䈌雠แુ䚬ɋ괲眝䳎ꮍ茝뚌ⱴ冶ꮆ㴕厛䭬饪ꋋࣩ㤰礷ﳴ鵂쐒猒暌䬢ﯚ쉑ᯟ [ 2378.459169][T29146] usb 1-1: SerialNumber: ࠊ [ 2378.758545][T29146] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 103 if 0 alt 31 proto 1 vid 0x0525 pid 0xA4A8 [ 2378.780045][T29146] usb 1-1: USB disconnect, device number 103 [ 2378.788130][T29146] usblp0: removed [ 2379.366640][T29416] uclogic 0003:5543:0047.0210: v1 frame probing failed: -71 [ 2379.374030][T29416] uclogic 0003:5543:0047.0210: failed probing parameters: -71 [ 2379.381642][T29416] uclogic: probe of 0003:5543:0047.0210 failed with error -71 [ 2379.391400][T29416] usb 2-1: USB disconnect, device number 22 15:16:10 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001ac0)=ANY=[@ANYBLOB="12010000000000404355470000000000000109022400010000000009040000010300000009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0ce7c74ec171095cfcdb"}}, 0x0, 0x0}, 0x0) 15:16:10 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000e9000000000000000000c1030000030000002004000000000000800200000000000000000000808000005003000050030000500300ff4f030000500300000300000000f7ff0000000000fe8001000074cb8af296109f0f0000bbff020000800000000000000000000001000000000000000000000000100000000000000000000000000000000000000076657468315f746f5f626f6e640000006e65747063693000000000000000000000000000000000000000000000fe00000000000000800000001d000000a2000000000000000000000000000050028002000000000100000000000000000064f700000000000000005001686173686c696d69740000000000000000000000000000000002010000027465616d5f736c6176655f3100080000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000faff000000000000000000008000000000000000000000000001000000000000000000000000000000000000000000000000000000000000a160c480e474f2ac000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000090000000000a90c000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000020b61a000800000000000000000000000000005800686173686c696d69740000000000000000000000000000f3ffffff00000173797a6b616c6c657231000000000000000000000000000084000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000969a2a6b0000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c415353494659000000005e9675e70000000000000000000000000085a6aa7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1) 15:16:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:16:10 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:10 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(r1, &(0x7f00000003c0)='\t', 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:10 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x4594, 0x101102) ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0xfffffff7, 0x0}) 15:16:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() setrlimit(0xb, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xfffffffffffffffe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008008, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0xfffffe32, 0x700, 0x0, 0xfffffffffffffecb) r4 = socket(0x1, 0x80000, 0x9) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="440003", @ANYRES8=r4, @ANYBLOB="40800088240012809a564de3113701000100626f6e5fb1f2248005001d0000000000050016000000573db2871c64204a8f245c9cd010b3e796bcef4cb23a06b8d4e4b6789edd0d26ee1894c2957f55c88799b10a831167f4a672ef00519c04d261bf6ef528a897ca0091ec420bc8368db585cc20311d7fa33007c10b1fc95619f7793a65141bbe42a7223ee63548455f48532c08a247e2e1488c648cba023d25d3253d636188eefa1000000000000000007a8868d9a579cc72c9e030baf3c173d2eebeacc1005845a98ac5ac068c64598d27"], 0x44}}, 0x40040045) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x303}, "b68b2883669eaa72", "42c10ff3f3828e5f610750ab541e63f1", "73de3715", "fd00"}, 0x28) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x40000, 0x0, &(0x7f0000001f80), 0x8010, &(0x7f00000005c0)=ANY=[@ANYBLOB="db7d682f7c64ff9c7a727d24daee634150b3e874514177a2839bd61c41d0b42784cd934aa470efc9d1b376407d3fd8fc3f61467896723bfd39413e912323460610ef8fe1c19906b65db49ae79a7b51977886a8542eac17476b253fd043dcb7dd3759a11336056f37921e26ec7916b94e", @ANYBLOB="210000000045f760d834764b8b7c88bfff7f1900137946dad1961a81f0a3b83160e789af5cd8ccc4055d915dce10a408520a948751dcf99b721f5d66"], 0x0) 15:16:10 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) [ 2380.166550][T29416] usb 2-1: new high-speed USB device number 23 using dummy_hcd 15:16:10 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:11 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:11 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(r1, &(0x7f00000003c0)='\t', 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) [ 2380.556610][T29416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2380.569705][T29416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2380.580638][T29416] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 2380.591977][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 15:16:11 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) [ 2380.603008][T29416] usb 2-1: config 0 descriptor?? [ 2382.016644][T29416] uclogic 0003:5543:0047.0211: v1 frame probing failed: -71 [ 2382.024017][T29416] uclogic 0003:5543:0047.0211: failed probing parameters: -71 [ 2382.031602][T29416] uclogic: probe of 0003:5543:0047.0211 failed with error -71 [ 2382.045616][T29416] usb 2-1: USB disconnect, device number 23 15:16:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0xe, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:16:13 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:13 executing program 0: syz_clone(0x62300000, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 15:16:13 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r1 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:13 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001ac0)=ANY=[@ANYBLOB="12010000000000404355470000000000000109022400010000000009040000010300000009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0ce7c74ec171095cfcdb"}}, 0x0, 0x0}, 0x0) 15:16:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r1 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) r1 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="d83a6659b05b9b7a1b02a970d5e0777da920a183dd5b44231da8856f97026169e2e06d78651d4dbbadd4ed8162fc2f"], 0x100000530) setrlimit(0x7, &(0x7f0000000300)={0x100, 0x2}) 15:16:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) write$dsp(r1, &(0x7f00000003c0)='\t', 0x1) r2 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:13 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) [ 2382.837663][T29416] usb 2-1: new high-speed USB device number 24 using dummy_hcd 15:16:13 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) [ 2383.237146][T29416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2383.257447][T29416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2383.279813][T29416] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 2383.300820][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2383.328746][T29416] usb 2-1: config 0 descriptor?? 15:16:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, 0x0, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:16:14 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) write$dsp(r1, &(0x7f00000003c0)='\t', 0x1) r2 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:14 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000e9000000000000000000c1030000030000002004000000000000800200000000000000000000808000005003000050030000500300ff4f030000500300000300000000f7ff0000000000fe8001000074cb8af296109f0f0000bbff020000800000000000000000000001000000000000000000000000100000000000000000000000000000000000000076657468315f746f5f626f6e640000006e65747063693000000000000000000000000000000000000000000000fe00000000000000800000001d000000a2000000000000000000000000000050028002000000000100000000000000000064f700000000000000005001686173686c696d69740000000000000000000000000000000002010000027465616d5f736c6176655f3100080000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000faff000000000000000000008000000000000000000000000001000000000000000000000000000000000000000000000000000000000000a160c480e474f2ac000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000090000000000a90c000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000020b61a000800000000000000000000000000005800686173686c696d69740000000000000000000000000000f3ffffff00000173797a6b616c6c657231000000000000000000000000000084000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000969a2a6b0000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c415353494659000000005e9675e70000000000000000000000000085a6aa7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1) 15:16:14 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) [ 2384.746592][T29416] uclogic 0003:5543:0047.0212: v1 frame probing failed: -71 [ 2384.753961][T29416] uclogic 0003:5543:0047.0212: failed probing parameters: -71 [ 2384.761810][T29416] uclogic: probe of 0003:5543:0047.0212 failed with error -71 [ 2384.773420][T29416] usb 2-1: USB disconnect, device number 24 15:16:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) write$dsp(r1, &(0x7f00000003c0)='\t', 0x1) r2 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x12c) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="d83a6659b05b9b7a1b02a970d5e0777da920a183dd5b44231da8856f97026169e2e06d78651d4dbbadd4ed8162fc2f"], 0x100000530) setrlimit(0x7, &(0x7f0000000300)={0x100, 0x2}) 15:16:15 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000e9000000000000000000c1030000030000002004000000000000800200000000000000000000808000005003000050030000500300ff4f030000500300000300000000f7ff0000000000fe8001000074cb8af296109f0f0000bbff020000800000000000000000000001000000000000000000000000100000000000000000000000000000000000000076657468315f746f5f626f6e640000006e65747063693000000000000000000000000000000000000000000000fe00000000000000800000001d000000a2000000000000000000000000000050028002000000000100000000000000000064f700000000000000005001686173686c696d69740000000000000000000000000000000002010000027465616d5f736c6176655f3100080000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000faff000000000000000000008000000000000000000000000001000000000000000000000000000000000000000000000000000000000000a160c480e474f2ac000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000090000000000a90c000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000020b61a000800000000000000000000000000005800686173686c696d69740000000000000000000000000000f3ffffff00000173797a6b616c6c657231000000000000000000000000000084000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000969a2a6b0000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c415353494659000000005e9675e70000000000000000000000000085a6aa7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1) 15:16:15 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, 0x0, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:16:15 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001ac0)=ANY=[@ANYBLOB="12010000000000404355470000000000000109022400010000000009040000010300000009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15:16:16 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) [ 2385.588348][T29416] usb 2-1: new high-speed USB device number 25 using dummy_hcd 15:16:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(0xffffffffffffffff, &(0x7f00000003c0)='\t', 0x1) r1 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:16 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000e9000000000000000000c1030000030000002004000000000000800200000000000000000000808000005003000050030000500300ff4f030000500300000300000000f7ff0000000000fe8001000074cb8af296109f0f0000bbff020000800000000000000000000001000000000000000000000000100000000000000000000000000000000000000076657468315f746f5f626f6e640000006e65747063693000000000000000000000000000000000000000000000fe00000000000000800000001d000000a2000000000000000000000000000050028002000000000100000000000000000064f700000000000000005001686173686c696d69740000000000000000000000000000000002010000027465616d5f736c6176655f3100080000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000faff000000000000000000008000000000000000000000000001000000000000000000000000000000000000000000000000000000000000a160c480e474f2ac000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000090000000000a90c000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000020b61a000800000000000000000000000000005800686173686c696d69740000000000000000000000000000f3ffffff00000173797a6b616c6c657231000000000000000000000000000084000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000969a2a6b0000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c415353494659000000005e9675e70000000000000000000000000085a6aa7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1) 15:16:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(0xffffffffffffffff, &(0x7f00000003c0)='\t', 0x1) r1 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(0xffffffffffffffff, &(0x7f00000003c0)='\t', 0x1) r1 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) [ 2385.976576][T29416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2386.008545][T29416] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 15:16:16 executing program 5: syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(r0, &(0x7f00000003c0)='\t', 0x1) r1 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:16 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) [ 2386.032492][T29416] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 2386.066291][T29416] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2386.122556][T29416] usb 2-1: config 0 descriptor?? 15:16:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15:16:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, 0x0, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:16:17 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:17 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 2386.676508][ T3697] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2386.926413][ T3697] usb 1-1: Using ep0 maxpacket: 8 [ 2387.046643][ T3697] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2387.216581][ T3697] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2387.225655][ T3697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2387.234344][ T3697] usb 1-1: Product: syz [ 2387.238646][ T3697] usb 1-1: Manufacturer: syz [ 2387.243257][ T3697] usb 1-1: SerialNumber: syz [ 2387.276544][T29416] uclogic 0003:5543:0047.0213: failed retrieving string descriptor #200: -71 [ 2387.285380][T29416] uclogic 0003:5543:0047.0213: failed retrieving pen parameters: -71 [ 2387.299370][T29416] uclogic 0003:5543:0047.0213: failed probing pen v2 parameters: -71 [ 2387.308121][T29416] uclogic 0003:5543:0047.0213: failed probing parameters: -71 [ 2387.315616][T29416] uclogic: probe of 0003:5543:0047.0213 failed with error -71 [ 2387.330110][T29416] usb 2-1: USB disconnect, device number 25 [ 2387.498874][ T3697] usb 1-1: USB disconnect, device number 104 15:16:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001ac0)=ANY=[@ANYBLOB="12010000000000404355470000000000000109022400010000000009040000010300000009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15:16:18 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000e9000000000000000000c1030000030000002004000000000000800200000000000000000000808000005003000050030000500300ff4f030000500300000300000000f7ff0000000000fe8001000074cb8af296109f0f0000bbff020000800000000000000000000001000000000000000000000000100000000000000000000000000000000000000076657468315f746f5f626f6e640000006e65747063693000000000000000000000000000000000000000000000fe00000000000000800000001d000000a2000000000000000000000000000050028002000000000100000000000000000064f700000000000000005001686173686c696d69740000000000000000000000000000000002010000027465616d5f736c6176655f3100080000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000faff000000000000000000008000000000000000000000000001000000000000000000000000000000000000000000000000000000000000a160c480e474f2ac000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000090000000000a90c000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000020b61a000800000000000000000000000000005800686173686c696d69740000000000000000000000000000f3ffffff00000173797a6b616c6c657231000000000000000000000000000084000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000969a2a6b0000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c415353494659000000005e9675e70000000000000000000000000085a6aa7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1) 15:16:18 executing program 5: syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(r0, &(0x7f00000003c0)='\t', 0x1) r1 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:18 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:16:18 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f0000000140)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}}) 15:16:18 executing program 0: r0 = syz_clone(0x40000000, &(0x7f0000000140)="df8482d8ddb8760c27244b37528bfcd1347f26b0e43e782638514209e53d1ba7552c8465e84fac2c57ad8ab2cdb91701bdaccd1fae0c51f0dc35c5bc98a95716c53a22fbaff636a36bcb59ae4c70410c0c6b807bbca0205a563ecbef13b72c63d41c21d100466c90fd6da8ff40f4200452fa9417b4a50eb3a871b439829508289f73842da3d8cc0d1b2ec64c033006acbc5e8af14e0b9939b7866a5bd19987122b86bebd472b1300fd206e549224f5bdc17409f753d1e3ba13d81b52be9fcf3717fee8da635b1e7886203c50aa9924e8ff49e5fe6670a821e86db22f52010ca3eaa9b59819b09445cf8ca1db52d7bc1a6c0d3be7287809d29fd14ac6e24979a07d136afab23a7e9acf1f26a4ee2bd395b9c519bd996ffa1bb4f40e2e174e274d4d64f3fdc379f540e0ccb0a2abf21120c470cbe67d5226ba05e1bd18e98cfadfdddb9583a884d15ae5096c8a501aef2e9657893d2f32b5a47560faf97eeeaea62fc1ac88124279e9ca41457f7ea1c019827733a4d5ed020d34881c594c20f2f439ad0678a7d30f94abb22d1e1fe3b8c8a8e545f144b877e16c6a8a2702877724eb72ef7242de9b65b202e3e7f151efdf67f1b539448bd0238f0e8086028d9a2e5337eab7ec06c0a10d30ea18c8a12de0108d8ec01b7b3550cbf0be06ae965518bc0e1292c18960647eb2a409474c273a84c10f130c5fbdce1ebe8e50da8b8769d638a94d3de18983d865809204ddef6849d3e02f9a89610143402e0a98d4b8750769d791bf350cc25da41d34706374ddf926f99d77ab2baae8d8a780cb2c1a43a549a3562d8c354fd8bdeac77c356b89c1c9d7bb7a2536e4df01cf5556ef34cfb3193066f6a53fddc8c1984d857bbfe325557191c68a68b23a0c4b2abc9a49164606dc1bf381195abbbf3be9136421b0a006cdb585f9c4ecca706fc6c877fa7d03cbe1f5e77b5ce3adc518d6984494848f6ceeac126339f1a47df2f69f1db4c3fc88c2b57fb01bce90370dc07a2392ed29e84f9e5cfab96812c1696cadd0c9cd5494ba3299e789517e913dc137b44312774600609d5bc218eae90d75a3ce5e53c0427e573f1f60baee8c122074cf4948dde030fc1f219c9d5cf3b83e31d414066731ad448ab801e8218091d9a3bdbdb7beec673d026757f42f0fd46f357c065e86aebf134d0bf0fa3689b4f95788478650e130ccce375fd5202283cc10f5d5e99c2cc389f5f8bf060305a6bd802985ee94cdd6cad6f0c1f3d1d6f0af9bacc80d471953350abccb497febaff61dceba0d8612ed5a6e1a3b1f3b78d825760d44fe8b368a75395653a9f536fbbfe0b7a591d58c0810279d1fd244a8bf97c546ebc3453cf400ee8c4d0333e9fd70986037373a302c97a382be5056ac9159e16d18cc9b2f60f6726c8f651b40e08950659972b39a86ffeb10c9f5bc09b94048aed92f8467b9433f39c0741aced0fec792aec544767cc3e21042efc86f1315ae0ffe9c80c8971c02dfc2aacd460b80e05fb42493f6f2c8bfc008cdd9df873f6ff9d579c6d07f28c662ccd5a6d4191cbb5db78b1f96c2cb720ada0fb9c5d98e85dff11dbffa2f6eae58ba383aa1b588a9005e1ebc7d5b5e1357f9034632103e92399e8c576b5e96ffe2b21e98ef0a60131089c23341b6cae03566b322266b7a23381160572a681be7a46913dc253f545ae29606c863f1049b703b32abc58b51af158759aa05f3ffb6667be894dcf64512852a1019b7cdbb8b573e87107e14ba0be1767e3e174b1f19bddd790f9296a4be031db8d268e5e5ef365959d58a06a8014ae39c3e948f6d7a47f476bbd5e05184dd32689b7313cca6782b64f20cc5701c7c55ab4d072bfc73fdded326d52f8d3841fd2784cf67f417bc48d56b37b3b951aa2c08b94e288bb04912875e16a1bef4b30b4dc0c7311d84887bb6bfb44abcea19b078ce9eed01ead2c5c89ccbe64e5ece27cffdf0f64e8f4af5172bf2e0e65cbe07c6506ac2e61715401b84d80bb4fb50f15d79bea960fe56d7e22e6d5e40dc196e1070f25504d6d12f9d3dd620c3026bbe624187f6375246798a3660f2504a2fcb33328cede7fd5b763e3851830c7a34031c2681cfc9f0775a4dbe848c92f1db92712a6cecd77756a0bd73bf753188c5effc912b71ba3954dc18f1e8b70db10202a8ef5dde1e3b42e04e8fd149e760a6dbb82946a5b60b9a1a381f7b6ca59870a178a58f730158f37c5e4eef7d5ed054b390db799fcf7f314e3480b72f11fa510d9957e4c6d961a62164164cc1041fea1ce0a23f4d149c793ecf901757ea6ccde290b47a0a705644fd958590b3114e99def4ee4a61d0112dc28d37afe1955e5c6aa798950df92e52f4c35d3773c04611e29bbc423381a720e219fa0b177badd1cab72df8e76fc3ca2c7eb64889199d94a58ea732bec80eb0e0e8631665a5a2f4887e5c70f5a4900d7eb42bebe89b50a84e88b18eea003ff65ebd71488f164519c15b888418cfaca396f23cc9e49fa27b9dc6b3e137cd0cde09c2e3de3a996a99254627fa46595ea368b83e303c11ef4808ca0ce1617a8f77758b141b22f9fce70086bd1d465c1d8782ae1515c07f2bc280ba2f724bff59967b8ddd62aa883f46d2f1a72799b88c5cab5dc6165bee14180ae0023cc9b610bafff7ee1cf4c24e02875a7531adc85b90f0faa47068dcc79f367e04c746b0e982a9f0a14b00cf8da4452cfc1a46d5ceef00e863673d1ad65c84ef77ff8a24b6772760fa11f1c46a73199ce9e5cee3cbb9a7402f9cc90c2fb91e8b7e5f166bf83e81ec32000474334e0c732d9534a89ad3797cb44965c373c9c4866e53bf85ef8524aaa70bd2455a576f9ef2737402167f11e2957dfd8b6636773a1931e516268485c5609a0ac1b9118c0eb908e50d9e3c7c479904a13c0429fb67cd1d31999fd72d9f1830808740ba7c3b56f9c85fd505b6addc97279d2eff0426088ce737d478d44133a1a7b25bbe34ab261c4ac255f954ee4c5394324d2f43641d19e1d20d68749c457e240df017c0f93de15b05f9f1098fc8380455692abab1a11be8b96276c90f761116014c6817db0e78c99fa466e0f8e01ea9d024413520a59be9c6071c2480a09379376be3f5dbd43dd9ebcad8db3dadbc1610af8753bcdc37f96a5c0a893858878636d9114ad20588d06db0f6d3067ce612530e1143fbbd8e6546d55d61b12b95dec41fde715c1c7c4ceed7e34882e21acb19563df32ce125f51c23f8980ceeadf8ab5c31eea53301a1a9e053023c0de9b4a8555e9f334177d0f4be7e25df5efea943318da757d7c3c2c1a61e8b598b01ccd12f8f422dc941fa085634c327f66cad6db7ef5a8cab205b94da6a6a100a17414a2ef985e78c5de957a15fbc38cd86ecfecb73756a5e64723f757621b3cd828f1356f9e1cdda9f5beb7d6e7c1dabeb31003d69b178cee8770640e525df25369142c3cc23464e5977223620f3be5b8aa6e917f733dd483e547522b27aeb97fc818d5075c4f7189df4eaa5cad0ca5aa17e641336e2c8ed89ff55fb4c042da9c1634dd5108f4e9a4b39baef5ae675517cb69ff8533e3f1504643336d545c51968b0b420a3cde85ca6a00365ff444393d3df368c6fd9dc11af08c0d6ca39c8a8b7b928647bbc6d04496c9ae8613f353d115ee7f662d1cdc976206bc837fbd928c3c11d0df51416aa9648b147cac932645e4626299e2d35a13e441087681758a4f3f714a42e2a74be90368218602fcbab14d8fa5bba073ef0716b88931da6553c6ec3f127c6da438790fd1217a3153ae34e09d0ced23438c7a3fe30f1331c59b4d3885f00418fb904b61f4c7e14265880cce9ec01f8774962991bcc1c8a0e4011efbcf4185a5b50f62a1161de974fc069bb0a72a4116e01d874a3eddbaf5a98025ef7e88fcde884e4d54361ccc55c7a3fc0c2afb6eceb9ec663eade20d052c693fb4ddae02e73e4dbffca6c505a56e65892a01b98167fa22636926bdb413cf100aae48ebde02cb6130b1a65ca5f03914f2fed9239af4ec1f6d4b71d90bc68bb1b4f656cf9395e8f5c2fbcf5c829e9266f0687e1fb7e523192f7851f94904cab4d30779d631cca0f5a965a6709207405069d9e544593d35d755f3a16d51b9c3db45fbd2e59fbee49b6c0662907b8fc0453e5b2f47fcf1eb2074a52a330a2fca13cb01f395f1100fd", 0xb90, &(0x7f0000000000), 0x0, 0x0) r1 = syz_clone(0xb5000, &(0x7f0000001200)="eb786acd3760d13ebff75d7a51c9d0af970b28ec821cdedad5aa1d101edc9226c0e48adeebb99f8ab22448a3747218626656192e0c094e9501e39e70191ba479123b392f095c4940a8e3b7b5a938c3f30ce709ada18e65f0b0c5258b5e1c726b117f47679582ae9b9d3679335b3105f7b1e02acff014b2f6a019a91266a7dddc359c83fb7dbbbf1c7f55ba76567980c239ed8b0254870c5efa03ea3cf09575ff8f50ff50b989ce3e2699418ed3b6f9b46e88db12f9499f8f8ea2823661e9a8232f1dcc904daa39d914abeb4e999f37d5d544159e7fffc331edf816d61e9a37ee5d44967dd0884bac4ed1ecef5e7268625cf4de0cf080639294335b76feeef9cfe535f2ff3978ea03859da45cc427d1680382231516d1364453fbc716819481971d102ef4fc36c56e8ad73481d664c67ae0f804b7c505fb561e29efd2df5fc354b163749c5f815d16caec5fe1aeef6c3265fbdbaac2c333f552a6a172ad371aad50479e89e1d45e6d3a40ab0fbf3143fb752cdeaed300eae4694f8d0925d1cdee1c153b2c4d60da901d10212aaea0a005d7ed407cf6d91a333b32b8a580289f6f501fe82fcb987e18f61d636a890cae7a1a7e8801a450973d5e3bb82355f90431fc8100d745c7058f99d43959a0c2a78e9de9641059186c84f4aa316b2fc4f167f8d4cc676cb568905582ee24bc2475b68ef8084b731575193d9792f357dc88f184136357c39d80eb35849db63b1f793e18e4336cca34d44c45ca8dd760f56d7399c8a451a87ad65c74d28b65595580b0ac43d6310a0b04da019d2f727b63ec052352102f4a3c0809136dbf39ed18e9842cde6c74eaf0f985f70c99e09c7bc458abcfc8120b9402f2ecaf20f23b7ee6b1b9783421a5c0ae34185751c9ec525804e0ff0bc968738a9d08b2f2027b3e343344354347359cf5dc73bb803b45521ab340101c49d83f1ac317f3e862dd441cab5659cd89be31882edd1ca9c287fb77bffa61e61d8452ec3473d76e14545af0b5112750f1ecf8bea6a843e69f017d9edd2a20e4e2cb1835ecdaaf2088e5af872a5484d720ef781462943fbedeb9322404068d49c2d441549bb37e2666aa5191f77960265ca1622d0e8db8bafe9fe343a85ce4758117030de8f73018277697ca42b8af6623516babc4558aa8aa009143def442c0a6ba55b753abed8c8de5e3c649fa015f01afadce9c3d6ee3bd28e7e7ceb91fdda6ecd4f47f229c695e086de3c8dacee4dfe341d955edb4c6a286bc1504c2e76d30576a2e380c4dd9272eb3cc38fde4b7d1ce64c9a8c6f884d2623f92e597b9d2a3c993b3bfc8d29c2f2ab2847fae1bbbdf0d0c346d69b865969af7f26cf2f4e2ae5d1c9fc26f882c68f4cbf7edecd810ba1d6f36558301e193e521480dca4d539e51c688dbb6ca6d9440a18376ca6b9cdabce64c701e9354a1b1841ed74a3db3a2b96d900b7ff7aa47eb68ad3e838e8fed126c7fb2d66ba17b5fae828d797a376c24a7f2c6e2c7125ac04772e091c1f5ce9983880193299c47ec67ffc3178416d2d8b9fc004643af64ce7647d2d6fd8d34bc2f6ff4ea3de1e3696dd54a5d5e59229f30980420db241edda225ffb2ed8ca8dac1213949b073c95375e17d917e1f8d59ba9e4d28791a1ff8076dc2479819773b5c442fd63bc0548b1ab9f08b0d14010dd66edc15863272ea4bc3bfc4042dbc94c319aacb62b339abef0a2f4e772ec6730fff211d89aba11480a9abe52716886e0c51b71ac15119ba4ccfd7ecf8a2782da70c3f0776035cd11a558d420e94893b47a3fb973705b3e75b55c386e7b47519d6a9646406f531e5cd30753117c771d3429b6d2828ba32426328a7a06aac1340fea1f38a447ff6d5506494b4ca6c2364e34d9b0ac96713d85f259d0176a4c0e7ce6f62b0b3b281f673925347eea5054bed1c904004226897f37a4e5f1fbf627610cb227210a38c35fa654faa83bbfb85cc3e26bddbd9c402204b82e4286ea3abe7a9196a62d8e9611eb8992cf8a171f8047ef3d8d0231ab13be56204073fd4cdf2afef1d62c8a5385263b3f1ea0fc3aedc73ab4af9435a59d2197ddfa2aa199188423c4734c0bba68fb7e5fd335611084c65edd5e32b325e2a856b9353576df29c455d05f3e980cc8785cdbca3c970dcf650d3388c49659c6400ec4615b15e1dee066bce33672f656bda03df42c6c2814e44121dca9d8f29d73a236a14c5248e72040bf65491aefd3a501580b024c982765425f46bd865181e5d2fe10869bdeaedbe0465775da7b55bd5f0089d5060a6343f8ef505546306154bdc91fb905f72dbf99c88ea4b0dd14432fedcef0cd2cef6c3a18e148c033bb788dec9e2f0e0a2779321edcf369a0b7400dd44daf6082733e93c4206a9c45160e1cf1e42ca7a2bf504c4378735f291f80ebb5f913cfc043ce7992dff4632130d9cc1114a0daef447e094876f1820fc7fd2cc6a6c4a85dab2c28becbafe1331880c49631dc0afcca79a8d66ef032339cbeccc04adcb93c937cc1b99c548749a857810dad0a4d6474bd266596afe33b05f24c4f073d145213699d2ce826d121f709b297a0d083ad1816f619cc86bb110d2831f4a809d3431df2a1fcc486e4cfbcd113c0d232951718fb65b9bf7c8aa7f6eaba03d7692a4058de9553c6b2a45020a1f5cd7bc126a375098a495eb363930368b7df3586c64a10e4921c5421c8e71faecd26889024cd170e94de60e0b6153a04b3da9350555c3f0139dea55e20efa31110153e89addd797969af0f488a037e3b429bdc4471668478645c859f0cce60b466edb1ff4b20dcf5f5aaad18c7b2d795c4745cc45927a326d9d6f61331b404701b7f4d910f56c84cc2cedc5a45f32e9213941048eb9b44a9b725e890ab45f1e2df1d3448198867927ea7e616b80c6fe3969fbea9452b2baf71d5f9dc45706cadc04669b8d63ce6372e0068f3d13a1d755995cd01f1186376e4545c8fac9dc953e1672a1ed90d0773d2f13b5c83ad4809acddfd6930648c262eee7e45d640e805af1b5eed4b0930bf9b789a39b90b0dd0dff9e9e7e94b97b63b56e327b5f116a59f592b87dfad7a6193f7657f11ac8c10f6c838c5285c32595deb9bf732380b0cf2d4612f3f04281f4781448fc986ad021199fa449411116258b9f45588eb683bf45244e23baf161e30e2f1467c1101809235de8f2c3a8d071ee6e36d4c833b558252a35ade80a0e545b6da5fb3f8f41254691ebe2372956c10e339789f5bf14b8407b0c7fb9aeb90ed2f9937c9bad6eda8d82104186d56d1355eac4947e8d63bf4bb408998899924f7e8c78bdc1d6d8964770b020681690ef5f9b05a26f9cae20b9b61c80ebb820c5d43448ec3394c96143c33d35b7c79d93d6f45b2a63c04c91759d84adda511b28bb59e5180dc433444b658734f6e62dddc839f6b5ba014c06880da7d8501629dcff7dd9e48b32948aa3762fecaeda01c5e688e4a3ece7dafe1c8faddec4147a8130d58169f3912b500ca3d8b6f87e2bd630e43f8dffa2892cf8d6b20e8092aababb77d67e89c44100b29d91b2c4c83b82a9514ba3d8bbfcea72ac6035c433921e57fc799827687ff3015b2f8b70d81dab3eb04fb4f670a143782e2cc8b9cfbff1b103bb38c1d8743d7605c322e70134fed72cea6062a7f3dcb5ac77c24e5535c7bd267640c2f7e9ab0418fa9b14ba0730bfdfc093fe09d88f8b2181a68dede2bcdd243f64d558bee762bd45d634365392235e3ffd4c52c2ba358845d6bb30ef8711385fdbf161f9b68c5f32d65f95483988581d3d1ed8a137abe7f2ea0259590ee457770a579157e562592cb85f88846e21c778a2c12170aafd4564bfbd261730d99b501e786d81a8ddf323b327867669681532e57874ec1d05fa77884a0477e35fd47fcf3eddb088cb975547c7fbf55f29edf23690f41e37926b1a8c896ae17bf90042656c9acb696efeffe5f8eac870d716709d18d837ac39134f20cdf1cd96c087ade71ec691bbe21c776ddad0f54b91f75c49ee4498b962c4287d1448e5432dec93ac707ab117399e9f3a6b1fc62336f4fb3f73774f0fd53ac5e3a6220f629d65dbff23402e1e207603b8d0e3aef1f075ae3524e911fe636e3dff84ed45258cb7dbdaaaba2c4f3d46c9cbab29434471d6ccde695521446b95f9ba70f2e5c7c50016df13f76ee8a85c075b009349b9a9e9fae6a606b2109c7fd918707f4d59a36ab4ab378a83b36e3a7a1c865ab9ee2534c6b4dfc5fef74562a0fe0542af32c24e2e40aaacb838838d2f6d6f77e23f1d568a39d18be33896726fa55df0d8f4dd02d27e68247ec1adc158c9668b30c703dda42f4d4698e7f91bddc3fa736bf9455880642e4328434f12ca489ef9c8fd7aff15ad8aa8f28a92952bf7ff858bb0c26775e50e30454b57f477ed464fcb8e94798f6c686d6523c499d3636dfd3d1e20b08c23a7f26b506b05c635bbc3cd4e13ed19d170c483a64c4c3fbd888fd560f5abad6f0e9827870326912400b9eb1d5177173d829e96e2fcb4081821e1f1016be8168ed65300265c65310d757822a4a6859315e8ec86f90a29029448e24f27dee94ecf3f64ed14cde1550e4fc31270b8e26700fef944b93cb411364c75e2ca268510b815d87c8b577839ff944e7b378ae08c4d184be4631f767832c7c985c6969560e1cb28704691c22bcf2de15ffabc55a5939fd8cf7b06128116ef7ebc096354fc1d9ccfee76da1dcf044a70dcd40e783ef8d81a612e3ec79a144c15dd28d2facf548a3a31bd21e7dcf2f3f5e4b49eb49d06d92c67d8b77180015827cac48fd7dffc0633d7d421c47fcc4d356d1535914da4fbde9ea464bb259326885a8ed5c1d53897018066c3c4ba1a8e7dda665751f59cb4a652894c2ca4a56ce6fd1909e52388b833b5d0809bee7437e80427f566278a062563d6612148d72f84dbc00a8185b655170aa7700ee2d278f6d43f9c8c1f73b8506350830ae1dafc94e99f2793bd11ba2a4881ff0580bd6090ba54a1f3647a0d371de7215032a9f179154138a1c09f4587348cc027d178c511832fb0907c06e77d380cc66bdb9b4e7b3b02647001dd1d238c3eb6812e0871a86ce13e2a08dbe29ac634d87b1bd547f9a29f233db9e8a59153e4bb6e340a8b2f55fa7e5c34a0df6e72c730918d39e3cce9c2b77032052a58ee159a0f3be68c88efcda133062c429e1ad0efff87793fb92eb36db5f57ce82422eeb62e03c38def86d58deb6e5fe0898c12fceebcba9f192d9ccdcd3604ccfaf2a97dc419eaf43875929299518bf51d567a6a54ff5c71750625d88189cf7d7276cedb2756049afdd2eead2352f57bd9be57f4afcb6a624e57c9eb4afc2d0cdfd86777142fe294e8b13b163fd13faf510d4436081da19e5192253cb8823acd0e5d794d525da822141ebcc7ccb6a88ccc813eb6c2bc195b15386218ff60bb6ad59206ee1c7a2a5f61ebf3e5cc70ffd662dcc8f3c7b87a7e537393674fe21eb45e261dac117ab024c3302d80af8bd23489f5725a33a0fcd411f5ec90de3dffc950b4048a5b60bb1b43c6a6175c04d2defad3f5271b262a65489253229e50a3fb3114f5eebf03d2ea1c8d3d2cacaece974a5261b5514250d96a1758cf5d3ff9991247aef9d8e1afaf83cecb516bd3103133d2a91bfec57212", 0xfa4, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000002200)="8d2cfdd5283e4c830cc0") tgkill(r0, r1, 0x7) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 15:16:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000007440)={0x14, 0x28, 0x1005, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) [ 2388.076431][T29146] usb 2-1: new high-speed USB device number 26 using dummy_hcd 15:16:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000007440)={0x14, 0x28, 0x1005, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 15:16:18 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:18 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1a, 0x4) bind$netlink(r0, &(0x7f0000000000), 0xc) [ 2388.446566][T29146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2388.457802][T29146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2388.468840][T29146] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 2388.478475][T29146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2388.493620][T29146] usb 2-1: config 0 descriptor?? [ 2389.636461][T29146] uclogic 0003:5543:0047.0214: failed retrieving string descriptor #200: -71 [ 2389.645448][T29146] uclogic 0003:5543:0047.0214: failed retrieving pen parameters: -71 [ 2389.654110][T29146] uclogic 0003:5543:0047.0214: failed probing pen v2 parameters: -71 [ 2389.662534][T29146] uclogic 0003:5543:0047.0214: failed probing parameters: -71 [ 2389.670228][T29146] uclogic: probe of 0003:5543:0047.0214 failed with error -71 [ 2389.681266][T29146] usb 2-1: USB disconnect, device number 26 15:16:20 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001ac0)=ANY=[@ANYBLOB="12010000000000404355470000000000000109022400010000000009040000010300000009210000000122290009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15:16:20 executing program 5: syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x405) write$dsp(r0, &(0x7f00000003c0)='\t', 0x1) r1 = syz_io_uring_setup(0x3ade, &(0x7f0000000340), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xf5ffffff) 15:16:20 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x5, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x208, 0x0, 0x3], 0x0, 0x80000}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x44, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:16:20 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:20 executing program 3: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10094) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x10523) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) sendmmsg(r0, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=';', 0x13800}], 0x1}}], 0x1, 0x0) 15:16:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/20, 0x14, 0xd571012c}, 0x12c) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[], 0x100000530) 15:16:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f00000008c0)={'filter\x00', 0xb001, 0x4, 0x410, 0x240, 0x0, 0x130, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d00"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8100000, 0x24, &(0x7f0000000200)=[{&(0x7f0000016300)="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", 0x1ee}, {&(0x7f0000010000)="6a4f0ba900000000000009000000000000000000000000000000000000000000da33867de3824163b5e0ea15c91cfb38000001000000000001000000000000005f42485266535f4d07000000000000000000d00100000000001050010000000000000000000000000000000000000000000000080000000000d00000000000000600000000000000010000000000000000100000001000000010000000100000810000000500000000000000000000000000000000000000000000004501000000000000000000000001000000000000000000000800000000000080050000000000100000001000000010000000000000000000000000000000000000000000000000000000000000000068ec300d682443b280c15683d9dd1cb1da33867de3824163b5e0ea15c91cfb3800"/312, 0x138, 0x10000}, {&(0x7f0000010200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\a\x00'/32, 0x20, 0x10220}, {&(0x7f0000010300)="00000000000000000000000001000000000000e400005001000000000000800000000000020000000000000000000100000000002200000000000000000001000000010000100000020001000100000000000000000050010000000068ec300d682443b280c15683d9dd1cb101000000000000000000d0010000000068ec300d682443b280c15683d9dd1cb10000000100000000002200000000000000000001000000010000100000020001000100000000000000000050010000000068ec300d682443b280c15683d9dd1cb101000000000000000000d0010000000068ec300d682443b280c15683d9dd1cb100"/254, 0xfe, 0x10320}, {&(0x7f0000010400)="00000000000000000000000090d001000000000500000000000000001050010000000005000000000000000070d0010000000005000000000000000000d0010000000004000000000000000080d0010000000005000000000000000040d00100000000040000000000000000000008000000000080000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0d0010000000006000000000000000010500100000000050000000000000000a0d00100000000060000000000000000b0d00100000000060000000000000000e0d0010000000006000000000000000030d001000000000600000000000000000000080000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000d001000000000700000000000000001050010000000005000000000000000010d00100000000070000000000000000b0d00100000000060000000000000000e0d0010000000006000000000000000030d001000000000600000000000000000000080000000000d000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000010d001000000000400000000000000000050010000000004000000000000000020d0010000000004000000000000000000d0010000000004000000000000000030d0010000000004000000000000000040d001000000000400000000000000000000080000000000800000000000000100"/638, 0x27e, 0x10b20}, {&(0x7f0000011d00)="000053bc645f000000000000", 0xc, 0x500c20}, {&(0x7f0000011e00)="0000000000000000000000000000000000000100"/30, 0x1e, 0x500c80}, {&(0x7f0000013400)="0000000000000000000000000000000000000000000000000000000002002e2e0300"/48, 0x30, 0x504f40}, {&(0x7f0000013500)="5cebd97b00000000000000000000000000000000000000000000000000000000da33867de3824163b5e0ea15c91cfb38000050010000000001000000000000012fb4e3c071b7474b9338dc78fa300fa50400000000000000030000000000000006000000000100000000000000d80100000000000000390f0000620000000001000000000000e40000100000000000e90e0000", 0x93, 0x1500000}, {&(0x7f0000013600)="00000000000000000000000000000000000200000000020000000000000000000100000000002400000000000000000001000000010000100000020001000100000000000000000050020000000068ec300d682443b280c15683d9dd1cb10100000000000000000050040000000068ec300d682443b280c15683d9dd1cb10000800000000000020000000000000000000100000000002200000000000000000001000000010000100000020001000100000000000000000050010000000068ec300d682443b280c15683d9dd1cb101000000000000000000d0010000000068ec300d682443b280c15683d9dd1cb100008000000000000200000000000000000001000000000001000000000000000000010000000100001000000100010001000000000000000000d0000000000068ec300d682443b280c15683d9dd1cb10000800000000000020000000000000000000100000000000400000000000000000001000000010000100000010001000100000000000000000050000000000068ec300d682443b280c15683d9dd1cb10000400000000000020000000000000000000100000000000200000000000000001000000010000000100000010000000100000000000000000010000000000068ec300d682443b280c15683d9dd1cb101000000000000000000000800000000000040060000000000100000001000000010000000000000000000000000000000000000000000000000000000000000000068ec300d682443b280c15683d9dd1cb1da33867de3824163b5e0ea15c91cfb38ac11ef1e00000000000000000000000000000000000000000000000000000000da33867de3824163b5e0ea15c91cfb38001050010000000001000000000000012fb4e3c071b7474b9338dc78fa300fa50500000000000000030000000000000004000000000100000000000000d80100000000000000390f0000620000000001000000000000e40000d00000000000e90e0000500000000001000000000000e40000500100000000790e0000700000000001000000000000e40000d00100000000090e0000700000000001000000000000e40000d00100000000090e0000700000000001000000000000e40000d00100000000b90d0000700000", 0x33a, 0x1500dc0}, {&(0x7f0000013a00)="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", 0x240, 0x1501dc0}, {&(0x7f0000013e00)="00000000000000000000000000000000000200000000020000000000000000000100000000002400000000000000000001000000010000100000020001000100000000000000000050020000000068ec300d682443b280c15683d9dd1cb10100000000000000000050040000000068ec300d682443b280c156", 0x79, 0x1d00dc3}, {&(0x7f0000014500)="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", 0x160, 0x2500000}, {&(0x7f0000014700)="0000000000000000000000000000000000000000040000000000000000010000000000000050d0010000000000000000000000000010000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000040000000000", 0x69, 0x2500560}, {&(0x7f0000014800)="0000000000000000000000040000000000000000000000000000000060d001000000000000000000000000001000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000004000000", 0x5e, 0x2500720}, {&(0x7f0000014900)="000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100000000", 0x3c, 0x2500840}, {&(0x7f0000014a00)="0000060000000000000000000000000000000030d0010000000000000000000000000010000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000060000000000000000", 0x5a, 0x25008e0}, {&(0x7f0000014b00)="00000000000000000000000000000000000000000000000000050000000000000084ffffffffffffffff0000000000000000000007000264656661756c74000000000000000002002e2e03000000000000000000000000000000000000000000000000100000000000000000000000000000010000000000000000000000ed410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000053bc645f000000000000000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed410000000000000000000000000080ffffffff", 0x132, 0x25009e0}, {&(0x7f0000014d00)="000000000000000000000600000000000000000100000000000000b0d00100000000000000000000000000300000000000000000000000000000000000000000000001000000000000000000000000000000000000000000010600000000000000cd69a5fa4312404a985677503928c3ec0000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000054bc645f000000004b03321c53bc645f00"/218, 0xda, 0x2500b60}, {&(0x7f0000014e00)="000000000000000000070064656661756c7401000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed4100"/84, 0x54, 0x2500c80}, {&(0x7f0000014f00)="0000000000000000000000000000000000000600000000000000000000000000000000e0d00100000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000600"/123, 0x7b, 0x2500d20}, {&(0x7f0000015000)="00000000000000000001000000000000000000000000000000030000000000000000100000000000000000000000000000010000000000000000000000ed41", 0x3f, 0x2500e40}, {&(0x7f0000015100)="000000000000000000070000000000000000000000000000000010d00100000000000000000000000000100000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000700", 0x5a, 0x2500ee0}, {&(0x7f0000015200)="4658e68800000000000000000000000000000000000000000000000000000000da33867de3824163b5e0ea15c91cfb380010d0010000000001000000000000012fb4e3c071b7474b9338dc78fa300fa5070000000000000002000000000000000e000000000000d00000000000a80030000000000000660f0000350000000000d00000000000c000008000000000004e0f0000180000000000500100000000c00000800000000000360f0000180000000010500100000000a90000000000000000150f0000210000000000d00100000000a90000000000000000f40e0000210000000000d00100000000c00000000200000000dc0e0000180000000010d00100000000a90000000000000000bb0e0000210000000020d00100000000a900000000000000009a0e0000210000000030d00100000000a90000000000000000790e0000210000000050d00100000000a90000000000000000580e0000210000000060d00100000000a90000000000000000370e00002100000000b0d00100000000a90100000000000000160e00002100000000c0d00100000000a90000000000000000f50d00002100000000e0d00100000000a90000000000000000d40d000021", 0x1c0, 0x2501000}, {&(0x7f0000015400)="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"/1038, 0x40e, 0x2501e20}, {&(0x7f0000015900)="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", 0x39b, 0x2502ca0}, {&(0x7f0000015e00)="c69f853800000000000000000000000000000000000000000000000000000000da33867de3824163b5e0ea15c91cfb380050d0010000000001000000000000012fb4e3c071b7474b9338dc78fa300fa50400000000000000f7ffffffffffffff02000000000001000000000000010000000000000000fb0e0000a000000000010000000000000c0001000000000000ef0e00000c", 0x94, 0x2505000}, {&(0x7f0000015f00)="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", 0x13b, 0x2505f40}, {&(0x7f0000000d40)="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", 0x168, 0x2506fe0}, {&(0x7f0000017700)="00000000000000000000000000000000000000000000000000010000000000000006000000000000000200000000000000b00400000000000000010000000000000006000000000000000200000000000000b00100000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00500000000000000010000000000000006000000000000000200000000000000b00200000000000000010000000000000004000000000000000200000000000000b00900000000000000010000000000000004000000000000000200000000000000b0f7ffffffffffffff010000000000000006000000000000000200000000000000b00700000000000000010000000000000006000000000000000200000000000000b00500000000000000009000000000000000010000000000002400000000000000010000000000000005000000000000000200000000000000b00300000000000000001000000000000000010000000000002200000000000000003000000000000000010000000000000100000000000000010000000000000006000000000000000100000000000000b2050000000000000005010000000000000000000000000000010000005f3fec2e00000000000000000000000000000000000000000000000000000000da33867de3824163b5e0ea15c91cfb3800b0d0010000000001000000000000012fb4e3c071b7474b9338dc78fa300fa506000000000000000500000000000000020000000100010000000000000100000000000000000020d001000000000600000000000000020100000000000001000000000000000000c0d0010000000006", 0x280, 0x250ae20}, {&(0x7f0000017a00)="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"/541, 0x21d, 0x250c000}, {&(0x7f0000017d00)="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", 0x9d8, 0x250c6e0}, {&(0x7f0000019300)="223e63d300000000000000000000000000000000000000000000000000000000da33867de3824163b5e0ea15c91cfb3800e0d0010000000001000000000000012fb4e3c071b7474b9338dc78fa300fa50600000000000000040000000000000006000000000000000000000000f90100000000000000730f0000280000000100000000000000cc0000d00000000000430f0000300000000100000000000000cc0000500100000000130f0000300000000100000000000000cc0000d00100000000e30e0000300000000100000000000000cc0000500200000000b30e0000300000000100000000000000cc0000500400000000830e000030", 0xf8, 0x250e000}, {&(0x7f0000019400)="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", 0x100, 0x250eee0}, {&(0x7f000001b000)="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", 0x3df, 0x4502ca0}, {&(0x7f000001b400)="00000000000000000000000000000000000000008941f9988941f9988941f9989f66c59100000000000000000000000000000000000000000000000000000000da33867de3824163b5e0ea15c91cfb380040d0010000000001000000000000012fb4e3c071b7474b9338dc78fa300fa504000000000000000700000000000000", 0x80, 0x4503fe0}], 0x0, &(0x7f0000000140)={[{@enospc_debug}, {@rescan_uuid_tree}, {@treelog}, {@space_cache_v2}, {@ssd}, {@datacow}, {@subvolid={'subvolid', 0x3d, 0x5}}, {@nossd}]}, 0x0) 15:16:21 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xb, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 15:16:21 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000880eff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80003, 0xe3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1) 15:16:21 executing program 0: clock_adjtime(0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9cb47176}) [ 2495.426308][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2495.433357][ C1] rcu: 0-...!: (0 ticks this GP) idle=6cfc/1/0x4000000000000000 softirq=128968/128968 fqs=0 [ 2495.443525][ C1] (detected by 1, t=10505 jiffies, g=165197, q=149 ncpus=2) [ 2495.450898][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2495.456106][ C0] NMI backtrace for cpu 0 [ 2495.456116][ C0] CPU: 0 PID: 1057 Comm: syz-executor.0 Not tainted 6.1.0-rc1-next-20221021-syzkaller #0 [ 2495.456137][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2495.456148][ C0] RIP: 0010:lock_acquire+0x219/0x630 [ 2495.456175][ C0] Code: b8 ff ff ff ff 65 0f c1 05 94 be a2 7e 83 f8 01 0f 85 3a 03 00 00 9c 58 f6 c4 02 0f 85 25 03 00 00 48 83 7c 24 08 00 74 01 fb <48> b8 00 00 00 00 00 fc ff df 48 01 c3 48 c7 03 00 00 00 00 48 c7 [ 2495.456193][ C0] RSP: 0018:ffffc90000007c30 EFLAGS: 00000046 [ 2495.456208][ C0] RAX: 0000000000000007 RBX: 1ffff92000000f89 RCX: 0000000000000000 [ 2495.456221][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8dc23410 [ 2495.456233][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8dc23417 [ 2495.456245][ C0] R10: fffffbfff1b84682 R11: 0000000000000001 R12: 0000000000000000 [ 2495.456257][ C0] R13: 0000000000000000 R14: ffffffff91164930 R15: 0000000000000000 [ 2495.456269][ C0] FS: 00005555568da400(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 2495.456287][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2495.456300][ C0] CR2: 00007f6029fb0000 CR3: 0000000023995000 CR4: 00000000003506f0 [ 2495.456313][ C0] Call Trace: [ 2495.456320][ C0] [ 2495.456329][ C0] ? lock_release+0x0/0x810 [ 2495.456349][ C0] ? lock_acquire+0x0/0x630 [ 2495.456367][ C0] ? do_raw_spin_lock+0x0/0x2a0 [ 2495.456388][ C0] ? debug_object_deactivate+0x264/0x300 [ 2495.456411][ C0] ? lock_release+0x0/0x810 [ 2495.456430][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 2495.456460][ C0] ? do_raw_spin_unlock+0x171/0x230 [ 2495.456484][ C0] _raw_spin_lock_irqsave+0x39/0x50 [ 2495.456577][ C0] ? debug_object_deactivate+0x101/0x300 [ 2495.456600][ C0] debug_object_deactivate+0x101/0x300 [ 2495.456623][ C0] ? debug_object_deactivate+0x0/0x300 [ 2495.456646][ C0] ? timerqueue_add+0x1be/0x330 [ 2495.456683][ C0] ? enqueue_hrtimer+0x1aa/0x470 [ 2495.456709][ C0] __hrtimer_run_queues+0x422/0xfb0 [ 2495.456739][ C0] ? __hrtimer_run_queues+0x0/0xfb0 [ 2495.456762][ C0] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 2495.456795][ C0] hrtimer_interrupt+0x31c/0x790 [ 2495.456826][ C0] __sysvec_apic_timer_interrupt+0x17c/0x640 [ 2495.456858][ C0] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 2495.456894][ C0] [ 2495.456900][ C0] [ 2495.456906][ C0] asm_sysvec_x86_platform_ipi-0xa/0x20 [ 2495.456962][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 [ 2495.456985][ C0] Code: 74 24 10 e8 fa 3e cc f7 48 89 ef e8 42 ab cc f7 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 f3 3f bf f7 65 8b 05 34 26 70 76 85 c0 74 0a 5b 5d c3 e8 60 9a [ 2495.457003][ C0] RSP: 0018:ffffc9000348fba8 EFLAGS: 00000206 [ 2495.457019][ C0] RAX: 0000000000000046 RBX: 0000000000000200 RCX: 1ffffffff1b84d21 [ 2495.457031][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 2495.457042][ C0] RBP: ffff8880b9a2a4c0 R08: 0000000000000000 R09: 0000000000000000 [ 2495.457054][ C0] R10: ffffed1017345498 R11: 0000000000000001 R12: ffffc9000348fcc0 [ 2495.457067][ C0] R13: ffff88808adf3a80 R14: 0000000000000000 R15: 0000000000000000 [ 2495.457087][ C0] futex_wait_queue+0x9b/0x1e0 [ 2495.457113][ C0] futex_wait+0x28e/0x680 [ 2495.457139][ C0] ? futex_wait+0x0/0x680 [ 2495.457160][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 2495.457188][ C0] ? lock_release+0x5cb/0x810 [ 2495.457207][ C0] ? __handle_mm_fault+0x2e5a/0x3dc0 [ 2495.457231][ C0] ? hrtimer_wakeup+0x0/0x60 [ 2495.457256][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 2495.457284][ C0] ? lock_release+0x5cb/0x810 [ 2495.457307][ C0] ? lock_release+0x5cb/0x810 [ 2495.457325][ C0] ? lock_acquire+0x0/0x630 [ 2495.457343][ C0] ? __x64_sys_futex+0x388/0x4a0 [ 2495.457366][ C0] ? lock_release+0x0/0x810 [ 2495.457387][ C0] do_futex+0x1af/0x300 [ 2495.457409][ C0] ? do_futex+0x0/0x300 [ 2495.457429][ C0] ? ktime_get+0x38a/0x470 [ 2495.457455][ C0] ? ktime_get+0x38a/0x470 [ 2495.457480][ C0] ? ktime_get+0x30b/0x470 [ 2495.457507][ C0] __x64_sys_futex+0x1b0/0x4a0 [ 2495.457532][ C0] ? __x64_sys_futex+0x0/0x4a0 [ 2495.457557][ C0] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2495.457576][ C0] ? trace_hardirqs_on+0x2d/0x180 [ 2495.457598][ C0] do_syscall_64+0x35/0xb0 [ 2495.457622][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2495.457648][ C0] RIP: 0033:0x7f6029a8b5f9 [ 2495.457669][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2495.457686][ C0] RSP: 002b:00007ffc28e90ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2495.457704][ C0] RAX: ffffffffffffffda RBX: 00007f6029babf8c RCX: 00007f6029a8b5f9 [ 2495.457717][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6029babf8c [ 2495.457729][ C0] RBP: 00007f6029babf80 R08: 00007ffc28fc5080 R09: 0000000000000000 [ 2495.457741][ C0] R10: 00007ffc28e90fb0 R11: 0000000000000246 R12: 0000000000247954 [ 2495.457753][ C0] R13: 00007ffc28e90fb0 R14: 00007ffc28e90fd0 R15: 0000000000000032 [ 2495.457772][ C0] [ 2495.458099][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10504 jiffies! g165197 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 2495.966574][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=165176 [ 2495.974552][ C1] rcu: rcu_preempt kthread starved for 10505 jiffies! g165197 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 2495.986011][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2495.995977][ C1] rcu: RCU grace-period kthread stack dump: [ 2496.001864][ C1] task:rcu_preempt state:I stack:29288 pid:16 ppid:2 flags:0x00004000 [ 2496.011122][ C1] Call Trace: [ 2496.014408][ C1] [ 2496.017360][ C1] __schedule+0xae9/0x53f0 [ 2496.021815][ C1] ? rcu_read_lock_sched_held+0xd/0x70 [ 2496.027299][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 2496.033122][ C1] ? trace_hardirqs_on+0x2d/0x180 [ 2496.038169][ C1] ? do_raw_spin_lock+0x0/0x2a0 [ 2496.043048][ C1] ? __schedule+0x0/0x53f0 [ 2496.047485][ C1] ? try_to_del_timer_sync+0x0/0x110 [ 2496.052789][ C1] ? __debug_object_init+0x0/0xd10 [ 2496.057915][ C1] ? lock_acquire+0x4fc/0x630 [ 2496.062607][ C1] schedule+0xda/0x1b0 [ 2496.066784][ C1] schedule_timeout+0x14a/0x2a0 [ 2496.071656][ C1] ? schedule_timeout+0x0/0x2a0 [ 2496.076523][ C1] ? process_timeout+0x0/0x40 [ 2496.081306][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 2496.087134][ C1] ? prepare_to_swait_event+0xee/0x480 [ 2496.092609][ C1] rcu_gp_fqs_loop+0x190/0x910 [ 2496.097389][ C1] ? rcu_gp_fqs_loop+0x0/0x910 [ 2496.102167][ C1] ? _raw_spin_lock_irqsave_nested-0xf/0x60 [ 2496.108077][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 2496.113895][ C1] rcu_gp_kthread+0x236/0x360 [ 2496.118584][ C1] ? rcu_gp_kthread+0x0/0x360 [ 2496.123280][ C1] ? __kthread_parkme+0x15f/0x220 [ 2496.128313][ C1] ? rcu_gp_kthread+0x0/0x360 [ 2496.133000][ C1] kthread+0x2e4/0x3a0 [ 2496.137078][ C1] ? kthread+0x0/0x3a0 [ 2496.141155][ C1] ret_from_fork+0x1f/0x30 [ 2496.145606][ C1] [ 2496.148627][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2496.154946][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2496.160154][ C0] NMI backtrace for cpu 0 [ 2496.160163][ C0] CPU: 0 PID: 1057 Comm: syz-executor.0 Not tainted 6.1.0-rc1-next-20221021-syzkaller #0 [ 2496.160184][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/11/2022 [ 2496.160195][ C0] RIP: 0010:kasan_depopulate_vmalloc_pte-0x10/0x70 [ 2496.160222][ C0] Code: 05 00 80 00 00 48 89 fb 48 39 c7 0f 82 85 b1 84 07 eb e1 cc cc cc cc cc cc cc 48 8b 0c 24 89 f6 31 d2 e9 83 f8 ff ff 0f 1f 00 <48> 8b 0c 24 89 f6 ba 01 00 00 00 e9 70 f8 ff ff 55 53 48 8b 07 48 [ 2496.160239][ C0] RSP: 0018:ffffc90000007d88 EFLAGS: 00000046 [ 2496.160255][ C0] RAX: 0000000000000001 RBX: 1ffff92000000fb3 RCX: ffffffff81601921 [ 2496.160268][ C0] RDX: ffffed1017345499 RSI: 0000000000000004 RDI: ffffc90000007db8 [ 2496.160280][ C0] RBP: ffff8880b9a2a4c0 R08: 0000000000000001 R09: ffff8880b9a2a4c3 [ 2496.160293][ C0] R10: ffffed1017345498 R11: 0000000000000001 R12: ffff8880b9a2a4c8 [ 2496.160305][ C0] R13: ffff8880b9a2a4d0 R14: ffff8880b9a2a4c0 R15: ffff88808a949340 [ 2496.160319][ C0] FS: 00005555568da400(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 2496.160336][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2496.160349][ C0] CR2: 00007f6029fb0000 CR3: 0000000023995000 CR4: 00000000003506f0 [ 2496.160361][ C0] Call Trace: [ 2496.160367][ C0] [ 2496.160373][ C0] do_raw_spin_lock+0x120/0x2a0 [ 2496.160396][ C0] ? do_raw_spin_lock+0x0/0x2a0 [ 2496.160417][ C0] ? advance_sched+0x507/0x9a0 [ 2496.160500][ C0] __hrtimer_run_queues+0x266/0xfb0 [ 2496.160530][ C0] ? __hrtimer_run_queues+0x0/0xfb0 [ 2496.160553][ C0] ? ktime_get_update_offsets_now+0x3eb/0x5c0 [ 2496.160586][ C0] hrtimer_interrupt+0x31c/0x790 [ 2496.160616][ C0] __sysvec_apic_timer_interrupt+0x17c/0x640 [ 2496.160640][ C0] sysvec_apic_timer_interrupt+0x8e/0xc0 [ 2496.160671][ C0] [ 2496.160676][ C0] [ 2496.160682][ C0] asm_sysvec_x86_platform_ipi-0xa/0x20 [ 2496.160715][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x38/0x70 [ 2496.160738][ C0] Code: 74 24 10 e8 fa 3e cc f7 48 89 ef e8 42 ab cc f7 81 e3 00 02 00 00 75 25 9c 58 f6 c4 02 75 2d 48 85 db 74 01 fb bf 01 00 00 00 f3 3f bf f7 65 8b 05 34 26 70 76 85 c0 74 0a 5b 5d c3 e8 60 9a [ 2496.160756][ C0] RSP: 0018:ffffc9000348fba8 EFLAGS: 00000206 [ 2496.160770][ C0] RAX: 0000000000000046 RBX: 0000000000000200 RCX: 1ffffffff1b84d21 [ 2496.160783][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 2496.160794][ C0] RBP: ffff8880b9a2a4c0 R08: 0000000000000000 R09: 0000000000000000 [ 2496.160806][ C0] R10: ffffed1017345498 R11: 0000000000000001 R12: ffffc9000348fcc0 [ 2496.160819][ C0] R13: ffff88808adf3a80 R14: 0000000000000000 R15: 0000000000000000 [ 2496.160839][ C0] futex_wait_queue+0x9b/0x1e0 [ 2496.160865][ C0] futex_wait+0x28e/0x680 [ 2496.160890][ C0] ? futex_wait+0x0/0x680 [ 2496.160913][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 2496.160941][ C0] ? lock_release+0x5cb/0x810 [ 2496.160961][ C0] ? __handle_mm_fault+0x2e5a/0x3dc0 [ 2496.160985][ C0] ? hrtimer_wakeup+0x0/0x60 [ 2496.161009][ C0] ? rcu_read_lock_sched_held+0xd/0x70 [ 2496.161038][ C0] ? lock_release+0x5cb/0x810 [ 2496.161061][ C0] ? lock_release+0x5cb/0x810 [ 2496.161079][ C0] ? lock_acquire+0x0/0x630 [ 2496.161098][ C0] ? __x64_sys_futex+0x388/0x4a0 [ 2496.161120][ C0] ? lock_release+0x0/0x810 [ 2496.161139][ C0] do_futex+0x1af/0x300 [ 2496.161163][ C0] ? do_futex+0x0/0x300 [ 2496.161183][ C0] ? ktime_get+0x38a/0x470 [ 2496.161209][ C0] ? ktime_get+0x38a/0x470 [ 2496.161234][ C0] ? ktime_get+0x30b/0x470 [ 2496.161260][ C0] __x64_sys_futex+0x1b0/0x4a0 [ 2496.161285][ C0] ? __x64_sys_futex+0x0/0x4a0 [ 2496.161311][ C0] ? syscall_enter_from_user_mode+0x22/0xb0 [ 2496.161330][ C0] ? trace_hardirqs_on+0x2d/0x180 [ 2496.161351][ C0] do_syscall_64+0x35/0xb0 [ 2496.161375][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2496.161400][ C0] RIP: 0033:0x7f6029a8b5f9 [ 2496.161416][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2496.161434][ C0] RSP: 002b:00007ffc28e90ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2496.161451][ C0] RAX: ffffffffffffffda RBX: 00007f6029babf8c RCX: 00007f6029a8b5f9 [ 2496.161463][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6029babf8c [ 2496.161476][ C0] RBP: 00007f6029babf80 R08: 00007ffc28fc5080 R09: 0000000000000000 [ 2496.161488][ C0] R10: 00007ffc28e90fb0 R11: 0000000000000246 R12: 0000000000247954 [ 2496.161500][ C0] R13: 00007ffc28e90fb0 R14: 00007ffc28e90fd0 R15: 0000000000000032 [ 2496.161519][ C0]