0c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 3) 06:27:23 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) (fail_nth: 4) [ 2995.580089][T18680] FAULT_INJECTION: forcing a failure. [ 2995.580089][T18680] name failslab, interval 1, probability 0, space 0, times 0 [ 2995.593124][T10656] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2995.600910][T18680] CPU: 0 PID: 18680 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller #0 [ 2995.609626][T18680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2995.619799][T18680] Call Trace: [ 2995.623114][T18680] [ 2995.626067][T18680] dump_stack_lvl+0x136/0x150 [ 2995.630782][T18680] should_fail_ex+0x4a3/0x5b0 [ 2995.635510][T18680] should_failslab+0x9/0x20 [ 2995.640045][T18680] __kmem_cache_alloc_node+0x5b/0x320 [ 2995.645464][T18680] ? __io_uring_add_tctx_node+0x131/0x520 [ 2995.651235][T18680] kmalloc_trace+0x26/0xe0 [ 2995.655691][T18680] __io_uring_add_tctx_node+0x131/0x520 [ 2995.661288][T18680] ? io_uring_alloc_task_context+0x630/0x630 [ 2995.667324][T18680] ? __fget_files+0x26a/0x480 [ 2995.672062][T18680] __io_uring_add_tctx_node_from_submit+0x8e/0x130 [ 2995.678613][T18680] __do_sys_io_uring_enter+0x1ef4/0x26e0 [ 2995.684287][T18680] ? wait_for_completion_io_timeout+0x20/0x20 [ 2995.690426][T18680] ? io_submit_sqes+0x1d00/0x1d00 [ 2995.695486][T18680] ? xfd_validate_state+0x5d/0x180 [ 2995.700631][T18680] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 2995.706574][T18680] ? kernel_fpu_begin_mask+0x270/0x270 [ 2995.712090][T18680] ? syscall_enter_from_user_mode+0x26/0x80 [ 2995.718035][T18680] do_syscall_64+0x39/0xb0 [ 2995.722586][T18680] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2995.728519][T18680] RIP: 0033:0x7ff97128c169 [ 2995.732962][T18680] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2995.752597][T18680] RSP: 002b:00007ff96fddd168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2995.761042][T18680] RAX: ffffffffffffffda RBX: 00007ff9713ac050 RCX: 00007ff97128c169 [ 2995.769039][T18680] RDX: 000000000000a005 RSI: 00000000000002ff RDI: 0000000000000003 [ 2995.777030][T18680] RBP: 00007ff96fddd1d0 R08: 0000000000000000 R09: 2000000000000012 [ 2995.785035][T18680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2995.793122][T18680] R13: 00007ff9714cfb1f R14: 00007ff96fddd300 R15: 0000000000022000 [ 2995.801143][T18680] [ 2996.005303][T10656] usb 6-1: device descriptor read/64, error 18 [ 2996.066418][T18687] FAULT_INJECTION: forcing a failure. [ 2996.066418][T18687] name failslab, interval 1, probability 0, space 0, times 0 [ 2996.089525][T18688] FAULT_INJECTION: forcing a failure. [ 2996.089525][T18688] name failslab, interval 1, probability 0, space 0, times 0 [ 2996.119461][T18687] CPU: 1 PID: 18687 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 2996.125305][T10656] usb usb6-port1: attempt power cycle [ 2996.128174][T18687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2996.128193][T18687] Call Trace: [ 2996.128201][T18687] [ 2996.128211][T18687] dump_stack_lvl+0x136/0x150 [ 2996.154532][T18687] should_fail_ex+0x4a3/0x5b0 [ 2996.159242][T18687] should_failslab+0x9/0x20 [ 2996.163750][T18687] __kmem_cache_alloc_node+0x5b/0x320 [ 2996.169128][T18687] ? io_wq_create+0x493/0xd80 [ 2996.173835][T18687] ? lockdep_init_map_type+0x21e/0x810 [ 2996.179298][T18687] kmalloc_node_trace+0x21/0xd0 [ 2996.184162][T18687] io_wq_create+0x493/0xd80 [ 2996.188701][T18687] io_uring_alloc_task_context+0x1e2/0x630 [ 2996.194552][T18687] ? __io_uring_free+0x170/0x170 [ 2996.199540][T18687] ? io_poll_issue+0xe0/0xe0 [ 2996.204156][T18687] ? io_alloc_async_data+0x160/0x160 [ 2996.209460][T18687] ? lock_downgrade+0x690/0x690 [ 2996.214339][T18687] __io_uring_add_tctx_node+0x2e1/0x520 [ 2996.219921][T18687] ? io_uring_alloc_task_context+0x630/0x630 [ 2996.225934][T18687] ? __fget_files+0x26a/0x480 [ 2996.231174][T18687] __io_uring_add_tctx_node_from_submit+0x8e/0x130 [ 2996.237708][T18687] __do_sys_io_uring_enter+0x1ef4/0x26e0 [ 2996.243381][T18687] ? wait_for_completion_io_timeout+0x20/0x20 [ 2996.249468][T18687] ? io_submit_sqes+0x1d00/0x1d00 [ 2996.254520][T18687] ? fput+0x2f/0x1a0 [ 2996.258437][T18687] ? ksys_write+0x1a3/0x250 [ 2996.262958][T18687] ? syscall_enter_from_user_mode+0x26/0x80 [ 2996.268879][T18687] do_syscall_64+0x39/0xb0 [ 2996.273329][T18687] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2996.279249][T18687] RIP: 0033:0x7faab828c169 [ 2996.283688][T18687] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2996.303309][T18687] RSP: 002b:00007faab8fcd168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2996.311742][T18687] RAX: ffffffffffffffda RBX: 00007faab83ac120 RCX: 00007faab828c169 [ 2996.319723][T18687] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000003 [ 2996.327702][T18687] RBP: 00007faab8fcd1d0 R08: 0000000000000000 R09: 2000000000000012 [ 2996.335683][T18687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2996.343675][T18687] R13: 00007faab84cfb1f R14: 00007faab8fcd300 R15: 0000000000022000 [ 2996.351670][T18687] [ 2996.385254][T18688] CPU: 0 PID: 18688 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller #0 [ 2996.393990][T18688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 2996.404069][T18688] Call Trace: [ 2996.407357][T18688] [ 2996.410292][T18688] dump_stack_lvl+0x136/0x150 [ 2996.414993][T18688] should_fail_ex+0x4a3/0x5b0 [ 2996.419671][T18688] should_failslab+0x9/0x20 [ 2996.424173][T18688] __kmem_cache_alloc_node+0x5b/0x320 [ 2996.429566][T18688] ? io_wq_create+0x493/0xd80 [ 2996.434247][T18688] kmalloc_node_trace+0x21/0xd0 [ 2996.439097][T18688] io_wq_create+0x493/0xd80 [ 2996.443615][T18688] io_uring_alloc_task_context+0x1e2/0x630 [ 2996.449441][T18688] ? __io_uring_free+0x170/0x170 [ 2996.454412][T18688] ? io_poll_issue+0xe0/0xe0 [ 2996.458999][T18688] ? io_alloc_async_data+0x160/0x160 [ 2996.464279][T18688] ? lock_downgrade+0x690/0x690 [ 2996.469157][T18688] __io_uring_add_tctx_node+0x2e1/0x520 [ 2996.474710][T18688] ? io_uring_alloc_task_context+0x630/0x630 [ 2996.480724][T18688] ? __fget_files+0x26a/0x480 [ 2996.485434][T18688] __io_uring_add_tctx_node_from_submit+0x8e/0x130 [ 2996.491976][T18688] __do_sys_io_uring_enter+0x1ef4/0x26e0 [ 2996.497629][T18688] ? wait_for_completion_io_timeout+0x20/0x20 [ 2996.503717][T18688] ? io_submit_sqes+0x1d00/0x1d00 [ 2996.508757][T18688] ? xfd_validate_state+0x5d/0x180 [ 2996.513892][T18688] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 2996.519791][T18688] ? kernel_fpu_begin_mask+0x270/0x270 [ 2996.525257][T18688] ? syscall_enter_from_user_mode+0x26/0x80 [ 2996.531167][T18688] do_syscall_64+0x39/0xb0 [ 2996.535600][T18688] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2996.541516][T18688] RIP: 0033:0x7f3b88a8c169 [ 2996.545932][T18688] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2996.566093][T18688] RSP: 002b:00007f3b897b1168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2996.574512][T18688] RAX: ffffffffffffffda RBX: 00007f3b88bac120 RCX: 00007f3b88a8c169 06:27:24 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r4, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:27:24 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 6) [ 2996.582476][T18688] RDX: 000000000000a005 RSI: 00000000000002ff RDI: 0000000000000003 [ 2996.590445][T18688] RBP: 00007f3b897b11d0 R08: 0000000000000000 R09: 2000000000000012 [ 2996.598412][T18688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2996.606466][T18688] R13: 00007f3b88ccfb1f R14: 00007f3b897b1300 R15: 0000000000022000 [ 2996.614458][T18688] [ 2996.695248][T10656] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2996.875456][T10656] usb 6-1: device descriptor read/8, error -61 [ 2997.145272][T10656] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2997.325382][T10656] usb 6-1: device descriptor read/8, error -61 [ 2997.445359][T10656] usb usb6-port1: unable to enumerate USB device [ 3001.035167][T10411] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 3001.455363][T10411] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3001.467844][T10411] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3001.478118][T10411] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3001.487604][T10411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3001.967089][T18696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3001.976460][T18696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3002.001557][T10411] wacom 0003:056A:0331.009D: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3002.214481][T18696] FAULT_INJECTION: forcing a failure. [ 3002.214481][T18696] name failslab, interval 1, probability 0, space 0, times 0 [ 3002.227170][T18696] CPU: 1 PID: 18696 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller #0 [ 3002.235876][T18696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3002.245963][T18696] Call Trace: [ 3002.249235][T18696] [ 3002.252161][T18696] dump_stack_lvl+0x136/0x150 [ 3002.256850][T18696] should_fail_ex+0x4a3/0x5b0 [ 3002.261662][T18696] should_failslab+0x9/0x20 [ 3002.266190][T18696] __kmem_cache_alloc_node+0x5b/0x320 [ 3002.271570][T18696] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 3002.276962][T18696] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 3002.282371][T18696] __kmalloc+0x4e/0x190 [ 3002.286583][T18696] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 3002.292257][T18696] tomoyo_encode2.part.0+0xe9/0x3a0 [ 3002.297473][T18696] ? tomoyo_realpath_from_path+0xc3/0x600 [ 3002.303209][T18696] ? rcu_is_watching+0x12/0xb0 [ 3002.307996][T18696] tomoyo_encode+0x2c/0x50 [ 3002.312442][T18696] tomoyo_realpath_from_path+0x185/0x600 [ 3002.318121][T18696] tomoyo_path_number_perm+0x217/0x570 [ 3002.323608][T18696] ? tomoyo_path_number_perm+0x1c1/0x570 [ 3002.329270][T18696] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3002.335104][T18696] ? find_held_lock+0x2d/0x110 [ 3002.339911][T18696] ? lock_downgrade+0x690/0x690 [ 3002.344896][T18696] ? wait_for_completion_io_timeout+0x20/0x20 [ 3002.351005][T18696] ? __fget_files+0x26a/0x480 [ 3002.355735][T18696] security_file_ioctl+0x54/0xb0 [ 3002.360711][T18696] __x64_sys_ioctl+0xb7/0x210 [ 3002.365421][T18696] do_syscall_64+0x39/0xb0 [ 3002.369892][T18696] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3002.375822][T18696] RIP: 0033:0x7f5639e8c169 [ 3002.380264][T18696] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3002.399938][T18696] RSP: 002b:00007f56389fe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3002.408379][T18696] RAX: ffffffffffffffda RBX: 00007f5639fabf80 RCX: 00007f5639e8c169 [ 3002.416455][T18696] RDX: 0000000000000000 RSI: 0000000050009417 RDI: 0000000000000005 [ 3002.424440][T18696] RBP: 00007f56389fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3002.432421][T18696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3002.440424][T18696] R13: 00007f563a0cfb1f R14: 00007f56389fe300 R15: 0000000000022000 [ 3002.448428][T18696] [ 3002.458811][T18696] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3002.470120][T12924] usb 4-1: USB disconnect, device number 36 06:27:31 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (fail_nth: 3) 06:27:31 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) (fail_nth: 5) 06:27:31 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 4) 06:27:31 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r4, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:27:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12f300000000efccaf100000000000000109022400011100000005dbf685751b30b0aa487e012201000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000000c0)={0x5, "2dc47cb5f8a8fc71869efd4ad8292383c6803e724bf727e0b20d5e7424839179fd690cee3988785115306e8f0528d45185f1b7cffd33de8d41c38ef72cde0479"}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000440)="1a00000002000000", 0x8) r3 = dup2(r2, r2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001400)=ANY=[@ANYRES32=0x0, @ANYBLOB="00001095"], 0xfde1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x0, 0x1, "de"}, 0x9) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000180)={0x6, "8605d17bd2ebf20cea4233b366bfa4b07d8e0939a107c144ed1218fb1e48716c8d25a020096a8101be8d6f32fb51ca311d43e2de242168d9b2de3f0bddc121bc"}) 06:27:31 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 7) [ 3003.232497][T18714] FAULT_INJECTION: forcing a failure. [ 3003.232497][T18714] name failslab, interval 1, probability 0, space 0, times 0 [ 3003.292008][T18715] FAULT_INJECTION: forcing a failure. [ 3003.292008][T18715] name failslab, interval 1, probability 0, space 0, times 0 [ 3003.305814][T18715] CPU: 1 PID: 18715 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller #0 [ 3003.314538][T18715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3003.324625][T18715] Call Trace: [ 3003.327922][T18715] [ 3003.330877][T18715] dump_stack_lvl+0x136/0x150 [ 3003.335180][T12924] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 3003.335593][T18715] should_fail_ex+0x4a3/0x5b0 [ 3003.335643][T18715] should_failslab+0x9/0x20 [ 3003.352545][T18715] __kmem_cache_alloc_node+0x5b/0x320 [ 3003.357926][T18715] ? __io_uring_add_tctx_node+0x131/0x520 [ 3003.363662][T18715] kmalloc_trace+0x26/0xe0 [ 3003.368077][T18715] __io_uring_add_tctx_node+0x131/0x520 [ 3003.373717][T18715] ? io_uring_alloc_task_context+0x630/0x630 [ 3003.379705][T18715] ? __fget_files+0x26a/0x480 [ 3003.384387][T18715] __io_uring_add_tctx_node_from_submit+0x8e/0x130 [ 3003.390894][T18715] __do_sys_io_uring_enter+0x1ef4/0x26e0 [ 3003.396524][T18715] ? wait_for_completion_io_timeout+0x20/0x20 [ 3003.402600][T18715] ? io_submit_sqes+0x1d00/0x1d00 [ 3003.407702][T18715] ? fput+0x2f/0x1a0 [ 3003.411601][T18715] ? ksys_write+0x1a3/0x250 [ 3003.416103][T18715] ? syscall_enter_from_user_mode+0x26/0x80 [ 3003.422016][T18715] do_syscall_64+0x39/0xb0 [ 3003.426488][T18715] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3003.432415][T18715] RIP: 0033:0x7faab828c169 [ 3003.436833][T18715] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3003.456446][T18715] RSP: 002b:00007faab8fcd168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3003.464860][T18715] RAX: ffffffffffffffda RBX: 00007faab83ac120 RCX: 00007faab828c169 [ 3003.472842][T18715] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000003 [ 3003.480809][T18715] RBP: 00007faab8fcd1d0 R08: 0000000000000000 R09: 2000000000000012 [ 3003.488777][T18715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3003.496740][T18715] R13: 00007faab84cfb1f R14: 00007faab8fcd300 R15: 0000000000022000 [ 3003.504728][T18715] [ 3003.512662][T18714] CPU: 0 PID: 18714 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller #0 [ 3003.521391][T18714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3003.531452][T18714] Call Trace: [ 3003.534725][T18714] [ 3003.537650][T18714] dump_stack_lvl+0x136/0x150 [ 3003.542325][T18714] should_fail_ex+0x4a3/0x5b0 [ 3003.547093][T18714] should_failslab+0x9/0x20 [ 3003.551601][T18714] __kmem_cache_alloc_node+0x5b/0x320 [ 3003.557062][T18714] ? io_wq_create+0x493/0xd80 [ 3003.561747][T18714] ? lockdep_init_map_type+0x21e/0x810 [ 3003.567211][T18714] kmalloc_node_trace+0x21/0xd0 [ 3003.572066][T18714] io_wq_create+0x493/0xd80 [ 3003.576574][T18714] io_uring_alloc_task_context+0x1e2/0x630 [ 3003.582392][T18714] ? __io_uring_free+0x170/0x170 [ 3003.587339][T18714] ? io_poll_issue+0xe0/0xe0 [ 3003.591925][T18714] ? io_alloc_async_data+0x160/0x160 [ 3003.597205][T18714] ? lock_downgrade+0x690/0x690 [ 3003.602055][T18714] __io_uring_add_tctx_node+0x2e1/0x520 [ 3003.607605][T18714] ? io_uring_alloc_task_context+0x630/0x630 [ 3003.613764][T18714] ? __fget_files+0x26a/0x480 [ 3003.618451][T18714] __io_uring_add_tctx_node_from_submit+0x8e/0x130 [ 3003.624971][T18714] __do_sys_io_uring_enter+0x1ef4/0x26e0 [ 3003.630611][T18714] ? wait_for_completion_io_timeout+0x20/0x20 [ 3003.636685][T18714] ? io_submit_sqes+0x1d00/0x1d00 [ 3003.641722][T18714] ? fput+0x2f/0x1a0 [ 3003.645623][T18714] ? ksys_write+0x1a3/0x250 [ 3003.650124][T18714] ? syscall_enter_from_user_mode+0x26/0x80 [ 3003.656041][T18714] do_syscall_64+0x39/0xb0 [ 3003.660496][T18714] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3003.666502][T18714] RIP: 0033:0x7f3b88a8c169 [ 3003.670939][T18714] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3003.690597][T18714] RSP: 002b:00007f3b897b1168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3003.699027][T18714] RAX: ffffffffffffffda RBX: 00007f3b88bac120 RCX: 00007f3b88a8c169 [ 3003.707008][T18714] RDX: 000000000000a005 RSI: 00000000000002ff RDI: 0000000000000003 [ 3003.714986][T18714] RBP: 00007f3b897b11d0 R08: 0000000000000000 R09: 2000000000000012 [ 3003.722968][T18714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3003.730945][T18714] R13: 00007f3b88ccfb1f R14: 00007f3b897b1300 R15: 0000000000022000 [ 3003.738950][T18714] 06:27:31 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 8) 06:27:31 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r4, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(0x0, r1, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:27:31 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) (fail_nth: 6) [ 3003.925207][T12924] usb 6-1: device descriptor read/64, error 18 06:27:32 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 5) [ 3004.195377][T12924] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 3004.282069][T18730] FAULT_INJECTION: forcing a failure. [ 3004.282069][T18730] name failslab, interval 1, probability 0, space 0, times 0 [ 3004.297272][T18730] CPU: 1 PID: 18730 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller #0 [ 3004.306003][T18730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3004.316060][T18730] Call Trace: [ 3004.319356][T18730] [ 3004.322307][T18730] dump_stack_lvl+0x136/0x150 [ 3004.326999][T18730] should_fail_ex+0x4a3/0x5b0 [ 3004.331717][T18730] should_failslab+0x9/0x20 [ 3004.336224][T18730] __kmem_cache_alloc_node+0x5b/0x320 [ 3004.341603][T18730] ? __io_uring_add_tctx_node+0x131/0x520 [ 3004.347345][T18730] kmalloc_trace+0x26/0xe0 [ 3004.351874][T18730] __io_uring_add_tctx_node+0x131/0x520 [ 3004.357427][T18730] ? io_uring_alloc_task_context+0x630/0x630 [ 3004.363435][T18730] ? __fget_files+0x26a/0x480 [ 3004.368128][T18730] __io_uring_add_tctx_node_from_submit+0x8e/0x130 [ 3004.374639][T18730] __do_sys_io_uring_enter+0x1ef4/0x26e0 [ 3004.380281][T18730] ? wait_for_completion_io_timeout+0x20/0x20 [ 3004.386366][T18730] ? io_submit_sqes+0x1d00/0x1d00 [ 3004.391424][T18730] ? fput+0x2f/0x1a0 [ 3004.395160][T12924] usb 6-1: device descriptor read/64, error 18 [ 3004.395309][T18730] ? ksys_write+0x1a3/0x250 [ 3004.395345][T18730] ? syscall_enter_from_user_mode+0x26/0x80 [ 3004.411881][T18730] do_syscall_64+0x39/0xb0 [ 3004.416307][T18730] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3004.422276][T18730] RIP: 0033:0x7f3b88a8c169 [ 3004.426707][T18730] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3004.446318][T18730] RSP: 002b:00007f3b897b1168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3004.454730][T18730] RAX: ffffffffffffffda RBX: 00007f3b88bac120 RCX: 00007f3b88a8c169 [ 3004.462698][T18730] RDX: 000000000000a005 RSI: 00000000000002ff RDI: 0000000000000003 [ 3004.470680][T18730] RBP: 00007f3b897b11d0 R08: 0000000000000000 R09: 2000000000000012 [ 3004.478641][T18730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3004.486616][T18730] R13: 00007f3b88ccfb1f R14: 00007f3b897b1300 R15: 0000000000022000 [ 3004.494787][T18730] [ 3004.517290][T12924] usb usb6-port1: attempt power cycle 06:27:32 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 9) 06:27:32 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r4, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) [ 3004.955300][T12924] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 3005.146866][T12924] usb 6-1: device descriptor read/8, error -61 [ 3005.415220][T12924] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 3005.615925][T12924] usb 6-1: device descriptor read/8, error -61 [ 3005.736732][T12924] usb usb6-port1: unable to enumerate USB device 06:27:38 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) 06:27:38 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) (fail_nth: 7) 06:27:38 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 6) 06:27:38 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r4, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:27:38 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 10) 06:27:38 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12f300000000efccaf100000000000000109022400011100000005dbf685751b30b0aa487e012201000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) (async) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000000c0)={0x5, "2dc47cb5f8a8fc71869efd4ad8292383c6803e724bf727e0b20d5e7424839179fd690cee3988785115306e8f0528d45185f1b7cffd33de8d41c38ef72cde0479"}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000440)="1a00000002000000", 0x8) r3 = dup2(r2, r2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001400)=ANY=[@ANYRES32=0x0, @ANYBLOB="00001095"], 0xfde1) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x0, 0x1, "de"}, 0x9) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000180)={0x6, "8605d17bd2ebf20cea4233b366bfa4b07d8e0939a107c144ed1218fb1e48716c8d25a020096a8101be8d6f32fb51ca311d43e2de242168d9b2de3f0bddc121bc"}) [ 3010.495231][T18716] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 3010.705292][T18716] usb 6-1: device descriptor read/64, error 18 [ 3011.015219][T18716] usb 6-1: new high-speed USB device number 59 using dummy_hcd 06:27:39 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 11) 06:27:39 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) (fail_nth: 8) 06:27:39 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r4, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:27:39 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 7) [ 3011.255310][T18716] usb 6-1: device descriptor read/64, error 18 [ 3011.375322][T18716] usb usb6-port1: attempt power cycle [ 3011.795661][T18716] usb 6-1: new high-speed USB device number 60 using dummy_hcd 06:27:40 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) (fail_nth: 9) [ 3012.025393][T18716] usb 6-1: device descriptor read/8, error -61 06:27:40 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) [ 3012.315323][T18716] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 3012.525400][T18716] usb 6-1: device descriptor read/8, error -61 [ 3012.645390][T18716] usb usb6-port1: unable to enumerate USB device [ 3016.805164][T18716] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 3017.195341][T18716] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3017.206551][T18716] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3017.216458][T18716] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3017.225599][T18716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3017.687870][T18782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3017.696843][T18782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3017.736383][T18716] wacom 0003:056A:0331.009E: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3017.932869][T12924] usb 4-1: USB disconnect, device number 37 06:27:46 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x2, 0x0) 06:27:46 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 12) 06:27:46 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:27:46 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 8) 06:27:46 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) (fail_nth: 10) 06:27:46 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12f300000000efccaf100000000000000109022400011100000005dbf685751b30b0aa487e012201000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000000c0)={0x5, "2dc47cb5f8a8fc71869efd4ad8292383c6803e724bf727e0b20d5e7424839179fd690cee3988785115306e8f0528d45185f1b7cffd33de8d41c38ef72cde0479"}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000440)="1a00000002000000", 0x8) r3 = dup2(r2, r2) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001400)=ANY=[@ANYRES32=0x0, @ANYBLOB="00001095"], 0xfde1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x0, 0x1, "de"}, 0x9) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000180)={0x6, "8605d17bd2ebf20cea4233b366bfa4b07d8e0939a107c144ed1218fb1e48716c8d25a020096a8101be8d6f32fb51ca311d43e2de242168d9b2de3f0bddc121bc"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12f300000000efccaf100000000000000109022400011100000005dbf685751b30b0aa487e012201000905810300"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) (async) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000000c0)={0x5, "2dc47cb5f8a8fc71869efd4ad8292383c6803e724bf727e0b20d5e7424839179fd690cee3988785115306e8f0528d45185f1b7cffd33de8d41c38ef72cde0479"}) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt(r2, 0x84, 0x81, &(0x7f0000000440)="1a00000002000000", 0x8) (async) dup2(r2, r2) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001400)=ANY=[@ANYRES32=0x0, @ANYBLOB="00001095"], 0xfde1) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x0, 0x1, "de"}, 0x9) (async) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000180)={0x6, "8605d17bd2ebf20cea4233b366bfa4b07d8e0939a107c144ed1218fb1e48716c8d25a020096a8101be8d6f32fb51ca311d43e2de242168d9b2de3f0bddc121bc"}) (async) [ 3018.765451][T18716] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 3018.975195][T18716] usb 6-1: device descriptor read/64, error 18 [ 3019.255187][T18716] usb 6-1: new high-speed USB device number 63 using dummy_hcd 06:27:47 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) (fail_nth: 11) 06:27:47 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 9) 06:27:47 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:27:47 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 13) [ 3019.465361][T18716] usb 6-1: device descriptor read/64, error 18 [ 3019.585342][T18716] usb usb6-port1: attempt power cycle [ 3020.015199][T18716] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 3020.225476][T18716] usb 6-1: device descriptor read/8, error -61 [ 3020.276704][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.284831][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:27:48 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 10) 06:27:48 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) [ 3020.505985][T18716] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 3020.715499][T18716] usb 6-1: device descriptor read/8, error -61 [ 3020.847268][T18716] usb usb6-port1: unable to enumerate USB device [ 3025.025180][T10656] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 3025.385340][T10656] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3025.397328][T10656] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3025.408063][T10656] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3025.417406][T10656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3025.896958][T18825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3025.905731][T18825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3025.946723][T10656] wacom 0003:056A:0331.009F: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3026.143632][T11105] usb 4-1: USB disconnect, device number 38 06:27:54 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x10, 0x0) 06:27:54 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 14) 06:27:54 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) (fail_nth: 12) 06:27:54 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:27:54 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 11) 06:27:54 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x1a}]}, 0x20}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001000)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) syz_usb_control_io(r1, &(0x7f0000001300)={0x2c, &(0x7f0000000ec0)={0x0, 0x5, 0xd7, {0xd7, 0x1, "7be6c6fec0f2d4489ec3ca61f9cc37a0a2f9d51a15901e77f78f7c7c80c97c60c0cbf5acdbf0b13002833078a1dd1179f3a83d1cfb348d51e594852b049e05900b5c86f2d629d746370b9ea57e4ac0f90570219ce2c575e087064d86a9dc120669afc70d22cd319e1034b87bdd8fa6ff26a9d82cd9c32fbdcc35bc4783570cc56c509b3ac31fcabeb31b6d0fa6633072564be6a77815efcfda3abece16f2d7ea9001ceaa816aa3f1af5cb22612e1adf93f6fc7a06f8662cfb933f00b4f3b5b013c4fe06717476e06712300c679c8e5429ab558c228"}}, &(0x7f0000001040)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "3c60c7082b95f52e2e22bb6601708960abb4ee8314f256eb046569469bb11256e5216b885049092adb92680a272a3da82fd0efbc53668f4ebea7bf59c7f8d5c99edc1a6a628f6e59c58f2f3c789d23d01a2f0141a96e0b1463754e7ce3b51528d32cfff67c1384e29f70984f23a13bd3f49905958a841201478b63d7cceff5b60564206aad92c9a34524a649f50c787ca9b831aa346794b5d773921dc4f9911a25eaa29a7650e304ec0b9c76a6c281f372e302b0fab4671f8aef8ea2af61272fbf086a53c8f52e1d2bd042"}}, &(0x7f0000001140)={0x0, 0xf, 0x1b5, {0x5, 0xf, 0x1b5, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "4dda3ec2bb79901fd3c58e1ca93f18af"}, @generic={0x99, 0x10, 0xb, "487ae286eea3f0a115100493cafb878ded10e70d5e68e828b107021cabf28cb1385528fc0de1ae0c5ae4f453f24dd41664e18bc729a68a67f9fbfb6a2d136709abedbb2cb07557c52d2353a0c94a990e26cf343bd6c2650859972b2c6e46ef714a9f0a2443a98aea8e07f1cb3a56a24e7e706b056965e7268de9bc5acca57c55ee8ea5524f591f7379d4f53ba31421460caf061ee3ea"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x2}, @generic={0xe4, 0x10, 0x3, "0bf5338a62b263434dc67dc193c7c8b4136af82121e74029c78b56071e778108400610ed11601866e9e66dc6d43e532a4dce6550b90d96b8b172ef4c1f8c627510a3fda14be588aa2f30077d0afa39e518d58d6784ea771e36747d36290946b0b60d66ab3e57eac64541087ef7b3c1995b7efceeaa95c1e25b8b7214f61300b9999c5bb29fd55cf0c5c6c093b2da0b5383a669c29cdab47537c2dedec77bebd058027c03bab710b89f804ad0fab49ea8a7a30fefee55680044adeadc6bec4cd51fdfbc351486a05712d7df1c20f4ed79da7d79ee22c412402e674573c7bed7a968"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x9, 0x32, 0x8, 0xe3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7, 0x86, 0x7}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb3, 0x2, 0x20, 0x7f, "f5a800bd", "7460578c"}}, &(0x7f0000000fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x81, 0x1, 0x40, 0x5, 0x3f}}}, &(0x7f0000001780)={0x84, &(0x7f0000001340)={0x40, 0x1, 0x3b, "8761078a8e899c28bfec66abcb5a245499591d3b0673db1e6e18657cc38b54dd3df1f2ba3712fe7a768b525cbdb1a465cd6b6b8ce6690610ceb63f"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001480)={0x20, 0x0, 0x8, {0x20, 0x2, [0xf0f]}}, &(0x7f00000014c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001500)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000001540)={0x40, 0xb, 0x2, "aed3"}, &(0x7f0000001580)={0x40, 0xf, 0x2, 0x66}, &(0x7f00000015c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001640)={0x40, 0x19, 0x2, "d350"}, &(0x7f0000001680)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f00000016c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001700)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f0000001740)={0x40, 0x21, 0x1, 0x8}}) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x74fb, 0x3, 0x1, {0x22, 0x858}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x20, 0x7, 0xfb}}}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x310, 0x8, 0x4, 0x1, 0x8, 0x6}, 0x5, &(0x7f0000000c80)={0x5, 0xf, 0x5}, 0x4, [{0x48, &(0x7f0000000cc0)=@string={0x48, 0x3, "9d49c8edd0cb92bea448214708f6224c3a35f26c8c71b8ec2f549bb862f9738d9d4ac9b90cb690e87f3f11d86a902ce33afad7b563f5b67d28d6ea83b627da8da85a94e50b7b"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x44b}}, {0x5c, &(0x7f0000000d80)=@string={0x5c, 0x3, "2587f3f00e8b37a8ada908efe29a6f1d2bd7535c71b43688c4ee1eb1597120388a0f117aa0832ef1c64eb0623e50c3f8331a72c401c8720c81d5c540ec3f9f06a2f7e5f1c2a13258aae2b89bf1290cb9cb9aed843b977df4e75b"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x1409}}]}) r3 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x350, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x52, 0xd0, 0x3f, [{{0x9, 0x4, 0x0, 0xb8, 0x1, 0x3, 0x1, 0x2, 0x7a, {0x9, 0x21, 0x9, 0x20, 0x1, {0x22, 0x464}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd7, 0x23, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1f, 0x7, 0x7}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1, 0x75, 0x1f, 0x10, 0x2}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "8b1e80252d3e8efeea81aa0a909fa932"}, @ptm_cap={0x3}]}, 0x5, [{0x71, &(0x7f0000000180)=@string={0x71, 0x3, "38ee396855fa13ef6d5e9c8ec5ed337a4bd122c1bc2004d55fed4d5f8fc454141957e68e52ddee4c746b5b960fc3d4a46787e8df0a9c78ae59fa8a2f354d0c90186147be59998b4bfcf0181f13b6a05bfc85e1464569a3ac7360c11c46b1c69e21b3a42cb311a1cc4cd4e5c350d2ff"}}, {0x84, &(0x7f0000000240)=@string={0x84, 0x3, "e5678e6797eb49ad6cd64bbee4d72049427ad7769ddf9c777699b5c6830f39fa0ef501ac41ee7d9cde5a63983a58cb277b8457443d20d087e853ae329092cf2ef9152c87ab22a563e321f7b460790f3d1bdf1228c0d2dfc59f86c4252a2c2d8b1f42759879f2eddb8676c06bae2485670602dced5b9ee2cd09822c030d3c745f8f04"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x400a}}, {0x42, &(0x7f0000000340)=@string={0x42, 0x3, "04c9b4ce5a4da9902a41080c67a408c6017529f630ae26bee3d571301a37433369dd5391f7a9b35d12ad9c7c1858f27eb3db19ead2b97945ead88fa71fc255b3"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io(r3, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x3, 0xb9, {0xb9, 0x9, "d86b221370dee7bd9fde630668ae43558ab36b9fde686e1ad39eca923a84273e9166798805a87f14e8938a88475f17fbbce405261d034336896a727a6d96f1a08b2eaca2a0e1cfc0aaef3d41ac710549133b6583900d0e3d0dd2ece1f3dc2513c814e1a0dd42c333551ea78fa1092ac4f7c47f4251e7ba281c461bd48edd519e96962a4aa262f5de6c52ec35955d415fc8eb45d1583d5fb715769693ee3db96913bfb88ae9db7f959720415b17c36a5b91fb17fa7a2358"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f00000005c0)={0x0, 0xf, 0x5b, {0x5, 0xf, 0x5b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x40, 0xfd, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x8, 0x5, 0x81, 0xfb}, @ssp_cap={0x1c, 0x10, 0xa, 0xda, 0x4, 0xffff, 0xf0f, 0x1000, [0x30, 0xff000f, 0x3f6f, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x40, 0x9, 0x20}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x3, 0x0, 0x9, [0xffff3f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0xe, 0x5}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x58, 0x8, 0x0, 0x7f, "b407f36e", "16e418cc"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x80, 0x6, 0x5, 0xfc, 0x756, 0xb73}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x20, 0x9, 0x3c, "b8749700796cfb57f13ee9b99d47962e113c39c3ac3e1b6b82acc4866b547d391a211f5c300579170e95724574a6615a016042c8af523bc02a7f575c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x20, 0x1, [0xfff0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000900)={0x40, 0xb, 0x2, "5fe8"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000980)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "42e9"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0xd8}}) [ 3026.975183][T10656] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 3027.185172][T10656] usb 6-1: device descriptor read/64, error 18 [ 3027.455183][T10656] usb 6-1: new high-speed USB device number 67 using dummy_hcd 06:27:55 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 15) 06:27:55 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:27:55 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) (fail_nth: 13) 06:27:55 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 12) [ 3027.665345][T10656] usb 6-1: device descriptor read/64, error 18 [ 3027.795577][T10656] usb usb6-port1: attempt power cycle [ 3028.205187][T10656] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 3028.395260][T10656] usb 6-1: device descriptor read/8, error -61 06:27:56 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:27:56 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) (fail_nth: 14) [ 3028.665393][T10656] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 3028.835231][T10656] usb 6-1: device descriptor read/8, error -61 [ 3028.955532][T10656] usb usb6-port1: unable to enumerate USB device [ 3035.295200][T17901] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 3035.675326][T17901] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3035.686424][T17901] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3035.696381][T17901] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3035.705599][T17901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3036.176785][T18867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3036.190351][T18867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3036.220560][T17901] wacom 0003:056A:0331.00A0: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3037.485178][T11105] usb 4-1: reset high-speed USB device number 39 using dummy_hcd 06:28:06 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x541b, 0x0) 06:28:06 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 16) 06:28:06 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 13) 06:28:06 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:06 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) (fail_nth: 15) 06:28:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x1a}]}, 0x20}}, 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001000)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) (async) syz_usb_control_io(r1, &(0x7f0000001300)={0x2c, &(0x7f0000000ec0)={0x0, 0x5, 0xd7, {0xd7, 0x1, "7be6c6fec0f2d4489ec3ca61f9cc37a0a2f9d51a15901e77f78f7c7c80c97c60c0cbf5acdbf0b13002833078a1dd1179f3a83d1cfb348d51e594852b049e05900b5c86f2d629d746370b9ea57e4ac0f90570219ce2c575e087064d86a9dc120669afc70d22cd319e1034b87bdd8fa6ff26a9d82cd9c32fbdcc35bc4783570cc56c509b3ac31fcabeb31b6d0fa6633072564be6a77815efcfda3abece16f2d7ea9001ceaa816aa3f1af5cb22612e1adf93f6fc7a06f8662cfb933f00b4f3b5b013c4fe06717476e06712300c679c8e5429ab558c228"}}, &(0x7f0000001040)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "3c60c7082b95f52e2e22bb6601708960abb4ee8314f256eb046569469bb11256e5216b885049092adb92680a272a3da82fd0efbc53668f4ebea7bf59c7f8d5c99edc1a6a628f6e59c58f2f3c789d23d01a2f0141a96e0b1463754e7ce3b51528d32cfff67c1384e29f70984f23a13bd3f49905958a841201478b63d7cceff5b60564206aad92c9a34524a649f50c787ca9b831aa346794b5d773921dc4f9911a25eaa29a7650e304ec0b9c76a6c281f372e302b0fab4671f8aef8ea2af61272fbf086a53c8f52e1d2bd042"}}, &(0x7f0000001140)={0x0, 0xf, 0x1b5, {0x5, 0xf, 0x1b5, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "4dda3ec2bb79901fd3c58e1ca93f18af"}, @generic={0x99, 0x10, 0xb, "487ae286eea3f0a115100493cafb878ded10e70d5e68e828b107021cabf28cb1385528fc0de1ae0c5ae4f453f24dd41664e18bc729a68a67f9fbfb6a2d136709abedbb2cb07557c52d2353a0c94a990e26cf343bd6c2650859972b2c6e46ef714a9f0a2443a98aea8e07f1cb3a56a24e7e706b056965e7268de9bc5acca57c55ee8ea5524f591f7379d4f53ba31421460caf061ee3ea"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x2}, @generic={0xe4, 0x10, 0x3, "0bf5338a62b263434dc67dc193c7c8b4136af82121e74029c78b56071e778108400610ed11601866e9e66dc6d43e532a4dce6550b90d96b8b172ef4c1f8c627510a3fda14be588aa2f30077d0afa39e518d58d6784ea771e36747d36290946b0b60d66ab3e57eac64541087ef7b3c1995b7efceeaa95c1e25b8b7214f61300b9999c5bb29fd55cf0c5c6c093b2da0b5383a669c29cdab47537c2dedec77bebd058027c03bab710b89f804ad0fab49ea8a7a30fefee55680044adeadc6bec4cd51fdfbc351486a05712d7df1c20f4ed79da7d79ee22c412402e674573c7bed7a968"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x9, 0x32, 0x8, 0xe3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7, 0x86, 0x7}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb3, 0x2, 0x20, 0x7f, "f5a800bd", "7460578c"}}, &(0x7f0000000fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x81, 0x1, 0x40, 0x5, 0x3f}}}, &(0x7f0000001780)={0x84, &(0x7f0000001340)={0x40, 0x1, 0x3b, "8761078a8e899c28bfec66abcb5a245499591d3b0673db1e6e18657cc38b54dd3df1f2ba3712fe7a768b525cbdb1a465cd6b6b8ce6690610ceb63f"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001480)={0x20, 0x0, 0x8, {0x20, 0x2, [0xf0f]}}, &(0x7f00000014c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001500)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000001540)={0x40, 0xb, 0x2, "aed3"}, &(0x7f0000001580)={0x40, 0xf, 0x2, 0x66}, &(0x7f00000015c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001640)={0x40, 0x19, 0x2, "d350"}, &(0x7f0000001680)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f00000016c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001700)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f0000001740)={0x40, 0x21, 0x1, 0x8}}) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x74fb, 0x3, 0x1, {0x22, 0x858}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x20, 0x7, 0xfb}}}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x310, 0x8, 0x4, 0x1, 0x8, 0x6}, 0x5, &(0x7f0000000c80)={0x5, 0xf, 0x5}, 0x4, [{0x48, &(0x7f0000000cc0)=@string={0x48, 0x3, "9d49c8edd0cb92bea448214708f6224c3a35f26c8c71b8ec2f549bb862f9738d9d4ac9b90cb690e87f3f11d86a902ce33afad7b563f5b67d28d6ea83b627da8da85a94e50b7b"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x44b}}, {0x5c, &(0x7f0000000d80)=@string={0x5c, 0x3, "2587f3f00e8b37a8ada908efe29a6f1d2bd7535c71b43688c4ee1eb1597120388a0f117aa0832ef1c64eb0623e50c3f8331a72c401c8720c81d5c540ec3f9f06a2f7e5f1c2a13258aae2b89bf1290cb9cb9aed843b977df4e75b"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x1409}}]}) r3 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x350, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x52, 0xd0, 0x3f, [{{0x9, 0x4, 0x0, 0xb8, 0x1, 0x3, 0x1, 0x2, 0x7a, {0x9, 0x21, 0x9, 0x20, 0x1, {0x22, 0x464}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd7, 0x23, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1f, 0x7, 0x7}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1, 0x75, 0x1f, 0x10, 0x2}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "8b1e80252d3e8efeea81aa0a909fa932"}, @ptm_cap={0x3}]}, 0x5, [{0x71, &(0x7f0000000180)=@string={0x71, 0x3, "38ee396855fa13ef6d5e9c8ec5ed337a4bd122c1bc2004d55fed4d5f8fc454141957e68e52ddee4c746b5b960fc3d4a46787e8df0a9c78ae59fa8a2f354d0c90186147be59998b4bfcf0181f13b6a05bfc85e1464569a3ac7360c11c46b1c69e21b3a42cb311a1cc4cd4e5c350d2ff"}}, {0x84, &(0x7f0000000240)=@string={0x84, 0x3, "e5678e6797eb49ad6cd64bbee4d72049427ad7769ddf9c777699b5c6830f39fa0ef501ac41ee7d9cde5a63983a58cb277b8457443d20d087e853ae329092cf2ef9152c87ab22a563e321f7b460790f3d1bdf1228c0d2dfc59f86c4252a2c2d8b1f42759879f2eddb8676c06bae2485670602dced5b9ee2cd09822c030d3c745f8f04"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x400a}}, {0x42, &(0x7f0000000340)=@string={0x42, 0x3, "04c9b4ce5a4da9902a41080c67a408c6017529f630ae26bee3d571301a37433369dd5391f7a9b35d12ad9c7c1858f27eb3db19ead2b97945ead88fa71fc255b3"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io(r3, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x3, 0xb9, {0xb9, 0x9, "d86b221370dee7bd9fde630668ae43558ab36b9fde686e1ad39eca923a84273e9166798805a87f14e8938a88475f17fbbce405261d034336896a727a6d96f1a08b2eaca2a0e1cfc0aaef3d41ac710549133b6583900d0e3d0dd2ece1f3dc2513c814e1a0dd42c333551ea78fa1092ac4f7c47f4251e7ba281c461bd48edd519e96962a4aa262f5de6c52ec35955d415fc8eb45d1583d5fb715769693ee3db96913bfb88ae9db7f959720415b17c36a5b91fb17fa7a2358"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f00000005c0)={0x0, 0xf, 0x5b, {0x5, 0xf, 0x5b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x40, 0xfd, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x8, 0x5, 0x81, 0xfb}, @ssp_cap={0x1c, 0x10, 0xa, 0xda, 0x4, 0xffff, 0xf0f, 0x1000, [0x30, 0xff000f, 0x3f6f, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x40, 0x9, 0x20}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x3, 0x0, 0x9, [0xffff3f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0xe, 0x5}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x58, 0x8, 0x0, 0x7f, "b407f36e", "16e418cc"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x80, 0x6, 0x5, 0xfc, 0x756, 0xb73}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x20, 0x9, 0x3c, "b8749700796cfb57f13ee9b99d47962e113c39c3ac3e1b6b82acc4866b547d391a211f5c300579170e95724574a6615a016042c8af523bc02a7f575c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x20, 0x1, [0xfff0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000900)={0x40, 0xb, 0x2, "5fe8"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000980)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "42e9"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0xd8}}) [ 3038.315206][T12924] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 3038.525189][T12924] usb 6-1: device descriptor read/64, error 18 [ 3038.805179][T12924] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 3038.856556][T18716] usb 4-1: USB disconnect, device number 39 06:28:07 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:07 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 17) 06:28:07 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 14) 06:28:07 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) (fail_nth: 16) [ 3039.005424][T12924] usb 6-1: device descriptor read/64, error 18 [ 3039.125375][T12924] usb usb6-port1: attempt power cycle [ 3039.545242][T12924] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 3039.745361][T12924] usb 6-1: device descriptor read/8, error -61 06:28:07 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:08 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 15) [ 3040.015255][T12924] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 3040.185331][T12924] usb 6-1: device descriptor read/8, error -61 [ 3040.325389][T12924] usb usb6-port1: unable to enumerate USB device [ 3046.705247][T12924] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 3047.085279][T12924] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3047.096595][T12924] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3047.106610][T12924] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3047.115884][T12924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3047.586677][T18923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3047.598421][T18923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3047.634334][T12924] wacom 0003:056A:0331.00A1: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3047.830416][T12924] usb 4-1: USB disconnect, device number 40 06:28:16 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) (fail_nth: 17) 06:28:16 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 18) 06:28:16 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:16 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) (fail_nth: 16) 06:28:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x1a}]}, 0x20}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001000)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) syz_usb_control_io(r1, &(0x7f0000001300)={0x2c, &(0x7f0000000ec0)={0x0, 0x5, 0xd7, {0xd7, 0x1, "7be6c6fec0f2d4489ec3ca61f9cc37a0a2f9d51a15901e77f78f7c7c80c97c60c0cbf5acdbf0b13002833078a1dd1179f3a83d1cfb348d51e594852b049e05900b5c86f2d629d746370b9ea57e4ac0f90570219ce2c575e087064d86a9dc120669afc70d22cd319e1034b87bdd8fa6ff26a9d82cd9c32fbdcc35bc4783570cc56c509b3ac31fcabeb31b6d0fa6633072564be6a77815efcfda3abece16f2d7ea9001ceaa816aa3f1af5cb22612e1adf93f6fc7a06f8662cfb933f00b4f3b5b013c4fe06717476e06712300c679c8e5429ab558c228"}}, &(0x7f0000001040)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "3c60c7082b95f52e2e22bb6601708960abb4ee8314f256eb046569469bb11256e5216b885049092adb92680a272a3da82fd0efbc53668f4ebea7bf59c7f8d5c99edc1a6a628f6e59c58f2f3c789d23d01a2f0141a96e0b1463754e7ce3b51528d32cfff67c1384e29f70984f23a13bd3f49905958a841201478b63d7cceff5b60564206aad92c9a34524a649f50c787ca9b831aa346794b5d773921dc4f9911a25eaa29a7650e304ec0b9c76a6c281f372e302b0fab4671f8aef8ea2af61272fbf086a53c8f52e1d2bd042"}}, &(0x7f0000001140)={0x0, 0xf, 0x1b5, {0x5, 0xf, 0x1b5, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "4dda3ec2bb79901fd3c58e1ca93f18af"}, @generic={0x99, 0x10, 0xb, "487ae286eea3f0a115100493cafb878ded10e70d5e68e828b107021cabf28cb1385528fc0de1ae0c5ae4f453f24dd41664e18bc729a68a67f9fbfb6a2d136709abedbb2cb07557c52d2353a0c94a990e26cf343bd6c2650859972b2c6e46ef714a9f0a2443a98aea8e07f1cb3a56a24e7e706b056965e7268de9bc5acca57c55ee8ea5524f591f7379d4f53ba31421460caf061ee3ea"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x2}, @generic={0xe4, 0x10, 0x3, "0bf5338a62b263434dc67dc193c7c8b4136af82121e74029c78b56071e778108400610ed11601866e9e66dc6d43e532a4dce6550b90d96b8b172ef4c1f8c627510a3fda14be588aa2f30077d0afa39e518d58d6784ea771e36747d36290946b0b60d66ab3e57eac64541087ef7b3c1995b7efceeaa95c1e25b8b7214f61300b9999c5bb29fd55cf0c5c6c093b2da0b5383a669c29cdab47537c2dedec77bebd058027c03bab710b89f804ad0fab49ea8a7a30fefee55680044adeadc6bec4cd51fdfbc351486a05712d7df1c20f4ed79da7d79ee22c412402e674573c7bed7a968"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x9, 0x32, 0x8, 0xe3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7, 0x86, 0x7}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb3, 0x2, 0x20, 0x7f, "f5a800bd", "7460578c"}}, &(0x7f0000000fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x81, 0x1, 0x40, 0x5, 0x3f}}}, &(0x7f0000001780)={0x84, &(0x7f0000001340)={0x40, 0x1, 0x3b, "8761078a8e899c28bfec66abcb5a245499591d3b0673db1e6e18657cc38b54dd3df1f2ba3712fe7a768b525cbdb1a465cd6b6b8ce6690610ceb63f"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001480)={0x20, 0x0, 0x8, {0x20, 0x2, [0xf0f]}}, &(0x7f00000014c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001500)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000001540)={0x40, 0xb, 0x2, "aed3"}, &(0x7f0000001580)={0x40, 0xf, 0x2, 0x66}, &(0x7f00000015c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001640)={0x40, 0x19, 0x2, "d350"}, &(0x7f0000001680)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f00000016c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001700)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f0000001740)={0x40, 0x21, 0x1, 0x8}}) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x74fb, 0x3, 0x1, {0x22, 0x858}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x20, 0x7, 0xfb}}}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x310, 0x8, 0x4, 0x1, 0x8, 0x6}, 0x5, &(0x7f0000000c80)={0x5, 0xf, 0x5}, 0x4, [{0x48, &(0x7f0000000cc0)=@string={0x48, 0x3, "9d49c8edd0cb92bea448214708f6224c3a35f26c8c71b8ec2f549bb862f9738d9d4ac9b90cb690e87f3f11d86a902ce33afad7b563f5b67d28d6ea83b627da8da85a94e50b7b"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x44b}}, {0x5c, &(0x7f0000000d80)=@string={0x5c, 0x3, "2587f3f00e8b37a8ada908efe29a6f1d2bd7535c71b43688c4ee1eb1597120388a0f117aa0832ef1c64eb0623e50c3f8331a72c401c8720c81d5c540ec3f9f06a2f7e5f1c2a13258aae2b89bf1290cb9cb9aed843b977df4e75b"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x1409}}]}) r3 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x350, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x52, 0xd0, 0x3f, [{{0x9, 0x4, 0x0, 0xb8, 0x1, 0x3, 0x1, 0x2, 0x7a, {0x9, 0x21, 0x9, 0x20, 0x1, {0x22, 0x464}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd7, 0x23, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1f, 0x7, 0x7}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1, 0x75, 0x1f, 0x10, 0x2}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "8b1e80252d3e8efeea81aa0a909fa932"}, @ptm_cap={0x3}]}, 0x5, [{0x71, &(0x7f0000000180)=@string={0x71, 0x3, "38ee396855fa13ef6d5e9c8ec5ed337a4bd122c1bc2004d55fed4d5f8fc454141957e68e52ddee4c746b5b960fc3d4a46787e8df0a9c78ae59fa8a2f354d0c90186147be59998b4bfcf0181f13b6a05bfc85e1464569a3ac7360c11c46b1c69e21b3a42cb311a1cc4cd4e5c350d2ff"}}, {0x84, &(0x7f0000000240)=@string={0x84, 0x3, "e5678e6797eb49ad6cd64bbee4d72049427ad7769ddf9c777699b5c6830f39fa0ef501ac41ee7d9cde5a63983a58cb277b8457443d20d087e853ae329092cf2ef9152c87ab22a563e321f7b460790f3d1bdf1228c0d2dfc59f86c4252a2c2d8b1f42759879f2eddb8676c06bae2485670602dced5b9ee2cd09822c030d3c745f8f04"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x400a}}, {0x42, &(0x7f0000000340)=@string={0x42, 0x3, "04c9b4ce5a4da9902a41080c67a408c6017529f630ae26bee3d571301a37433369dd5391f7a9b35d12ad9c7c1858f27eb3db19ead2b97945ead88fa71fc255b3"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io(r3, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x3, 0xb9, {0xb9, 0x9, "d86b221370dee7bd9fde630668ae43558ab36b9fde686e1ad39eca923a84273e9166798805a87f14e8938a88475f17fbbce405261d034336896a727a6d96f1a08b2eaca2a0e1cfc0aaef3d41ac710549133b6583900d0e3d0dd2ece1f3dc2513c814e1a0dd42c333551ea78fa1092ac4f7c47f4251e7ba281c461bd48edd519e96962a4aa262f5de6c52ec35955d415fc8eb45d1583d5fb715769693ee3db96913bfb88ae9db7f959720415b17c36a5b91fb17fa7a2358"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f00000005c0)={0x0, 0xf, 0x5b, {0x5, 0xf, 0x5b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x40, 0xfd, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x8, 0x5, 0x81, 0xfb}, @ssp_cap={0x1c, 0x10, 0xa, 0xda, 0x4, 0xffff, 0xf0f, 0x1000, [0x30, 0xff000f, 0x3f6f, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x40, 0x9, 0x20}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x3, 0x0, 0x9, [0xffff3f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0xe, 0x5}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x58, 0x8, 0x0, 0x7f, "b407f36e", "16e418cc"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x80, 0x6, 0x5, 0xfc, 0x756, 0xb73}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x20, 0x9, 0x3c, "b8749700796cfb57f13ee9b99d47962e113c39c3ac3e1b6b82acc4866b547d391a211f5c300579170e95724574a6615a016042c8af523bc02a7f575c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x20, 0x1, [0xfff0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000900)={0x40, 0xb, 0x2, "5fe8"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000980)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "42e9"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0xd8}}) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x1a}]}, 0x20}}, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001000)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) (async) syz_usb_control_io(r1, &(0x7f0000001300)={0x2c, &(0x7f0000000ec0)={0x0, 0x5, 0xd7, {0xd7, 0x1, "7be6c6fec0f2d4489ec3ca61f9cc37a0a2f9d51a15901e77f78f7c7c80c97c60c0cbf5acdbf0b13002833078a1dd1179f3a83d1cfb348d51e594852b049e05900b5c86f2d629d746370b9ea57e4ac0f90570219ce2c575e087064d86a9dc120669afc70d22cd319e1034b87bdd8fa6ff26a9d82cd9c32fbdcc35bc4783570cc56c509b3ac31fcabeb31b6d0fa6633072564be6a77815efcfda3abece16f2d7ea9001ceaa816aa3f1af5cb22612e1adf93f6fc7a06f8662cfb933f00b4f3b5b013c4fe06717476e06712300c679c8e5429ab558c228"}}, &(0x7f0000001040)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "3c60c7082b95f52e2e22bb6601708960abb4ee8314f256eb046569469bb11256e5216b885049092adb92680a272a3da82fd0efbc53668f4ebea7bf59c7f8d5c99edc1a6a628f6e59c58f2f3c789d23d01a2f0141a96e0b1463754e7ce3b51528d32cfff67c1384e29f70984f23a13bd3f49905958a841201478b63d7cceff5b60564206aad92c9a34524a649f50c787ca9b831aa346794b5d773921dc4f9911a25eaa29a7650e304ec0b9c76a6c281f372e302b0fab4671f8aef8ea2af61272fbf086a53c8f52e1d2bd042"}}, &(0x7f0000001140)={0x0, 0xf, 0x1b5, {0x5, 0xf, 0x1b5, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "4dda3ec2bb79901fd3c58e1ca93f18af"}, @generic={0x99, 0x10, 0xb, "487ae286eea3f0a115100493cafb878ded10e70d5e68e828b107021cabf28cb1385528fc0de1ae0c5ae4f453f24dd41664e18bc729a68a67f9fbfb6a2d136709abedbb2cb07557c52d2353a0c94a990e26cf343bd6c2650859972b2c6e46ef714a9f0a2443a98aea8e07f1cb3a56a24e7e706b056965e7268de9bc5acca57c55ee8ea5524f591f7379d4f53ba31421460caf061ee3ea"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x8, 0x2}, @generic={0xe4, 0x10, 0x3, "0bf5338a62b263434dc67dc193c7c8b4136af82121e74029c78b56071e778108400610ed11601866e9e66dc6d43e532a4dce6550b90d96b8b172ef4c1f8c627510a3fda14be588aa2f30077d0afa39e518d58d6784ea771e36747d36290946b0b60d66ab3e57eac64541087ef7b3c1995b7efceeaa95c1e25b8b7214f61300b9999c5bb29fd55cf0c5c6c093b2da0b5383a669c29cdab47537c2dedec77bebd058027c03bab710b89f804ad0fab49ea8a7a30fefee55680044adeadc6bec4cd51fdfbc351486a05712d7df1c20f4ed79da7d79ee22c412402e674573c7bed7a968"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x9, 0x32, 0x8, 0xe3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x7, 0x86, 0x7}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb3, 0x2, 0x20, 0x7f, "f5a800bd", "7460578c"}}, &(0x7f0000000fc0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x60, 0x81, 0x1, 0x40, 0x5, 0x3f}}}, &(0x7f0000001780)={0x84, &(0x7f0000001340)={0x40, 0x1, 0x3b, "8761078a8e899c28bfec66abcb5a245499591d3b0673db1e6e18657cc38b54dd3df1f2ba3712fe7a768b525cbdb1a465cd6b6b8ce6690610ceb63f"}, &(0x7f00000013c0)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000001400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000001480)={0x20, 0x0, 0x8, {0x20, 0x2, [0xf0f]}}, &(0x7f00000014c0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001500)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000001540)={0x40, 0xb, 0x2, "aed3"}, &(0x7f0000001580)={0x40, 0xf, 0x2, 0x66}, &(0x7f00000015c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000001640)={0x40, 0x19, 0x2, "d350"}, &(0x7f0000001680)={0x40, 0x1a, 0x2, 0x1ff}, &(0x7f00000016c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001700)={0x40, 0x1e, 0x1, 0xe0}, &(0x7f0000001740)={0x40, 0x21, 0x1, 0x8}}) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000c00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x596, 0x502, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x74fb, 0x3, 0x1, {0x22, 0x858}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x20, 0x7, 0xfb}}}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x310, 0x8, 0x4, 0x1, 0x8, 0x6}, 0x5, &(0x7f0000000c80)={0x5, 0xf, 0x5}, 0x4, [{0x48, &(0x7f0000000cc0)=@string={0x48, 0x3, "9d49c8edd0cb92bea448214708f6224c3a35f26c8c71b8ec2f549bb862f9738d9d4ac9b90cb690e87f3f11d86a902ce33afad7b563f5b67d28d6ea83b627da8da85a94e50b7b"}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x44b}}, {0x5c, &(0x7f0000000d80)=@string={0x5c, 0x3, "2587f3f00e8b37a8ada908efe29a6f1d2bd7535c71b43688c4ee1eb1597120388a0f117aa0832ef1c64eb0623e50c3f8331a72c401c8720c81d5c540ec3f9f06a2f7e5f1c2a13258aae2b89bf1290cb9cb9aed843b977df4e75b"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x1409}}]}) (async) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x350, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x52, 0xd0, 0x3f, [{{0x9, 0x4, 0x0, 0xb8, 0x1, 0x3, 0x1, 0x2, 0x7a, {0x9, 0x21, 0x9, 0x20, 0x1, {0x22, 0x464}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd7, 0x23, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x1f, 0x7, 0x7}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x1, 0x75, 0x1f, 0x10, 0x2}, 0x1c, &(0x7f0000000100)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "8b1e80252d3e8efeea81aa0a909fa932"}, @ptm_cap={0x3}]}, 0x5, [{0x71, &(0x7f0000000180)=@string={0x71, 0x3, "38ee396855fa13ef6d5e9c8ec5ed337a4bd122c1bc2004d55fed4d5f8fc454141957e68e52ddee4c746b5b960fc3d4a46787e8df0a9c78ae59fa8a2f354d0c90186147be59998b4bfcf0181f13b6a05bfc85e1464569a3ac7360c11c46b1c69e21b3a42cb311a1cc4cd4e5c350d2ff"}}, {0x84, &(0x7f0000000240)=@string={0x84, 0x3, "e5678e6797eb49ad6cd64bbee4d72049427ad7769ddf9c777699b5c6830f39fa0ef501ac41ee7d9cde5a63983a58cb277b8457443d20d087e853ae329092cf2ef9152c87ab22a563e321f7b460790f3d1bdf1228c0d2dfc59f86c4252a2c2d8b1f42759879f2eddb8676c06bae2485670602dced5b9ee2cd09822c030d3c745f8f04"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x400a}}, {0x42, &(0x7f0000000340)=@string={0x42, 0x3, "04c9b4ce5a4da9902a41080c67a408c6017529f630ae26bee3d571301a37433369dd5391f7a9b35d12ad9c7c1858f27eb3db19ead2b97945ead88fa71fc255b3"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x436}}]}) (async) syz_usb_control_io(r3, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x40, 0x3, 0xb9, {0xb9, 0x9, "d86b221370dee7bd9fde630668ae43558ab36b9fde686e1ad39eca923a84273e9166798805a87f14e8938a88475f17fbbce405261d034336896a727a6d96f1a08b2eaca2a0e1cfc0aaef3d41ac710549133b6583900d0e3d0dd2ece1f3dc2513c814e1a0dd42c333551ea78fa1092ac4f7c47f4251e7ba281c461bd48edd519e96962a4aa262f5de6c52ec35955d415fc8eb45d1583d5fb715769693ee3db96913bfb88ae9db7f959720415b17c36a5b91fb17fa7a2358"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f00000005c0)={0x0, 0xf, 0x5b, {0x5, 0xf, 0x5b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x40, 0xfd, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x28, 0x8, 0x5, 0x81, 0xfb}, @ssp_cap={0x1c, 0x10, 0xa, 0xda, 0x4, 0xffff, 0xf0f, 0x1000, [0x30, 0xff000f, 0x3f6f, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x40, 0x9, 0x20}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x3, 0x0, 0x9, [0xffff3f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0xe, 0x5}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x58, 0x8, 0x0, 0x7f, "b407f36e", "16e418cc"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x80, 0x6, 0x5, 0xfc, 0x756, 0xb73}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000700)={0x20, 0x9, 0x3c, "b8749700796cfb57f13ee9b99d47962e113c39c3ac3e1b6b82acc4866b547d391a211f5c300579170e95724574a6615a016042c8af523bc02a7f575c"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x20, 0x1, [0xfff0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000900)={0x40, 0xb, 0x2, "5fe8"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000980)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "42e9"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0xd8}}) (async) 06:28:16 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x5421, 0x0) [ 3048.622956][T18943] FAULT_INJECTION: forcing a failure. [ 3048.622956][T18943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3048.637291][T18943] CPU: 0 PID: 18943 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller #0 [ 3048.646015][T18943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3048.656065][T18943] Call Trace: [ 3048.659337][T18943] [ 3048.662279][T18943] dump_stack_lvl+0x136/0x150 [ 3048.666973][T18943] should_fail_ex+0x4a3/0x5b0 [ 3048.671684][T18943] copyout+0x19/0x120 [ 3048.675671][T18943] _copy_to_iter+0x21c/0x12b0 [ 3048.680344][T18943] ? lock_downgrade+0x690/0x690 [ 3048.685189][T18943] ? find_held_lock+0x2d/0x110 [ 3048.689960][T18943] ? _copy_from_iter_nocache+0xff0/0xff0 [ 3048.695603][T18943] ? finish_task_switch.isra.0+0x2b5/0xc80 [ 3048.701440][T18943] ? __virt_addr_valid+0x61/0x2e0 [ 3048.706467][T18943] ? __phys_addr+0xc8/0x140 [ 3048.710968][T18943] ? folio_flags.constprop.0+0x53/0x150 [ 3048.716568][T18943] ? __phys_addr_symbol+0x30/0x70 [ 3048.721596][T18943] ? __check_object_size+0x333/0x6e0 [ 3048.726877][T18943] simple_copy_to_iter+0x50/0x70 [ 3048.731842][T18943] __skb_datagram_iter+0x4a5/0x770 [ 3048.736969][T18943] ? skb_copy_and_hash_datagram_iter+0x50/0x50 [ 3048.743120][T18943] skb_copy_datagram_iter+0xa1/0x200 [ 3048.748427][T18943] tcp_recvmsg_locked+0xfaf/0x22e0 [ 3048.753615][T18943] ? tcp_update_recv_tstamps+0x230/0x230 [ 3048.759287][T18943] ? __local_bh_enable_ip+0xac/0x130 [ 3048.764594][T18943] tcp_recvmsg+0x117/0x620 [ 3048.769052][T18943] ? tcp_recv_timestamp+0x6e0/0x6e0 [ 3048.774288][T18943] ? aa_sk_perm+0x31d/0xb10 [ 3048.778805][T18943] ? print_usage_bug.part.0+0x660/0x660 [ 3048.784373][T18943] inet_recvmsg+0x114/0x640 [ 3048.788912][T18943] ? inet_sendpage+0x140/0x140 [ 3048.793693][T18943] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 3048.798999][T18943] ? security_socket_recvmsg+0x93/0xc0 [ 3048.804508][T18943] ? inet_sendpage+0x140/0x140 [ 3048.809290][T18943] sock_recvmsg+0xe2/0x160 [ 3048.813731][T18943] sock_read_iter+0x2bd/0x3b0 [ 3048.818428][T18943] ? sock_recvmsg+0x160/0x160 [ 3048.823154][T18943] ? sock_recvmsg+0x160/0x160 [ 3048.827853][T18943] io_read+0x323/0x1420 [ 3048.832034][T18943] ? find_held_lock+0x2d/0x110 [ 3048.836828][T18943] ? io_writev_prep_async+0x270/0x270 [ 3048.842235][T18943] ? __fget_files+0x26a/0x480 [ 3048.846947][T18943] ? rcu_is_watching+0x12/0xb0 [ 3048.851744][T18943] ? io_writev_prep_async+0x270/0x270 [ 3048.857136][T18943] io_issue_sqe+0x15d/0xd20 [ 3048.861659][T18943] io_submit_sqes+0x948/0x1d00 [ 3048.866456][T18943] __do_sys_io_uring_enter+0x975/0x26e0 [ 3048.872022][T18943] ? wait_for_completion_io_timeout+0x20/0x20 [ 3048.878110][T18943] ? io_submit_sqes+0x1d00/0x1d00 [ 3048.883248][T18943] ? fput+0x2f/0x1a0 [ 3048.887158][T18943] ? ksys_write+0x1a3/0x250 [ 3048.891677][T18943] ? syscall_enter_from_user_mode+0x26/0x80 [ 3048.897592][T18943] do_syscall_64+0x39/0xb0 [ 3048.902036][T18943] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3048.907956][T18943] RIP: 0033:0x7ff97128c169 [ 3048.912382][T18943] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3048.932000][T18943] RSP: 002b:00007ff96fdbc168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3048.940430][T18943] RAX: ffffffffffffffda RBX: 00007ff9713ac120 RCX: 00007ff97128c169 [ 3048.948410][T18943] RDX: 000000000000a005 RSI: 00000000000002ff RDI: 0000000000000003 [ 3048.956388][T18943] RBP: 00007ff96fdbc1d0 R08: 0000000000000000 R09: 2000000000000012 [ 3048.964371][T18943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3048.972349][T18943] R13: 00007ff9714cfb1f R14: 00007ff96fdbc300 R15: 0000000000022000 [ 3048.980347][T18943] [ 3048.987665][T12924] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 3049.205236][T12924] usb 6-1: device descriptor read/64, error 18 06:28:17 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) 06:28:17 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:17 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:17 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) [ 3049.475466][T12924] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 3049.685156][T12924] usb 6-1: device descriptor read/64, error 18 [ 3049.805377][T12924] usb usb6-port1: attempt power cycle [ 3050.215410][T12924] usb 6-1: new high-speed USB device number 76 using dummy_hcd 06:28:18 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:18 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x2000000000000012) [ 3050.405327][T12924] usb 6-1: device descriptor read/8, error -61 06:28:18 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:18 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2, 0xa005, 0x0, 0x0, 0x2000000000000012) [ 3050.675330][T12924] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 3050.855469][T12924] usb 6-1: device descriptor read/8, error -61 [ 3050.975528][T12924] usb usb6-port1: unable to enumerate USB device 06:28:19 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000111000000090400000103010000092100060101220100090581034f089eb6715c4db35149b530052a261879601fe7c287fe428b0f2fbc8778224f132182def43060a81a2d1cfb60b34a28a837be86679b34fb47750b3f51b234e38095324507da8c5559f3da553555a4171ebba744e0fbce2dde03152604f7c295accb095fd876d60a90c47a8364eda989d03be8ce6f131b229a4d144567b97d84dfae2e5e0bf0fcf946569d50c15dc33da5aaadccfae90534f58ab673e58452207c7c88"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) 06:28:19 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) [ 3051.845235][T12924] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 3052.215432][T12924] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 158, changing to 11 [ 3052.247612][T12924] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3052.264712][T12924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3052.769115][T12924] wacom 0003:056A:0331.00A2: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3052.977381][ T5171] usb 6-1: USB disconnect, device number 78 [ 3056.945151][ T7542] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 3057.305304][ T7542] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3057.316500][ T7542] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3057.326830][ T7542] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3057.336102][ T7542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3057.806980][T18990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3057.816045][T18990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3057.849314][ T7542] wacom 0003:056A:0331.00A3: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3058.051969][T12924] usb 4-1: USB disconnect, device number 41 06:28:26 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x5450, 0x0) 06:28:26 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa008, 0x0, 0x0, 0x2000000000000012) 06:28:26 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa008, 0x0, 0x0, 0x2000000000000012) 06:28:26 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:26 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x2, 0x0, 0x0, 0x2000000000000012) 06:28:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000111000000090400000103010000092100060101220100090581034f089eb6715c4db35149b530052a261879601fe7c287fe428b0f2fbc8778224f132182def43060a81a2d1cfb60b34a28a837be86679b34fb47750b3f51b234e38095324507da8c5559f3da553555a4171ebba744e0fbce2dde03152604f7c295accb095fd876d60a90c47a8364eda989d03be8ce6f131b229a4d144567b97d84dfae2e5e0bf0fcf946569d50c15dc33da5aaadccfae90534f58ab673e58452207c7c88"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (rerun: 32) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) [ 3058.865251][T18716] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 3059.315358][T18716] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 158, changing to 11 [ 3059.410356][T18716] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 06:28:27 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa014, 0x0, 0x0, 0x2000000000000012) 06:28:27 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) [ 3059.464352][T18716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:28:27 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x5, 0x0, 0x0, 0x2000000000000012) 06:28:27 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa014, 0x0, 0x0, 0x2000000000000012) [ 3059.974709][T18716] wacom 0003:056A:0331.00A4: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 06:28:28 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:28 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x2, 0x0, 0x2000000000000012) [ 3061.593372][T17901] usb 6-1: USB disconnect, device number 79 [ 3065.105181][ T7542] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 3065.465307][ T7542] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3065.481793][ T7542] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3065.491793][ T7542] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3065.501119][ T7542] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3065.977257][T19039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3065.986037][T19039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3066.005399][ T7542] wacom 0003:056A:0331.00A5: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3066.203728][ T7542] usb 4-1: USB disconnect, device number 42 06:28:34 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x5451, 0x0) 06:28:34 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x6, 0x0, 0x0, 0x2000000000000012) 06:28:34 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:34 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x2, 0x0, 0x2000000000000012) 06:28:34 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x5, 0x0, 0x2000000000000012) 06:28:34 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000111000000090400000103010000092100060101220100090581034f089eb6715c4db35149b530052a261879601fe7c287fe428b0f2fbc8778224f132182def43060a81a2d1cfb60b34a28a837be86679b34fb47750b3f51b234e38095324507da8c5559f3da553555a4171ebba744e0fbce2dde03152604f7c295accb095fd876d60a90c47a8364eda989d03be8ce6f131b229a4d144567b97d84dfae2e5e0bf0fcf946569d50c15dc33da5aaadccfae90534f58ab673e58452207c7c88"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000406a053103400000000001090224000111000000090400000103010000092100060101220100090581034f089eb6715c4db35149b530052a261879601fe7c287fe428b0f2fbc8778224f132182def43060a81a2d1cfb60b34a28a837be86679b34fb47750b3f51b234e38095324507da8c5559f3da553555a4171ebba744e0fbce2dde03152604f7c295accb095fd876d60a90c47a8364eda989d03be8ce6f131b229a4d144567b97d84dfae2e5e0bf0fcf946569d50c15dc33da5aaadccfae90534f58ab673e58452207c7c88"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) [ 3066.756151][T19049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3066.803664][T19049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3067.015285][ T7542] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 3067.425299][ T7542] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 158, changing to 11 [ 3067.465720][ T7542] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3067.543132][ T7542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:28:35 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r4, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:35 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x5, 0x0, 0x2000000000000012) 06:28:35 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x6, 0x0, 0x2000000000000012) 06:28:35 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x7, 0x0, 0x0, 0x2000000000000012) [ 3067.945314][ T7542] usbhid 6-1:17.0: can't add hid device: -71 [ 3067.951446][ T7542] usbhid: probe of 6-1:17.0 failed with error -71 [ 3067.984643][ T7542] usb 6-1: USB disconnect, device number 80 06:28:36 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000040)) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) 06:28:36 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r4, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) [ 3068.655225][T10656] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 3069.065316][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3069.076371][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3069.086332][T10656] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3069.095543][T10656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3069.591421][T10656] wacom 0003:056A:0331.00A6: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3069.786393][T10656] usb 6-1: USB disconnect, device number 81 [ 3075.365285][T10656] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 3075.725246][T10656] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3075.736455][T10656] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3075.746640][T10656] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3075.755870][T10656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3076.227618][T19085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3076.237947][T19085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3076.268680][T10656] wacom 0003:056A:0331.00A7: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3076.460375][T10656] usb 4-1: USB disconnect, device number 43 06:28:45 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x5452, 0x0) 06:28:45 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xc, 0x0, 0x0, 0x2000000000000012) 06:28:45 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x6, 0x0, 0x2000000000000012) 06:28:45 executing program 0: syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r4, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r0, r1, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:45 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x7, 0x0, 0x2000000000000012) 06:28:45 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000040)) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) [ 3077.475175][ T7542] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 3077.845298][ T7542] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3077.892497][ T7542] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3077.957660][ T7542] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3077.975146][ T7542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:28:46 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x7, 0x0, 0x2000000000000012) 06:28:46 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xf, 0x0, 0x0, 0x2000000000000012) 06:28:46 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x8, 0x0, 0x2000000000000012) 06:28:46 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x0, 0xa005, 0x0, 0x0, 0x2000000000000012) [ 3078.329614][ T7542] wacom 0003:056A:0331.00A8: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3078.526666][T17901] usb 6-1: USB disconnect, device number 82 06:28:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000040)) (async) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) 06:28:47 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0xc, 0x0, 0x2000000000000012) [ 3079.325191][T12924] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 3079.696280][T12924] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3079.707393][T12924] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3079.717803][T12924] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3079.727166][T12924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3080.221676][T12924] wacom 0003:056A:0331.00A9: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3080.421293][T18716] usb 6-1: USB disconnect, device number 83 [ 3081.716490][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.722834][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 [ 3085.825249][T18058] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 3086.185244][T18058] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3086.196693][T18058] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3086.207362][T18058] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3086.216863][T18058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3086.690054][T19133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3086.699544][T19133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3086.731487][T18058] wacom 0003:056A:0331.00AA: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3086.937916][T18716] usb 4-1: USB disconnect, device number 44 06:28:55 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x5460, 0x0) 06:28:55 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x0, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:55 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0xc, 0x0, 0x2000000000000012) 06:28:55 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x12, 0x0, 0x0, 0x2000000000000012) 06:28:55 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0xf, 0x0, 0x2000000000000012) 06:28:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0xc4a, &(0x7f0000001780)={{0x12, 0x1, 0x0, 0xf2, 0x9e, 0xaa, 0x8, 0x46d, 0x900, 0x8a76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc38, 0x3, 0xfb, 0x81, 0x60, 0x7f, [{{0x9, 0x4, 0x65, 0x0, 0x6, 0x76, 0xd1, 0xed, 0x7d, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "a648f509"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x0, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x34e6}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x7, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x8, [0x100, 0x2, 0x3ff, 0x20, 0x6, 0xffc1]}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x6, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x5, 0x9fc}]}], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x3, 0x6, 0x0, [@generic={0x9f, 0x1, "835787de63030a75d91a0caeb791b7e7a012f44f4d8e1d8053fb3bd00248defc2b1995fa5d489404628fbf7d934c09e2e66f1fc4cc2ca77a294e304e316448526ea8b2c53ecfca1aa509a53e5b64bca28381f2f1fb9a618b45684f95358fbd8b20ef23b4ec2a72f657dd4ed92fb62da6e1306def3af17baa4a9424acf8325bb2cce5ef5b87fd6c2605eb168067c090c8c94d887de624f9e4fd3939f291"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0xff, 0x40, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x51b5}]}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x7, 0x2, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x40, 0x6, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0xd3d0cb100c613571, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xa560}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x7, 0x7}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x40, 0x3f, 0x4e, [@generic={0x5e, 0x24, "ddb8bb442a3d6567cbd7f18a6e91ff1cb5f61623ea776b01b502fdc137b356681a163aa95d7c69dc768956c6a7d7b852a2ec49ed9fddf1c2bf44e8bb66b562774238b071f2f2c223fa5fc6865c3870aa6cf31f5d817b47b64371368e"}]}}]}}, {{0x9, 0x4, 0xd7, 0x94, 0xa, 0xc0, 0x81, 0x78, 0x4, [], [{{0x9, 0x5, 0x4, 0xc, 0x400, 0x0, 0x7, 0xfb, [@generic={0x1c, 0x5, "3f16768351226b47b7c6d71042b41d347a7c951bdd31ad9a1b50"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x95}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0xf7, 0x5, 0x9, [@generic={0xba, 0x2, "19386389e6aadd6b2c538a11b24fa11dc0b428bc77aa880418fa19235c1e4a5e67f5a8d3604ed07bc1cb887a740b6082fab717825c8b3a0ca191728d1eb15b6743928c0c9186ac569992a33037f614c6f2441d969482c48aeaf51af7b4a15510e975ae5fb55c087229e48a2890d4e5b657ce66d81d96ba6dd9f799adea315a2978390d1bf2782817044580a41fa0059bfa256ad85a2a7038a6708992de6c527ea8ae8c0c1c7fefed420dd5d3a440af2a41eb4f0f431c85a8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x64f}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x8, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xffff}]}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x6, 0x24, 0x4f, [@generic={0xc3, 0x7, "2a6bc77cd7a78e537a416fd0ee5bbcac64abf427debe5b1978b4156c4b36c816a72a7f1fb3d7c85f83b290ea9c48349279ef4a6a5a5abbe2918f4dca7beea130f289f3c2703e01d6149622d3026c4ee589c39402bc22dbf55be59d88c2438e74b6786fe2048e8d9b464bf658583de76f5878371c33f8eb5944f894cecac0e15efeff0e4113e7a2d35c30dcb05a96350bad90be633cecacca7453411890a6e8e63eca2bf957c1e27981c23586da7355ec4ac40d5c6614885fb12de08d59e0ab663d"}, @uac_iso={0x7, 0x25, 0x1, 0x9e73662a7686e372, 0x6, 0x6}]}}, {{0x9, 0x5, 0xa7fccc9fd90c4fbf, 0x2, 0x8, 0x2, 0x0, 0x13}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x1, 0xea, 0x20}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x4, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x5}, @generic={0x13, 0x5, "70967591415a6f843cc67b4b1ff7a5ceba"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x3, 0x1, 0x7, [@generic={0xc5, 0x0, "0ee54da5b83f6e40145b07816bf872ca643015920829fc0d28434b2b3d34865ab4a6ae6a91cab403d9b7f243fe9d42879821c7d08100de2d4774344603d79e1a3d1d805e36086db782bc33b66cd699afa2a0c7a19a0660afa1110fef2ec87b2761ddb3b48f8cc35456089bc10fc45f675166e61b14ee079a4f699099daab55f9cfce37d7d8c621d0719d7beaa81180db2d20d139066c272573c3b24007ea24dd7a8482af40993c47ac28cdac04b421ec9563b7cfc1ad8210ec5e7811a23d23cf51118c"}, @generic={0x3a, 0x13, "e8d061d259c1c0e058bd3217128f41bcbaf0e5018b66e87b353cdc5fff680e1d29798c3a946b77c6845cd89d45f6b5706327fc067f2fd46c"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7f, 0x81, 0xb3, [@generic={0xd4, 0xa, "2e71ae1f3e6b7c489af7d28c3888d28f7a200e686f36a57e91673eee31e212d1ec4a1e17666bb691fd479e0eaaf6df7f512138cf110d4060754bdcdb92f07ba2f6435b7873021e8201f383f13de12a86ecc18e69da515e5dc5f6ae620a0627b05b91b8832c5e143ac844ad850fe0f3a478eb4aa6ca1cafbab6e7d5ceb2efa735dfa8cc0f073515699da266e01ef41e34d606da16f1d15f73904422f7bc10c49f826394c5511c41fd5eca390b4a94fc7abb542aceb54887f1341fa2a1560bc0bb73d2ef538b5b958b9202a5ae1235a68e30ff"}, @generic={0xb0, 0x45c2a9e6be7ef827, "a8dffe1f0888c411d24d777139f8e49dc7eb91a04a534a07e3392acf00a22477a2b485e71aa6582cd2d282274f9ace5dea56e3813dee8155f9c67eba44a8a00e168f034a0cc5324cc5bd69e67210e140989050d03fc86076a48a8d577bc6be12693f10d90e26f5115a4b34dd3a518c8bb27f62354696290d870e0f7b4cb911c60090c579d603f2576ec16c9622c693a3c8cd4c7c4824a80f9199253baf1a48f1341a4634b281bb4613f1ab556c2d"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x8, 0x1f, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7f}, @generic={0xcd, 0xd, "280c3a323c09c67ed08f436ab36c2c9b3783623797b7c79ba8985d5df1ad92e5d3c741df11e603ce701a14cac2b0d95d1d52812831c9d173913223acda3dfbebb0595f568eb543c7a4d4963d2d5d386aa284d6aabceabef19e67680d908d32f680c80579ab5b85b9ba70ec2e5245ed3e53c055785c599bf4429c79290afff9ee2183e437d1d60e973a952b0d11b059baadf79794d9cba9447598c49bbba74c7bf7955308988dc94d4b657d1265d731a33ca157fae2b6fe2f8f1910f22ea9ff90f240188f8f43c53c1431d3"}]}}]}}, {{0x9, 0x4, 0x1, 0x20, 0xe, 0x40, 0x76, 0xd2, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x7fff, 0x81}, [@mixer_unit={0x9, 0x24, 0x4, 0x2, 0x40, "abfd8202"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x6, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x5, 0x45, 0x8000, 0x1f, 0x3}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x3, 0x64, "2d97671e"}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x20, "37375d1d63ed"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x5, 0x7f, 0x5, 0x68, 0xff}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x20, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x0, 0x4, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x5, 0x4, 0x4, [@generic={0x7b, 0xf, "a242c8b4074a42a2c04ccb265519052ff3eeb71ddbc29e1b966340aaaabff89b638da8d05901cf8480f1de20c527d19f61cbce6c63bf4416bf2b595918b8e09e3553c37679f92ff28f88f8a2151ec4af5d02b9281a258c1a3ec0b138299c1b50add4ca88bfaedcdfcbcafbd5591b20176364af901706a58df6"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x60, 0x9, 0x7}}, {{0x9, 0x5, 0xf, 0x1, 0xb8, 0x6, 0x3e, 0x1, [@generic={0x86, 0x6, "da701a9bb476a922fe3ce82458dd3756698e1854de816d6d35a2b63220332e6c209c367ef2f9d15a899f9d3fcdfdc063df2776b28db9ed2693509d247fb336da5cb3b37b7426e60c4648837efae218d6d0ee73e223ad6255c53e6d1469129b7385471e37c6c857aab2de04796d100a313b5e8709ad294ac87e9e1b0e9170f7126c2c1db7"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x3f, 0x7, 0x3, [@generic={0xfa, 0xd, "ccc03968022665d3c182fc5ac191b315908ebc863152386f0cfc47d0a9cc714ac7ed2a04c1ccfb9bd29706e410278ca29220e26f95b9477ea6c2443dfd7044adffa84505767d699e4718e60323e4c030ef3291d86afa41ac9811c7bf27ce3ee34449c126fa2b430c70577ecd7dcf83713a68f9c3d37c170575e82b8df8e8b62ac2e98924a1ef6c1a62630e5b98b8548af5f32d0935dca4d2d3e1916a46814b5da144743f285706f22ecaed68303675a23dbd99ca521e17b67ce1131b9c95e3eb6d771d93f7fe5f9a730e4993cb8d29bda23f5a1f38eb858bb59588141054971c436ac166d016dbb39ad3b9f8440df0fe59bdb1e97c7208b4"}, @generic={0xc1, 0x1, "32a38bbba036d714fa55d32dd7c6e71a5b2d8c08d465e5aae981ae56b4da4a93b3c5e280fcaa4c67619c843f72beea36fa24efe32ddcf287b61058b71d3ac4a7f240f5adf75568245d728d4012578b65c5620df4958e840f2b3da26f17d42e0894ef61da6dc6742d56f05b0c2f7cf6115cfca9500d308dcf24dc90fd67dbef02c52a048300039b7a0249b81ae911e73058ee0f9b914b9e5769fd688da72ce837e31f057dd052323718d38d95f2038e5cc1aadab2894e7fd0cd9fe4881da7e0"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xe5, 0x4, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x2, 0xb7, 0x1, [@generic={0xe, 0x10, "827011a024b2d14b9a42730b"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x9, 0x5, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x16}, @generic={0x6d, 0x8, "833ccb3d06ac298dff5b125826fecb0f1bfb61459128986401cbe9be975176922ca53680299dc004d8a1c6bdff87006a1d08cc5f662ac1a124f37e8223a7999a3d4881413d4687b68a2ebee6d89ef48618fbe9e5704f008b71685dd86974f76f7812ffcb49e093b56331e7"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7d, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x7f}, @generic={0xbe, 0xd, "e30123d3303eec767b80fdb6b76ae20d31b9de6c924efb1607c098daa7848e3b3aa7a004099e844d445ae3d53e981d5dc0d127596bf1fa7026ac6d5c180c9afa687dd3b7b107ed203d328d86fe49066a4170aa1500fa32f760893d86aa81ac9f04a931c1af075b51c692dad90054e6766e85b2069f7500a54bc63f7e4c3e4b5e9d847ad2723d780c971daddc32c2c2d8c0e1ef6a2d470f8f8270bfe2dfdbe99b70c2185491efa56cdfb3ca869a0d16938448e5938a149d0b152312bf"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x4, 0xb8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0xc5}]}}, {{0x9, 0x5, 0x2, 0x0, 0x248, 0x7f, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x25, 0x2, 0x2, [@generic={0x23, 0xe, "3c03afe2b1daf95f85117c1f942c32fb4edb2175bad1e662d9a6eb0806e6cda072"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x2, 0x0, 0x5b}}]}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002400)={0xa, 0x6, 0x100, 0x0, 0x8, 0x4, 0x40, 0x5}, 0x32, &(0x7f0000002440)={0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6a, 0x1, 0x7f, 0x101, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x7f, 0xf00f, 0x8, [0xc0, 0xff0000, 0x0]}]}, 0x3, [{0xd1, &(0x7f0000002480)=@string={0xd1, 0x3, "d64c0b64ec0a3359cdcfb5f889abd0242e41702bd6766dbc8d4f4329f4758cd214f93bb1c1368883c179c46f6baf1d00cfde457eebfe32496a0123a976f50cc4f9f0e6041c25ccdb44a61773d1001c096dabd532f909ece67b026570c668388bfd0723586060b197723881f1331f81754d65ddab6c6c8ef46b89b36aaf2bc0a8dcbd08b50c41e7e38315b09af416038a16cfae6c873cb9f83235fc010177533bc28b6e3557622c8cded96f8f00f2decabc0437d2074247659fd333e3fbcd1be8fabda58367ec5a0845f6cf22576db9"}}, {0xe6, &(0x7f0000002580)=@string={0xe6, 0x3, "4eaf81ea3f403fb620c5597b9cd85b06261854ab7f672656aa7f2d87cfe82bb18665af04634c45c2104e29e51727d288944783bf960b6b23e0a0ca7104678761ae37f3c235a42c34b646eeeb89b416cf775024181c29df05cf5eac9f8d14ce0039a092d259b130f83abbb772a07a3a48768da235f72b47c4465ad1107ca1efc95374cfc861fe434cc87530a7c32e9f3e6ffcb8ce9856fcc5f6d8e45720293a1ea63c812652441ee4cada0b8a7b33337e1ee5af36ac23053850c7b65477d33f33196bb2d648effa907acbf72962ffc24d17fe0ea65ea9ca6dd90337d4b499402fe245a3a3"}}, {0x4, &(0x7f0000002680)=@lang_id={0x4, 0x3, 0x3c1a}}]}) r1 = syz_usb_connect(0x7, 0x6e2, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x99, 0x36, 0x11, 0xff, 0x93a, 0x2620, 0x78ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d0, 0x2, 0x1, 0x57, 0x0, 0x1, [{{0x9, 0x4, 0x89, 0x2, 0x3, 0x47, 0xb5, 0x14, 0x4, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e404a5ba4b"}, {0x5, 0x24, 0x0, 0x7d4c}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xfffb, 0x80, 0x6}, [@acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x6, 0x10, 0x40, 0x9, 0x2, 0x4, [@generic={0x3b, 0x8, "01d1ea49761a6f4cd6e0fb4f2be234f928bd117827a088f92490add47713f6d9383ebbe7cf36765bc85de9d19b9cea75563a7438741565fb72"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x7, 0xe, 0x7f, [@generic={0xd4, 0x10, "a6544b8ebd33cae08bfb672293a02efd852b2daa0a5446f74d65b41f3bec453217932b1a3dd23582d95a36b47aff626e10066b3025afe967884ea4962a23ed93a8f4465aac697cc9c8f4781209f896ff5bb4e552235191b64448dbb442542fee2b992ce0259e32781ba6d7b4d47fd6c8e71b4cf2a01ee321da7ce3f79f97149504cc569af9ec354df9be5cb351da6fd38934ea150dee13eeef4740a2d0c44af62424d4a3057d024af3fa363415680e2009a06b09e0e990e9580e23c3b6fc5eb63f5015a4e287d921f885c6bb1a711030bbd0"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x81, 0x20, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3ff}]}}]}}, {{0x9, 0x4, 0xdc, 0x1, 0xd, 0xff, 0x78, 0xc8, 0x55, [@hid_hid={0x9, 0x21, 0x800, 0x4, 0x1, {0x22, 0x61d}}, @generic={0xb5, 0x9, "f55f13fcfb49837634da548f2a2aef32fa7e86de005597d704d5e0db76571d8260551991d02b0424556239b0d44f99e9220b12873209c82e9cd7fcdb070c02329314fb93dc0b2540054a7b6fc20ba6604c8321424a27cce87db08028b6c5235251fde166d67bb1e2b04ce254d82eef35a870db7804037f96663aa48a006e474e2b315614d067d86e91804d7d80bc4e3fcd08e2a96388f17c7fba6803163e88dd0f4891849b842180f59b08eb009f94b81f4ecb"}], [{{0x9, 0x5, 0x3, 0x3, 0x40, 0x6, 0x7f, 0x1, [@generic={0x6e, 0x6, "9cb192b0edba71e48640d9a7ef8bc164f1bbc56825a30f140e58d4603ed8e9ce3239d0c95554dc5dac28df70e86a606db5d6676f35a96bb2acf8fc93fdb2f93cb1bc04a19c1d20ac3caf9bc504cbd07a788a8630c1e5dab62b35a58d384d97c4845fbedb01faa43d68025fed"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xc7, 0x401}]}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x3, 0x5, 0x2, [@generic={0x91, 0x30, "09bd8012863a261fc0e0b8c1eb9629d0232d4f6ced5ea971bba81caced67493498ccafef5eb02abd26477f901394506ccf6cd981c944968a42f738725b656f921feab4a2a6333cbb8c407f7cf31636b10e43a5bb321fc3d6218b960ff757b5769fe0bfca65d2b1dbf4c1b008183c53f1e2c5929cf9bda7385f6eaba53274217796bd530fa34fdb0f77926ad7f3b774"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x8, 0x6437}]}}, {{0x9, 0x5, 0xe, 0x10, 0x7f7, 0xb7, 0x80, 0x0, [@generic={0x95, 0x11, "7a94f7e3b6665f364a9613eaff27c6c2cded46ba803b808025d55e97d55e73e41c13f7208da2a7a21e98c25929890e5498e77130dc2660e380e8f2867de0e821f669d70b403f2cfb727ff375e4f22ffd4094bc0632f3be2a7fabab6d06f4dae8bf3dba47c00e205d1282ab41be0bd7e6b798a037205592d1ed8834943ef9f9279045d43532ed1f8dd2487b1564e53e30c38140"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x9, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8000}, @generic={0x66, 0x1, "69c07a2c196fbb73ec0400d5916a219bf836340f6f9e8f93023455e98febf77604166d7ba2b42d1f84dede984f613f943c31fe257cc55e8d2dc89916598ed16bc5a63698987fd4860b72f931d9eecbf7403b5874767c661536ab5a7aeccf23f637697cd2"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x5a, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0xbf}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x6}]}}, {{0x9, 0x5, 0x0, 0x5ece36e416787ee3, 0x10, 0xe0, 0x14, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xc3, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x3}, @generic={0xcf, 0xf, "c6a9840e1af5335f0eb9999a875147085d75c7b28210708a42d060fb6a8c124ada06997905082ae242dbaa1649b9fd9dea9acde30fceb5e74431af01df1f067f70a9db512132f9bd8093abb398b355d244482aab2a65b729af3f3e1484d1e75056dc2c642f79ccc9272c0a65ace440405a92cbf630cb66a9ef1144eac5534268221d77cf247c9c5166e5bbab2edd4ffd3172e9958ce1b6e7811a200394336b1891e91b7915deb287c0f88e8e2d29df9f52dbe92cf352574cec855005b87fd490f0be7c647c69c202134aa14039"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x6, 0x61, 0x68, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xffff}, @generic={0x30, 0x30, "4ae96a19a630ca0cf9651fb76462a744e084b5ae8b2829550d745648deeedfe94d7b46a499b16eef8e6dc068336a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x9, 0x80, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xcfcd}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x6, 0x81, 0x1, [@generic={0xdd, 0xe, "b31e38b76b0eac27b5d68b7fc84a3ba55a1f71c50f2ab16f96a6b028cb0ebe0383fdcfafd5c11841befd60f9b5d037b4b1eac0c737af6b8bdffad70964f99c7d7f4c831db7cc022f61e8795defa4a059f653a466ef89b90c712beca938bcbad64b888d9cc00c97d10808bd2497d7351a0e932904a08cae4a5afd161307287f88f94acb3edba895e866c0550dca2ac9199a072bad791e028213eef5b01be79e503fde608fc6c0d1cd948c47605ac6a90b4fa8c4f4da751a04f4befd17983ef63db03deb69ef63ae4819d852a2f046e7e9f0b39ad181ac83c4cbd0ba"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x1, 0x1f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x75, 0x61}]}}, {{0x9, 0x5, 0x5, 0x2, 0x48, 0x34, 0x0, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x1, 0x51}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0xea, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x29, 0x400}]}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x310, 0xa8, 0x3, 0x5, 0x10, 0x40}, 0x2f, &(0x7f0000000f80)={0x5, 0xf, 0x2f, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0xfe, 0x3, 0x1, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x8, 0x40}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x0, 0xf00f, 0x4, [0x7f80f0, 0xff0000]}, @generic={0x4, 0x10, 0x1, '*'}]}, 0x8, [{0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x443}}, {0x7, &(0x7f0000001000)=@string={0x7, 0x3, "a0943aa351"}}, {0x68, &(0x7f0000001040)=@string={0x68, 0x3, "38882e68038ebd41edda1264c6d43eb8fc6d59f3fb13a070e2e66f19ddb44ca4763ca54f7b7fdaebbff6018477b149d7120cd91ac300b034898b7893a11d701a2fb1e1b39874a62bdc835843bb5b679fc8de797187bb15ae573c264635c809f8ac4cd9399008"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x459}}, {0x51, &(0x7f0000001100)=@string={0x51, 0x3, "6472156974fbfea2a0ac43d1233db0c5dc3e06a97c5d34aab170e0212632c091eeea100f023adf71d2fc12f91e8f2ed1456b820121b86c173df33a2c2a4c9e609a65391deb09cf72af7d7654c473ce"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x4001}}, {0x19, &(0x7f00000011c0)=@string={0x19, 0x3, "791321dcfe8958d1f62afe6de22aff441dcb4ec4fe4059"}}, {0x23, &(0x7f0000001200)=@string={0x23, 0x3, "04a86053548c43230895210e40e54c196373288e415cbbd76417388f7fec44da86"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, &(0x7f00000012c0)={0x20, 0x30, 0xa8, {0xa8, 0x23, "575f11a845848168c72915a14479e0d2ed7b575bef24c10d2f154e95ad2e9fca5eef7e2e6c56831313ab1f0106a00e04d2e95ae878a0953eadd29e468f10a0fc9110553ee6232bccbe0a86f36f93d9f3bfe6900fc4f224bc4ebf7d53c122fef4090181304d817248a4665e2fced5e6275fd8585827a23097f8e5c1ecbae96d38c848f65a48119d92fa7f0b6ebf1a4bcb6519f62c4017603f0e7d2e7b05b913686e80a10cdeab"}}, &(0x7f0000001380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f00000013c0), &(0x7f0000001400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x5, 0x1, {0x22, 0xc03}}}}, &(0x7f0000001740)={0x2c, &(0x7f0000001480)={0x40, 0x15, 0xe9, "bd7b6e54f58c0f30b8ca64a8a1d6b77399159a6bed9307c5c35e1b98d2f306777cf1f1ae7d9ed973862ba7bbf72e3a16958839d0c2cc9045657b8e025f197bd5babe72f83cc4bba3763bd362bcdc81c45f1cb26d4c663139771abb26f5bebe01e889dded5c81464dff015c0d43d13f3d727e958bc9edbdbbd80b2674f8142fbad2fd30514bea000a7707f44c628fed932fc9767eddcfd809f235baf8119d7ecff5c17832d1f923917c796b08e898e6d79361e3d0bb444e07131472cd6e81e2def32479b28ccdf9f99948eae731a106e113713252874d284906297b543e491b02c7fa1a648327b43a2a"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000001600)={0x20, 0x1, 0xeb, "26c4fe1aa8dbe261d2d32eb13b02244f18eaecafeb317a04b98d677285bae076244d66ca5a42cfb08c50c7953a31676028973883dcc27926f9684572f16c27f6dc3129dd2025ec8fa9aa15cf4b24623b8f79fbe48a19bff3860d37f67d1dcd31c63dd80a1d2fd651a33fbb026d74711fc4341e991d4c005da36042059410c63a43dbe33ea547800e5fbbfe091640d21aee7df1e99b6b8ecb7b42b5d3b3b1291f184b6e2d357c68ea8bb99a3febffee5788e2e897dbfc6d4d232dceb5e40ccfb07d7f0b17ec6ad0317bda8366faf120a659a4836e6a13f234320b9dde588b03808cb77dc02461ed71223524"}, &(0x7f0000001700)={0x20, 0x3, 0x1, 0x4}}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x24f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xe2, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x68b8, 0x9b, 0x1, {0x22, 0x521}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x90, 0x40, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x40, 0x3f}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x3f, 0x3, 0x53, 0x8, 0x48}, 0x18d, &(0x7f0000000240)={0x5, 0xf, 0x18d, 0x2, [@generic={0x9f, 0x10, 0x1, "803fc83eaf136152a5f14f77b5bf127b8a83e27e5c3c27098f98c9ff472517240ca8d0a9248b4a0116abd15ac506740b5215f9550ea1112c6814832fc656589cf4d8a6635e423a28328ba4041c16421c9bcaf2d2ca5fb71b008c556195b7e1394ae106ed4be156e3979620313537376174918917102c5491d17710eb1e0d1715c7a87fa5c4e968a74643ba15107cff77604dd6e8bc747394cdae4cde"}, @generic={0xe9, 0x10, 0x3, "2767ac83035d4cfb36ccc3c06c202dfa08d49b3bf4a2bb4511b723e433c4cdef02548f1588903685b1ea1155bbba7a552e7b62e1e79260d579ba87632c9222fca478dca55bc961f3173493591dba02f460a326575888d7d6eda26c15403923669fa1eeedb3c2febe939e2f249bf64a078f624745d33a24957e904b68d47e5d37b4b1e13e274a3f0de042f4450310bdf6ad1b4edfaee2b431323bdc7f9c17907cb9fb4b9afda3fd519fd9727a3741edeccb18bfbf07e0ba03100d123c62f26742932722f5c0aa3a215b7fbd162fd59779d2d034765f141e34b387513a5c502a9fd6e1d6b76f9c"}]}, 0x1, [{0x90, &(0x7f0000000400)=@string={0x90, 0x3, "86b51a380aa04e7543e4f32f6ebb65bf1bc4067c54bfbd3c6614475ab723d09e8561f048156d53434f408e4dbdb443cf80cf9f1523227ebaf7286e9c8c4688a83f93950fe31bec36b617aeea191180b31f9b22de261aefb8402e6bec9cbf54abbc8f282e051942d066a293dfa4d545e7aeb3b36031621862410a5bf94747a0179555a700d11a37b90319ba455d68"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000580)={0x24, &(0x7f0000000180)={0x40, 0x31, 0x23, {0x23, 0x21, "95d4a01cabee41934a80339eeca2f7d49f173ce9e7fbb45fb535a6db263d9f62e9"}}, &(0x7f00000001c0)={0x0, 0x3, 0x18, @string={0x18, 0x3, "7e06d6da35cf004cc82df3baff7f9d002d6a64b15758"}}, &(0x7f00000004c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x0, 0x0, 0xc}, @global=@item_012={0x1, 0x1, 0x5, "c9"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x33b}}}}, &(0x7f0000000800)={0x2c, &(0x7f00000005c0)={0x0, 0x31, 0xb3, "a8ef6f0509e96767de94f7c336dae561c082f4eba4441258b7264f760f8c6f385aba9a5e9e6fe7123ad4cc83937df9d2c4fb9511f7136d720b9a9b8e8485ee7b49da1e6782bee02699556dc6c5d3c3ee8f1571990553cfe0ad6906fe5356e4c5a10bff6b854b5922960225aa4c4293503ff648795d01acec3ff24a1efae16368c7bd3d57919828f69cc124cae7ef13e127b5203651f15919314a8a220cb73d0d7cc8c8aab5a223a86df41f0e6cb998d9f3639e"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0x20, 0x1, 0x9a, "0f8b5d1b1c7c247560f958fccd9789c33bb8a7da7bf52dd854fd802dd662a12018a62fbbe0d25f348c820be2c9446b12c3ab01514d4849af0b9b7e888a8c0859973ae34d4df96c6fd66c9ae62c8c046f2c1b38bfffe1b1642b3a96ef04957309462501943cf78d07262e7f28e13332e8b5e4538a201dda2241c7787029407f60542cbb1ae9c6ca58d7f599cd49336daabcede3af283b06a9b015"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x8}}) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) r4 = syz_usb_connect(0x4, 0x314, &(0x7f0000002700)={{0x12, 0x1, 0x310, 0x16, 0xa1, 0x6f, 0x8, 0xbda, 0x817f, 0xe3ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x302, 0x1, 0xfb, 0x9, 0xa0, 0x9, [{{0x9, 0x4, 0xa2, 0x2, 0x7, 0x1a, 0xf7, 0xc, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x8001}, [@processing_unit={0xb, 0x24, 0x7, 0x2, 0x6, 0x9, '+}rQ'}]}], [{{0x9, 0x5, 0xc, 0x14, 0x200, 0xdd, 0x4d, 0x2, [@generic={0x2e, 0xe, "86ce9d9716f6cdf899995fe9335a75b4dcb9461edb80f13b83abf9515cdbfb552fc0439f16b48993e8dbda69"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x6, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x1000}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0xff, 0x6, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1a}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x3f, 0x20, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9800}, @generic={0x102, 0x21, "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"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x4, 0x7, 0x1, [@generic={0xbc, 0xa, "5395107b48acc23e89619870062f1d6ad8877f3c266bea9a195a113f64f674a58b48af9146f7cc6fa7dd906d156c7472736b9d56805218d7d7828281d48d98fb15a2ea54da0bdca89e0378dea7c8905811fbb19ec644bfec8ea5c4db2029cbefea2a7e7056ef586097c49415b3bb0b3a124bc89d5559470d84586d9b42c0959823802e0a62efe557d494ab844bb25df2b338253d740752ca7a174f064c91e91ef8fee71ee34180eaddf8e6c50c8db5177037a2c13e6ebb404b94"}, @uac_iso={0x7, 0x25, 0x1, 0xb899cb6f77ccd4a, 0x2, 0x401}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x7f, 0x40, 0x81, [@generic={0x80, 0x21, "eb397508253f260c175974d7f5ca8249ebcf6e1c9997711b6638766c86bdaa034cf68de1ee8368a6670d91a21ddac1326d147ca735a3c6cd881435c3f007bac4cb5e2fe338dc1a1f1a19d106585b2ce2605d2c2a297366eadaca2d1ffbd585933e36cec06b92a1fbb6eb5c3c4feab6ad790d25c2faa207080b99a28c49ff"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x438, 0x2, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7a, 0x4}]}}]}}]}}]}}, &(0x7f0000002e00)={0xa, &(0x7f0000002a40)={0xa, 0x6, 0x310, 0x9, 0x7, 0x70, 0x8, 0x20}, 0x20, &(0x7f0000002a80)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "c58c430f017876270cbbd4472588a11c"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x0, 0x199}]}, 0x7, [{0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x41b}}, {0xf7, &(0x7f0000002b00)=@string={0xf7, 0x3, "45b0f5bd836dda45df1b34c2ec04d963c3f78a6393bae5e76425e6d3464a081854e0851784cd427e082185018d61e8658da22166abe1f14073d9b4177042496b133694174055c223c2334fd4ec05b41ccf2101d97f4b7856af947a40ab2479c00c500d7de4893ce11ef7f880cf222718a45756a5ba97f9b86acff08a3f2064a9f42580cf8f5c650b81a6b6f778eb9fb638a5ecd833a63fdd6936963a0f16cf84bb6404ab4df466aa69955f262e215ed30cd9c7bcef30f81380d69f3262029b52ab76194019000e3d20ac3a409cdddc09bb05d7d7d5012fe6de0eecf724e50979cc3d2d355ecb3f00f729fd0f18da65693016f33f62"}}, {0x5e, &(0x7f0000002c00)=@string={0x5e, 0x3, "3bdaa16c91d004c8649c82ad098a293bb08f2aee2cf17d565c0a699578375d8fcbeba3de859c4a7f293001d01a7890eab01b74b534cd71bfbced16b9a1a804b0753501a9c205af3315b656299be8ab043f37e4fba81e638b2d50661e"}}, {0xb, &(0x7f0000002c80)=@string={0xb, 0x3, "23907bff16781a06a9"}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000002d00)=@lang_id={0x4, 0x3, 0x280a}}, {0x9c, &(0x7f0000002d40)=@string={0x9c, 0x3, "bcc23b6aba3374f28e98051e42cac42e20aff1f93103962ce13990a18db3672b962ed5677b46aa26e6e9f5652b41a2e9e08fa2b67cfbbdd74207f766dac44777f336cfae4065820591efb3e2870106c99b0ccf84957eced91adf964f411b9d5f3ab67161f369757ae1cc5c888af9ce74723bcbe3d3f1d6cd5999eff864b8bb15a9e3df9c5055d8e2ace532e2f9e49375b6d4b61ceae41cf29f0e"}}]}) syz_usb_control_io$hid(r4, &(0x7f00000030c0)={0x24, &(0x7f0000002e80)={0x20, 0x31, 0xe1, {0xe1, 0xf, "c88a2cb609996c0be20ca044196312112b80a2870135feeeb87b03d89e8e882f318048fc6c3a588e8649f04c34f46a5915bd660b478bc231705875ae01b9253e9551f3641480ead3d4f9df910a3be57d80d8793b12910d80eade628523d0c1119209300bfb41dac037fcb17c131399927f2b2f51d142169cda23430a06965101e3d71e7a622b4616bd3e6a6d5935bee26adf5d720be1692102f5526c6bbc48a38a538554c701b3b3387c46a0fc8a708304af19ab21f2b1891b8e3639a90b69d570a5c49185ba8500bd5874f62098c4d47329af07195e13fe8a13cf3f03f0d4"}}, &(0x7f0000002f80)={0x0, 0x3, 0x96, @string={0x96, 0x3, "79ad8e2d91b7ff42770b0b610357b8a04f7e90a54ce3f89cc83e4118bff4cf67d25a51b0d7919b95cb2e844789a493e7bce171420d11f27f53055b36f634fa6ec52f6b5dbaf87bfa029c9ea10997e978125f79bb14c241ca870e96d6eae5c12f6fe30d703bfa82b15f91e4136b87ce4ac11fea7f4c0c566e5cf5dec4031c23f9654292dd9a626e4d353f447645607befc8e85793"}}, &(0x7f0000003040)={0x0, 0x22, 0x19, {[@local=@item_4={0x3, 0x2, 0x7, "63678798"}, @main=@item_012={0x1, 0x0, 0xa, "aa"}, @local=@item_4={0x3, 0x2, 0x1, "2c7191ea"}, @main=@item_4={0x3, 0x0, 0xc, "629c23f3"}, @global=@item_4={0x3, 0x1, 0x9, "6de7ac6f"}, @local=@item_012={0x2, 0x2, 0xa, "5b12"}]}}, &(0x7f0000003080)={0x0, 0x21, 0x9, {0x9, 0x21, 0xba00, 0x7f, 0x1, {0x22, 0x366}}}}, &(0x7f0000003380)={0x2c, &(0x7f0000003100)={0x0, 0xa, 0xf1, "47ea1147fb56aec356aa30ae495cce9313bc91312aee93630a2054ac1e0225231bbc137c5f8e82335d54091d44bb44194d0b7d6227b60e405818062287c54533e3de4b1842fdc0efb24aa451a5ccbbb292da27df347e97869d0ca04dc87c64a031b4e1d83ecbf053a642014007bb90ceb01a76f50a3dac9d973dd8e42d2acc8cec5070d26f060945a5a4252e63314a599e3b0ddbbe6e76f68e5ce7292177dedc522c35565ca22affbc9021ee2ab90998ae72d0026f7d109e9d66502a9286655d8e0036ac76673295721f0df52977fa41ffa8170c1a479654eb4d6a83f1c3a36a982983e8d19428de7d1baf7c71afc606d1"}, &(0x7f0000003200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000003240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000003280)={0x20, 0x1, 0x9e, "3fb1d6d9909ef869cf73881e7000dd17844cb456cd909ee10249ab723161fd944ad9b3b91ca1aef3427db642465ea81eb45954651ee635ff28f8efd9c4a344799d8d432c1626fb2a38f060326435854f580222e23bec410df32c2ac451e0d25d73b2d55132eb9682ef3e3d5c1ede6dc94799ce7d1f1a578be4220e145b92b793226a46e5a57951c751317ef9ba556f38de7e6ba3762ea6fd3e3f14695499"}, &(0x7f0000003340)={0x20, 0x3, 0x1, 0x5}}) [ 3087.755373][T18716] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 3088.135336][T18716] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3088.181447][T18716] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3088.302598][T18716] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 06:28:56 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x18, 0x0, 0x0, 0x2000000000000012) [ 3088.353801][T18716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:28:56 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x12, 0x0, 0x2000000000000012) 06:28:56 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x0, 0xa005, 0x0, 0x0, 0x2000000000000012) 06:28:56 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0xf, 0x0, 0x2000000000000012) [ 3088.858934][T18716] wacom 0003:056A:0331.00AB: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3089.048180][T19145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3089.084566][T19145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3089.134090][T19145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3089.175492][T19145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3089.224945][T18058] usb 6-1: USB disconnect, device number 84 06:28:57 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x18, 0x0, 0x2000000000000012) 06:28:57 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x12, 0x0, 0x2000000000000012) [ 3098.235410][T18058] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 3098.615337][T18058] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3098.626558][T18058] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3098.637397][T18058] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3098.646797][T18058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3099.116246][T19180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3099.125491][T19180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3099.149423][T18058] wacom 0003:056A:0331.00AC: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3099.361698][T17901] usb 4-1: USB disconnect, device number 45 06:29:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x8933, 0x0) 06:29:07 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) 06:29:07 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1e, 0x0, 0x0, 0x2000000000000012) 06:29:07 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0xc4a, &(0x7f0000001780)={{0x12, 0x1, 0x0, 0xf2, 0x9e, 0xaa, 0x8, 0x46d, 0x900, 0x8a76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc38, 0x3, 0xfb, 0x81, 0x60, 0x7f, [{{0x9, 0x4, 0x65, 0x0, 0x6, 0x76, 0xd1, 0xed, 0x7d, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "a648f509"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x0, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x34e6}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x7, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x8, [0x100, 0x2, 0x3ff, 0x20, 0x6, 0xffc1]}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x6, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x5, 0x9fc}]}], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x3, 0x6, 0x0, [@generic={0x9f, 0x1, "835787de63030a75d91a0caeb791b7e7a012f44f4d8e1d8053fb3bd00248defc2b1995fa5d489404628fbf7d934c09e2e66f1fc4cc2ca77a294e304e316448526ea8b2c53ecfca1aa509a53e5b64bca28381f2f1fb9a618b45684f95358fbd8b20ef23b4ec2a72f657dd4ed92fb62da6e1306def3af17baa4a9424acf8325bb2cce5ef5b87fd6c2605eb168067c090c8c94d887de624f9e4fd3939f291"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0xff, 0x40, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x51b5}]}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x7, 0x2, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x40, 0x6, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0xd3d0cb100c613571, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xa560}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x7, 0x7}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x40, 0x3f, 0x4e, [@generic={0x5e, 0x24, "ddb8bb442a3d6567cbd7f18a6e91ff1cb5f61623ea776b01b502fdc137b356681a163aa95d7c69dc768956c6a7d7b852a2ec49ed9fddf1c2bf44e8bb66b562774238b071f2f2c223fa5fc6865c3870aa6cf31f5d817b47b64371368e"}]}}]}}, {{0x9, 0x4, 0xd7, 0x94, 0xa, 0xc0, 0x81, 0x78, 0x4, [], [{{0x9, 0x5, 0x4, 0xc, 0x400, 0x0, 0x7, 0xfb, [@generic={0x1c, 0x5, "3f16768351226b47b7c6d71042b41d347a7c951bdd31ad9a1b50"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x95}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0xf7, 0x5, 0x9, [@generic={0xba, 0x2, "19386389e6aadd6b2c538a11b24fa11dc0b428bc77aa880418fa19235c1e4a5e67f5a8d3604ed07bc1cb887a740b6082fab717825c8b3a0ca191728d1eb15b6743928c0c9186ac569992a33037f614c6f2441d969482c48aeaf51af7b4a15510e975ae5fb55c087229e48a2890d4e5b657ce66d81d96ba6dd9f799adea315a2978390d1bf2782817044580a41fa0059bfa256ad85a2a7038a6708992de6c527ea8ae8c0c1c7fefed420dd5d3a440af2a41eb4f0f431c85a8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x64f}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x8, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xffff}]}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x6, 0x24, 0x4f, [@generic={0xc3, 0x7, "2a6bc77cd7a78e537a416fd0ee5bbcac64abf427debe5b1978b4156c4b36c816a72a7f1fb3d7c85f83b290ea9c48349279ef4a6a5a5abbe2918f4dca7beea130f289f3c2703e01d6149622d3026c4ee589c39402bc22dbf55be59d88c2438e74b6786fe2048e8d9b464bf658583de76f5878371c33f8eb5944f894cecac0e15efeff0e4113e7a2d35c30dcb05a96350bad90be633cecacca7453411890a6e8e63eca2bf957c1e27981c23586da7355ec4ac40d5c6614885fb12de08d59e0ab663d"}, @uac_iso={0x7, 0x25, 0x1, 0x9e73662a7686e372, 0x6, 0x6}]}}, {{0x9, 0x5, 0xa7fccc9fd90c4fbf, 0x2, 0x8, 0x2, 0x0, 0x13}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x1, 0xea, 0x20}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x4, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x5}, @generic={0x13, 0x5, "70967591415a6f843cc67b4b1ff7a5ceba"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x3, 0x1, 0x7, [@generic={0xc5, 0x0, "0ee54da5b83f6e40145b07816bf872ca643015920829fc0d28434b2b3d34865ab4a6ae6a91cab403d9b7f243fe9d42879821c7d08100de2d4774344603d79e1a3d1d805e36086db782bc33b66cd699afa2a0c7a19a0660afa1110fef2ec87b2761ddb3b48f8cc35456089bc10fc45f675166e61b14ee079a4f699099daab55f9cfce37d7d8c621d0719d7beaa81180db2d20d139066c272573c3b24007ea24dd7a8482af40993c47ac28cdac04b421ec9563b7cfc1ad8210ec5e7811a23d23cf51118c"}, @generic={0x3a, 0x13, "e8d061d259c1c0e058bd3217128f41bcbaf0e5018b66e87b353cdc5fff680e1d29798c3a946b77c6845cd89d45f6b5706327fc067f2fd46c"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7f, 0x81, 0xb3, [@generic={0xd4, 0xa, "2e71ae1f3e6b7c489af7d28c3888d28f7a200e686f36a57e91673eee31e212d1ec4a1e17666bb691fd479e0eaaf6df7f512138cf110d4060754bdcdb92f07ba2f6435b7873021e8201f383f13de12a86ecc18e69da515e5dc5f6ae620a0627b05b91b8832c5e143ac844ad850fe0f3a478eb4aa6ca1cafbab6e7d5ceb2efa735dfa8cc0f073515699da266e01ef41e34d606da16f1d15f73904422f7bc10c49f826394c5511c41fd5eca390b4a94fc7abb542aceb54887f1341fa2a1560bc0bb73d2ef538b5b958b9202a5ae1235a68e30ff"}, @generic={0xb0, 0x45c2a9e6be7ef827, "a8dffe1f0888c411d24d777139f8e49dc7eb91a04a534a07e3392acf00a22477a2b485e71aa6582cd2d282274f9ace5dea56e3813dee8155f9c67eba44a8a00e168f034a0cc5324cc5bd69e67210e140989050d03fc86076a48a8d577bc6be12693f10d90e26f5115a4b34dd3a518c8bb27f62354696290d870e0f7b4cb911c60090c579d603f2576ec16c9622c693a3c8cd4c7c4824a80f9199253baf1a48f1341a4634b281bb4613f1ab556c2d"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x8, 0x1f, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7f}, @generic={0xcd, 0xd, "280c3a323c09c67ed08f436ab36c2c9b3783623797b7c79ba8985d5df1ad92e5d3c741df11e603ce701a14cac2b0d95d1d52812831c9d173913223acda3dfbebb0595f568eb543c7a4d4963d2d5d386aa284d6aabceabef19e67680d908d32f680c80579ab5b85b9ba70ec2e5245ed3e53c055785c599bf4429c79290afff9ee2183e437d1d60e973a952b0d11b059baadf79794d9cba9447598c49bbba74c7bf7955308988dc94d4b657d1265d731a33ca157fae2b6fe2f8f1910f22ea9ff90f240188f8f43c53c1431d3"}]}}]}}, {{0x9, 0x4, 0x1, 0x20, 0xe, 0x40, 0x76, 0xd2, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x7fff, 0x81}, [@mixer_unit={0x9, 0x24, 0x4, 0x2, 0x40, "abfd8202"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x6, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x5, 0x45, 0x8000, 0x1f, 0x3}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x3, 0x64, "2d97671e"}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x20, "37375d1d63ed"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x5, 0x7f, 0x5, 0x68, 0xff}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x20, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x0, 0x4, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x5, 0x4, 0x4, [@generic={0x7b, 0xf, "a242c8b4074a42a2c04ccb265519052ff3eeb71ddbc29e1b966340aaaabff89b638da8d05901cf8480f1de20c527d19f61cbce6c63bf4416bf2b595918b8e09e3553c37679f92ff28f88f8a2151ec4af5d02b9281a258c1a3ec0b138299c1b50add4ca88bfaedcdfcbcafbd5591b20176364af901706a58df6"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x60, 0x9, 0x7}}, {{0x9, 0x5, 0xf, 0x1, 0xb8, 0x6, 0x3e, 0x1, [@generic={0x86, 0x6, "da701a9bb476a922fe3ce82458dd3756698e1854de816d6d35a2b63220332e6c209c367ef2f9d15a899f9d3fcdfdc063df2776b28db9ed2693509d247fb336da5cb3b37b7426e60c4648837efae218d6d0ee73e223ad6255c53e6d1469129b7385471e37c6c857aab2de04796d100a313b5e8709ad294ac87e9e1b0e9170f7126c2c1db7"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x3f, 0x7, 0x3, [@generic={0xfa, 0xd, "ccc03968022665d3c182fc5ac191b315908ebc863152386f0cfc47d0a9cc714ac7ed2a04c1ccfb9bd29706e410278ca29220e26f95b9477ea6c2443dfd7044adffa84505767d699e4718e60323e4c030ef3291d86afa41ac9811c7bf27ce3ee34449c126fa2b430c70577ecd7dcf83713a68f9c3d37c170575e82b8df8e8b62ac2e98924a1ef6c1a62630e5b98b8548af5f32d0935dca4d2d3e1916a46814b5da144743f285706f22ecaed68303675a23dbd99ca521e17b67ce1131b9c95e3eb6d771d93f7fe5f9a730e4993cb8d29bda23f5a1f38eb858bb59588141054971c436ac166d016dbb39ad3b9f8440df0fe59bdb1e97c7208b4"}, @generic={0xc1, 0x1, "32a38bbba036d714fa55d32dd7c6e71a5b2d8c08d465e5aae981ae56b4da4a93b3c5e280fcaa4c67619c843f72beea36fa24efe32ddcf287b61058b71d3ac4a7f240f5adf75568245d728d4012578b65c5620df4958e840f2b3da26f17d42e0894ef61da6dc6742d56f05b0c2f7cf6115cfca9500d308dcf24dc90fd67dbef02c52a048300039b7a0249b81ae911e73058ee0f9b914b9e5769fd688da72ce837e31f057dd052323718d38d95f2038e5cc1aadab2894e7fd0cd9fe4881da7e0"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xe5, 0x4, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x2, 0xb7, 0x1, [@generic={0xe, 0x10, "827011a024b2d14b9a42730b"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x9, 0x5, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x16}, @generic={0x6d, 0x8, "833ccb3d06ac298dff5b125826fecb0f1bfb61459128986401cbe9be975176922ca53680299dc004d8a1c6bdff87006a1d08cc5f662ac1a124f37e8223a7999a3d4881413d4687b68a2ebee6d89ef48618fbe9e5704f008b71685dd86974f76f7812ffcb49e093b56331e7"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7d, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x7f}, @generic={0xbe, 0xd, "e30123d3303eec767b80fdb6b76ae20d31b9de6c924efb1607c098daa7848e3b3aa7a004099e844d445ae3d53e981d5dc0d127596bf1fa7026ac6d5c180c9afa687dd3b7b107ed203d328d86fe49066a4170aa1500fa32f760893d86aa81ac9f04a931c1af075b51c692dad90054e6766e85b2069f7500a54bc63f7e4c3e4b5e9d847ad2723d780c971daddc32c2c2d8c0e1ef6a2d470f8f8270bfe2dfdbe99b70c2185491efa56cdfb3ca869a0d16938448e5938a149d0b152312bf"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x4, 0xb8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0xc5}]}}, {{0x9, 0x5, 0x2, 0x0, 0x248, 0x7f, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x25, 0x2, 0x2, [@generic={0x23, 0xe, "3c03afe2b1daf95f85117c1f942c32fb4edb2175bad1e662d9a6eb0806e6cda072"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x2, 0x0, 0x5b}}]}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002400)={0xa, 0x6, 0x100, 0x0, 0x8, 0x4, 0x40, 0x5}, 0x32, &(0x7f0000002440)={0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6a, 0x1, 0x7f, 0x101, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x7f, 0xf00f, 0x8, [0xc0, 0xff0000, 0x0]}]}, 0x3, [{0xd1, &(0x7f0000002480)=@string={0xd1, 0x3, "d64c0b64ec0a3359cdcfb5f889abd0242e41702bd6766dbc8d4f4329f4758cd214f93bb1c1368883c179c46f6baf1d00cfde457eebfe32496a0123a976f50cc4f9f0e6041c25ccdb44a61773d1001c096dabd532f909ece67b026570c668388bfd0723586060b197723881f1331f81754d65ddab6c6c8ef46b89b36aaf2bc0a8dcbd08b50c41e7e38315b09af416038a16cfae6c873cb9f83235fc010177533bc28b6e3557622c8cded96f8f00f2decabc0437d2074247659fd333e3fbcd1be8fabda58367ec5a0845f6cf22576db9"}}, {0xe6, &(0x7f0000002580)=@string={0xe6, 0x3, "4eaf81ea3f403fb620c5597b9cd85b06261854ab7f672656aa7f2d87cfe82bb18665af04634c45c2104e29e51727d288944783bf960b6b23e0a0ca7104678761ae37f3c235a42c34b646eeeb89b416cf775024181c29df05cf5eac9f8d14ce0039a092d259b130f83abbb772a07a3a48768da235f72b47c4465ad1107ca1efc95374cfc861fe434cc87530a7c32e9f3e6ffcb8ce9856fcc5f6d8e45720293a1ea63c812652441ee4cada0b8a7b33337e1ee5af36ac23053850c7b65477d33f33196bb2d648effa907acbf72962ffc24d17fe0ea65ea9ca6dd90337d4b499402fe245a3a3"}}, {0x4, &(0x7f0000002680)=@lang_id={0x4, 0x3, 0x3c1a}}]}) r1 = syz_usb_connect(0x7, 0x6e2, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x99, 0x36, 0x11, 0xff, 0x93a, 0x2620, 0x78ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d0, 0x2, 0x1, 0x57, 0x0, 0x1, [{{0x9, 0x4, 0x89, 0x2, 0x3, 0x47, 0xb5, 0x14, 0x4, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e404a5ba4b"}, {0x5, 0x24, 0x0, 0x7d4c}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xfffb, 0x80, 0x6}, [@acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x6, 0x10, 0x40, 0x9, 0x2, 0x4, [@generic={0x3b, 0x8, "01d1ea49761a6f4cd6e0fb4f2be234f928bd117827a088f92490add47713f6d9383ebbe7cf36765bc85de9d19b9cea75563a7438741565fb72"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x7, 0xe, 0x7f, [@generic={0xd4, 0x10, "a6544b8ebd33cae08bfb672293a02efd852b2daa0a5446f74d65b41f3bec453217932b1a3dd23582d95a36b47aff626e10066b3025afe967884ea4962a23ed93a8f4465aac697cc9c8f4781209f896ff5bb4e552235191b64448dbb442542fee2b992ce0259e32781ba6d7b4d47fd6c8e71b4cf2a01ee321da7ce3f79f97149504cc569af9ec354df9be5cb351da6fd38934ea150dee13eeef4740a2d0c44af62424d4a3057d024af3fa363415680e2009a06b09e0e990e9580e23c3b6fc5eb63f5015a4e287d921f885c6bb1a711030bbd0"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x81, 0x20, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3ff}]}}]}}, {{0x9, 0x4, 0xdc, 0x1, 0xd, 0xff, 0x78, 0xc8, 0x55, [@hid_hid={0x9, 0x21, 0x800, 0x4, 0x1, {0x22, 0x61d}}, @generic={0xb5, 0x9, "f55f13fcfb49837634da548f2a2aef32fa7e86de005597d704d5e0db76571d8260551991d02b0424556239b0d44f99e9220b12873209c82e9cd7fcdb070c02329314fb93dc0b2540054a7b6fc20ba6604c8321424a27cce87db08028b6c5235251fde166d67bb1e2b04ce254d82eef35a870db7804037f96663aa48a006e474e2b315614d067d86e91804d7d80bc4e3fcd08e2a96388f17c7fba6803163e88dd0f4891849b842180f59b08eb009f94b81f4ecb"}], [{{0x9, 0x5, 0x3, 0x3, 0x40, 0x6, 0x7f, 0x1, [@generic={0x6e, 0x6, "9cb192b0edba71e48640d9a7ef8bc164f1bbc56825a30f140e58d4603ed8e9ce3239d0c95554dc5dac28df70e86a606db5d6676f35a96bb2acf8fc93fdb2f93cb1bc04a19c1d20ac3caf9bc504cbd07a788a8630c1e5dab62b35a58d384d97c4845fbedb01faa43d68025fed"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xc7, 0x401}]}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x3, 0x5, 0x2, [@generic={0x91, 0x30, "09bd8012863a261fc0e0b8c1eb9629d0232d4f6ced5ea971bba81caced67493498ccafef5eb02abd26477f901394506ccf6cd981c944968a42f738725b656f921feab4a2a6333cbb8c407f7cf31636b10e43a5bb321fc3d6218b960ff757b5769fe0bfca65d2b1dbf4c1b008183c53f1e2c5929cf9bda7385f6eaba53274217796bd530fa34fdb0f77926ad7f3b774"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x8, 0x6437}]}}, {{0x9, 0x5, 0xe, 0x10, 0x7f7, 0xb7, 0x80, 0x0, [@generic={0x95, 0x11, "7a94f7e3b6665f364a9613eaff27c6c2cded46ba803b808025d55e97d55e73e41c13f7208da2a7a21e98c25929890e5498e77130dc2660e380e8f2867de0e821f669d70b403f2cfb727ff375e4f22ffd4094bc0632f3be2a7fabab6d06f4dae8bf3dba47c00e205d1282ab41be0bd7e6b798a037205592d1ed8834943ef9f9279045d43532ed1f8dd2487b1564e53e30c38140"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x9, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8000}, @generic={0x66, 0x1, "69c07a2c196fbb73ec0400d5916a219bf836340f6f9e8f93023455e98febf77604166d7ba2b42d1f84dede984f613f943c31fe257cc55e8d2dc89916598ed16bc5a63698987fd4860b72f931d9eecbf7403b5874767c661536ab5a7aeccf23f637697cd2"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x5a, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0xbf}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x6}]}}, {{0x9, 0x5, 0x0, 0x5ece36e416787ee3, 0x10, 0xe0, 0x14, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xc3, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x3}, @generic={0xcf, 0xf, "c6a9840e1af5335f0eb9999a875147085d75c7b28210708a42d060fb6a8c124ada06997905082ae242dbaa1649b9fd9dea9acde30fceb5e74431af01df1f067f70a9db512132f9bd8093abb398b355d244482aab2a65b729af3f3e1484d1e75056dc2c642f79ccc9272c0a65ace440405a92cbf630cb66a9ef1144eac5534268221d77cf247c9c5166e5bbab2edd4ffd3172e9958ce1b6e7811a200394336b1891e91b7915deb287c0f88e8e2d29df9f52dbe92cf352574cec855005b87fd490f0be7c647c69c202134aa14039"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x6, 0x61, 0x68, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xffff}, @generic={0x30, 0x30, "4ae96a19a630ca0cf9651fb76462a744e084b5ae8b2829550d745648deeedfe94d7b46a499b16eef8e6dc068336a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x9, 0x80, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xcfcd}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x6, 0x81, 0x1, [@generic={0xdd, 0xe, "b31e38b76b0eac27b5d68b7fc84a3ba55a1f71c50f2ab16f96a6b028cb0ebe0383fdcfafd5c11841befd60f9b5d037b4b1eac0c737af6b8bdffad70964f99c7d7f4c831db7cc022f61e8795defa4a059f653a466ef89b90c712beca938bcbad64b888d9cc00c97d10808bd2497d7351a0e932904a08cae4a5afd161307287f88f94acb3edba895e866c0550dca2ac9199a072bad791e028213eef5b01be79e503fde608fc6c0d1cd948c47605ac6a90b4fa8c4f4da751a04f4befd17983ef63db03deb69ef63ae4819d852a2f046e7e9f0b39ad181ac83c4cbd0ba"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x1, 0x1f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x75, 0x61}]}}, {{0x9, 0x5, 0x5, 0x2, 0x48, 0x34, 0x0, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x1, 0x51}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0xea, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x29, 0x400}]}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x310, 0xa8, 0x3, 0x5, 0x10, 0x40}, 0x2f, &(0x7f0000000f80)={0x5, 0xf, 0x2f, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0xfe, 0x3, 0x1, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x8, 0x40}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x0, 0xf00f, 0x4, [0x7f80f0, 0xff0000]}, @generic={0x4, 0x10, 0x1, '*'}]}, 0x8, [{0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x443}}, {0x7, &(0x7f0000001000)=@string={0x7, 0x3, "a0943aa351"}}, {0x68, &(0x7f0000001040)=@string={0x68, 0x3, "38882e68038ebd41edda1264c6d43eb8fc6d59f3fb13a070e2e66f19ddb44ca4763ca54f7b7fdaebbff6018477b149d7120cd91ac300b034898b7893a11d701a2fb1e1b39874a62bdc835843bb5b679fc8de797187bb15ae573c264635c809f8ac4cd9399008"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x459}}, {0x51, &(0x7f0000001100)=@string={0x51, 0x3, "6472156974fbfea2a0ac43d1233db0c5dc3e06a97c5d34aab170e0212632c091eeea100f023adf71d2fc12f91e8f2ed1456b820121b86c173df33a2c2a4c9e609a65391deb09cf72af7d7654c473ce"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x4001}}, {0x19, &(0x7f00000011c0)=@string={0x19, 0x3, "791321dcfe8958d1f62afe6de22aff441dcb4ec4fe4059"}}, {0x23, &(0x7f0000001200)=@string={0x23, 0x3, "04a86053548c43230895210e40e54c196373288e415cbbd76417388f7fec44da86"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, &(0x7f00000012c0)={0x20, 0x30, 0xa8, {0xa8, 0x23, "575f11a845848168c72915a14479e0d2ed7b575bef24c10d2f154e95ad2e9fca5eef7e2e6c56831313ab1f0106a00e04d2e95ae878a0953eadd29e468f10a0fc9110553ee6232bccbe0a86f36f93d9f3bfe6900fc4f224bc4ebf7d53c122fef4090181304d817248a4665e2fced5e6275fd8585827a23097f8e5c1ecbae96d38c848f65a48119d92fa7f0b6ebf1a4bcb6519f62c4017603f0e7d2e7b05b913686e80a10cdeab"}}, &(0x7f0000001380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f00000013c0), &(0x7f0000001400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x5, 0x1, {0x22, 0xc03}}}}, &(0x7f0000001740)={0x2c, &(0x7f0000001480)={0x40, 0x15, 0xe9, "bd7b6e54f58c0f30b8ca64a8a1d6b77399159a6bed9307c5c35e1b98d2f306777cf1f1ae7d9ed973862ba7bbf72e3a16958839d0c2cc9045657b8e025f197bd5babe72f83cc4bba3763bd362bcdc81c45f1cb26d4c663139771abb26f5bebe01e889dded5c81464dff015c0d43d13f3d727e958bc9edbdbbd80b2674f8142fbad2fd30514bea000a7707f44c628fed932fc9767eddcfd809f235baf8119d7ecff5c17832d1f923917c796b08e898e6d79361e3d0bb444e07131472cd6e81e2def32479b28ccdf9f99948eae731a106e113713252874d284906297b543e491b02c7fa1a648327b43a2a"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000001600)={0x20, 0x1, 0xeb, "26c4fe1aa8dbe261d2d32eb13b02244f18eaecafeb317a04b98d677285bae076244d66ca5a42cfb08c50c7953a31676028973883dcc27926f9684572f16c27f6dc3129dd2025ec8fa9aa15cf4b24623b8f79fbe48a19bff3860d37f67d1dcd31c63dd80a1d2fd651a33fbb026d74711fc4341e991d4c005da36042059410c63a43dbe33ea547800e5fbbfe091640d21aee7df1e99b6b8ecb7b42b5d3b3b1291f184b6e2d357c68ea8bb99a3febffee5788e2e897dbfc6d4d232dceb5e40ccfb07d7f0b17ec6ad0317bda8366faf120a659a4836e6a13f234320b9dde588b03808cb77dc02461ed71223524"}, &(0x7f0000001700)={0x20, 0x3, 0x1, 0x4}}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x24f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xe2, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x68b8, 0x9b, 0x1, {0x22, 0x521}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x90, 0x40, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x40, 0x3f}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x3f, 0x3, 0x53, 0x8, 0x48}, 0x18d, &(0x7f0000000240)={0x5, 0xf, 0x18d, 0x2, [@generic={0x9f, 0x10, 0x1, "803fc83eaf136152a5f14f77b5bf127b8a83e27e5c3c27098f98c9ff472517240ca8d0a9248b4a0116abd15ac506740b5215f9550ea1112c6814832fc656589cf4d8a6635e423a28328ba4041c16421c9bcaf2d2ca5fb71b008c556195b7e1394ae106ed4be156e3979620313537376174918917102c5491d17710eb1e0d1715c7a87fa5c4e968a74643ba15107cff77604dd6e8bc747394cdae4cde"}, @generic={0xe9, 0x10, 0x3, "2767ac83035d4cfb36ccc3c06c202dfa08d49b3bf4a2bb4511b723e433c4cdef02548f1588903685b1ea1155bbba7a552e7b62e1e79260d579ba87632c9222fca478dca55bc961f3173493591dba02f460a326575888d7d6eda26c15403923669fa1eeedb3c2febe939e2f249bf64a078f624745d33a24957e904b68d47e5d37b4b1e13e274a3f0de042f4450310bdf6ad1b4edfaee2b431323bdc7f9c17907cb9fb4b9afda3fd519fd9727a3741edeccb18bfbf07e0ba03100d123c62f26742932722f5c0aa3a215b7fbd162fd59779d2d034765f141e34b387513a5c502a9fd6e1d6b76f9c"}]}, 0x1, [{0x90, &(0x7f0000000400)=@string={0x90, 0x3, "86b51a380aa04e7543e4f32f6ebb65bf1bc4067c54bfbd3c6614475ab723d09e8561f048156d53434f408e4dbdb443cf80cf9f1523227ebaf7286e9c8c4688a83f93950fe31bec36b617aeea191180b31f9b22de261aefb8402e6bec9cbf54abbc8f282e051942d066a293dfa4d545e7aeb3b36031621862410a5bf94747a0179555a700d11a37b90319ba455d68"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000580)={0x24, &(0x7f0000000180)={0x40, 0x31, 0x23, {0x23, 0x21, "95d4a01cabee41934a80339eeca2f7d49f173ce9e7fbb45fb535a6db263d9f62e9"}}, &(0x7f00000001c0)={0x0, 0x3, 0x18, @string={0x18, 0x3, "7e06d6da35cf004cc82df3baff7f9d002d6a64b15758"}}, &(0x7f00000004c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x0, 0x0, 0xc}, @global=@item_012={0x1, 0x1, 0x5, "c9"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x33b}}}}, &(0x7f0000000800)={0x2c, &(0x7f00000005c0)={0x0, 0x31, 0xb3, "a8ef6f0509e96767de94f7c336dae561c082f4eba4441258b7264f760f8c6f385aba9a5e9e6fe7123ad4cc83937df9d2c4fb9511f7136d720b9a9b8e8485ee7b49da1e6782bee02699556dc6c5d3c3ee8f1571990553cfe0ad6906fe5356e4c5a10bff6b854b5922960225aa4c4293503ff648795d01acec3ff24a1efae16368c7bd3d57919828f69cc124cae7ef13e127b5203651f15919314a8a220cb73d0d7cc8c8aab5a223a86df41f0e6cb998d9f3639e"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0x20, 0x1, 0x9a, "0f8b5d1b1c7c247560f958fccd9789c33bb8a7da7bf52dd854fd802dd662a12018a62fbbe0d25f348c820be2c9446b12c3ab01514d4849af0b9b7e888a8c0859973ae34d4df96c6fd66c9ae62c8c046f2c1b38bfffe1b1642b3a96ef04957309462501943cf78d07262e7f28e13332e8b5e4538a201dda2241c7787029407f60542cbb1ae9c6ca58d7f599cd49336daabcede3af283b06a9b015"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x8}}) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) r4 = syz_usb_connect(0x4, 0x314, &(0x7f0000002700)={{0x12, 0x1, 0x310, 0x16, 0xa1, 0x6f, 0x8, 0xbda, 0x817f, 0xe3ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x302, 0x1, 0xfb, 0x9, 0xa0, 0x9, [{{0x9, 0x4, 0xa2, 0x2, 0x7, 0x1a, 0xf7, 0xc, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x8001}, [@processing_unit={0xb, 0x24, 0x7, 0x2, 0x6, 0x9, '+}rQ'}]}], [{{0x9, 0x5, 0xc, 0x14, 0x200, 0xdd, 0x4d, 0x2, [@generic={0x2e, 0xe, "86ce9d9716f6cdf899995fe9335a75b4dcb9461edb80f13b83abf9515cdbfb552fc0439f16b48993e8dbda69"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x6, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x1000}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0xff, 0x6, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1a}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x3f, 0x20, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9800}, @generic={0x102, 0x21, "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"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x4, 0x7, 0x1, [@generic={0xbc, 0xa, "5395107b48acc23e89619870062f1d6ad8877f3c266bea9a195a113f64f674a58b48af9146f7cc6fa7dd906d156c7472736b9d56805218d7d7828281d48d98fb15a2ea54da0bdca89e0378dea7c8905811fbb19ec644bfec8ea5c4db2029cbefea2a7e7056ef586097c49415b3bb0b3a124bc89d5559470d84586d9b42c0959823802e0a62efe557d494ab844bb25df2b338253d740752ca7a174f064c91e91ef8fee71ee34180eaddf8e6c50c8db5177037a2c13e6ebb404b94"}, @uac_iso={0x7, 0x25, 0x1, 0xb899cb6f77ccd4a, 0x2, 0x401}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x7f, 0x40, 0x81, [@generic={0x80, 0x21, "eb397508253f260c175974d7f5ca8249ebcf6e1c9997711b6638766c86bdaa034cf68de1ee8368a6670d91a21ddac1326d147ca735a3c6cd881435c3f007bac4cb5e2fe338dc1a1f1a19d106585b2ce2605d2c2a297366eadaca2d1ffbd585933e36cec06b92a1fbb6eb5c3c4feab6ad790d25c2faa207080b99a28c49ff"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x438, 0x2, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7a, 0x4}]}}]}}]}}]}}, &(0x7f0000002e00)={0xa, &(0x7f0000002a40)={0xa, 0x6, 0x310, 0x9, 0x7, 0x70, 0x8, 0x20}, 0x20, &(0x7f0000002a80)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "c58c430f017876270cbbd4472588a11c"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x0, 0x199}]}, 0x7, [{0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x41b}}, {0xf7, &(0x7f0000002b00)=@string={0xf7, 0x3, "45b0f5bd836dda45df1b34c2ec04d963c3f78a6393bae5e76425e6d3464a081854e0851784cd427e082185018d61e8658da22166abe1f14073d9b4177042496b133694174055c223c2334fd4ec05b41ccf2101d97f4b7856af947a40ab2479c00c500d7de4893ce11ef7f880cf222718a45756a5ba97f9b86acff08a3f2064a9f42580cf8f5c650b81a6b6f778eb9fb638a5ecd833a63fdd6936963a0f16cf84bb6404ab4df466aa69955f262e215ed30cd9c7bcef30f81380d69f3262029b52ab76194019000e3d20ac3a409cdddc09bb05d7d7d5012fe6de0eecf724e50979cc3d2d355ecb3f00f729fd0f18da65693016f33f62"}}, {0x5e, &(0x7f0000002c00)=@string={0x5e, 0x3, "3bdaa16c91d004c8649c82ad098a293bb08f2aee2cf17d565c0a699578375d8fcbeba3de859c4a7f293001d01a7890eab01b74b534cd71bfbced16b9a1a804b0753501a9c205af3315b656299be8ab043f37e4fba81e638b2d50661e"}}, {0xb, &(0x7f0000002c80)=@string={0xb, 0x3, "23907bff16781a06a9"}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000002d00)=@lang_id={0x4, 0x3, 0x280a}}, {0x9c, &(0x7f0000002d40)=@string={0x9c, 0x3, "bcc23b6aba3374f28e98051e42cac42e20aff1f93103962ce13990a18db3672b962ed5677b46aa26e6e9f5652b41a2e9e08fa2b67cfbbdd74207f766dac44777f336cfae4065820591efb3e2870106c99b0ccf84957eced91adf964f411b9d5f3ab67161f369757ae1cc5c888af9ce74723bcbe3d3f1d6cd5999eff864b8bb15a9e3df9c5055d8e2ace532e2f9e49375b6d4b61ceae41cf29f0e"}}]}) syz_usb_control_io$hid(r4, &(0x7f00000030c0)={0x24, &(0x7f0000002e80)={0x20, 0x31, 0xe1, {0xe1, 0xf, "c88a2cb609996c0be20ca044196312112b80a2870135feeeb87b03d89e8e882f318048fc6c3a588e8649f04c34f46a5915bd660b478bc231705875ae01b9253e9551f3641480ead3d4f9df910a3be57d80d8793b12910d80eade628523d0c1119209300bfb41dac037fcb17c131399927f2b2f51d142169cda23430a06965101e3d71e7a622b4616bd3e6a6d5935bee26adf5d720be1692102f5526c6bbc48a38a538554c701b3b3387c46a0fc8a708304af19ab21f2b1891b8e3639a90b69d570a5c49185ba8500bd5874f62098c4d47329af07195e13fe8a13cf3f03f0d4"}}, &(0x7f0000002f80)={0x0, 0x3, 0x96, @string={0x96, 0x3, "79ad8e2d91b7ff42770b0b610357b8a04f7e90a54ce3f89cc83e4118bff4cf67d25a51b0d7919b95cb2e844789a493e7bce171420d11f27f53055b36f634fa6ec52f6b5dbaf87bfa029c9ea10997e978125f79bb14c241ca870e96d6eae5c12f6fe30d703bfa82b15f91e4136b87ce4ac11fea7f4c0c566e5cf5dec4031c23f9654292dd9a626e4d353f447645607befc8e85793"}}, &(0x7f0000003040)={0x0, 0x22, 0x19, {[@local=@item_4={0x3, 0x2, 0x7, "63678798"}, @main=@item_012={0x1, 0x0, 0xa, "aa"}, @local=@item_4={0x3, 0x2, 0x1, "2c7191ea"}, @main=@item_4={0x3, 0x0, 0xc, "629c23f3"}, @global=@item_4={0x3, 0x1, 0x9, "6de7ac6f"}, @local=@item_012={0x2, 0x2, 0xa, "5b12"}]}}, &(0x7f0000003080)={0x0, 0x21, 0x9, {0x9, 0x21, 0xba00, 0x7f, 0x1, {0x22, 0x366}}}}, &(0x7f0000003380)={0x2c, &(0x7f0000003100)={0x0, 0xa, 0xf1, "47ea1147fb56aec356aa30ae495cce9313bc91312aee93630a2054ac1e0225231bbc137c5f8e82335d54091d44bb44194d0b7d6227b60e405818062287c54533e3de4b1842fdc0efb24aa451a5ccbbb292da27df347e97869d0ca04dc87c64a031b4e1d83ecbf053a642014007bb90ceb01a76f50a3dac9d973dd8e42d2acc8cec5070d26f060945a5a4252e63314a599e3b0ddbbe6e76f68e5ce7292177dedc522c35565ca22affbc9021ee2ab90998ae72d0026f7d109e9d66502a9286655d8e0036ac76673295721f0df52977fa41ffa8170c1a479654eb4d6a83f1c3a36a982983e8d19428de7d1baf7c71afc606d1"}, &(0x7f0000003200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000003240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000003280)={0x20, 0x1, 0x9e, "3fb1d6d9909ef869cf73881e7000dd17844cb456cd909ee10249ab723161fd944ad9b3b91ca1aef3427db642465ea81eb45954651ee635ff28f8efd9c4a344799d8d432c1626fb2a38f060326435854f580222e23bec410df32c2ac451e0d25d73b2d55132eb9682ef3e3d5c1ede6dc94799ce7d1f1a578be4220e145b92b793226a46e5a57951c751317ef9ba556f38de7e6ba3762ea6fd3e3f14695499"}, &(0x7f0000003340)={0x20, 0x3, 0x1, 0x5}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect(0x0, 0xc4a, &(0x7f0000001780)={{0x12, 0x1, 0x0, 0xf2, 0x9e, 0xaa, 0x8, 0x46d, 0x900, 0x8a76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc38, 0x3, 0xfb, 0x81, 0x60, 0x7f, [{{0x9, 0x4, 0x65, 0x0, 0x6, 0x76, 0xd1, 0xed, 0x7d, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "a648f509"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x0, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x34e6}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x7, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x8, [0x100, 0x2, 0x3ff, 0x20, 0x6, 0xffc1]}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x6, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x5, 0x9fc}]}], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x3, 0x6, 0x0, [@generic={0x9f, 0x1, "835787de63030a75d91a0caeb791b7e7a012f44f4d8e1d8053fb3bd00248defc2b1995fa5d489404628fbf7d934c09e2e66f1fc4cc2ca77a294e304e316448526ea8b2c53ecfca1aa509a53e5b64bca28381f2f1fb9a618b45684f95358fbd8b20ef23b4ec2a72f657dd4ed92fb62da6e1306def3af17baa4a9424acf8325bb2cce5ef5b87fd6c2605eb168067c090c8c94d887de624f9e4fd3939f291"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0xff, 0x40, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x51b5}]}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x7, 0x2, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x40, 0x6, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0xd3d0cb100c613571, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xa560}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x7, 0x7}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x40, 0x3f, 0x4e, [@generic={0x5e, 0x24, "ddb8bb442a3d6567cbd7f18a6e91ff1cb5f61623ea776b01b502fdc137b356681a163aa95d7c69dc768956c6a7d7b852a2ec49ed9fddf1c2bf44e8bb66b562774238b071f2f2c223fa5fc6865c3870aa6cf31f5d817b47b64371368e"}]}}]}}, {{0x9, 0x4, 0xd7, 0x94, 0xa, 0xc0, 0x81, 0x78, 0x4, [], [{{0x9, 0x5, 0x4, 0xc, 0x400, 0x0, 0x7, 0xfb, [@generic={0x1c, 0x5, "3f16768351226b47b7c6d71042b41d347a7c951bdd31ad9a1b50"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x95}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0xf7, 0x5, 0x9, [@generic={0xba, 0x2, "19386389e6aadd6b2c538a11b24fa11dc0b428bc77aa880418fa19235c1e4a5e67f5a8d3604ed07bc1cb887a740b6082fab717825c8b3a0ca191728d1eb15b6743928c0c9186ac569992a33037f614c6f2441d969482c48aeaf51af7b4a15510e975ae5fb55c087229e48a2890d4e5b657ce66d81d96ba6dd9f799adea315a2978390d1bf2782817044580a41fa0059bfa256ad85a2a7038a6708992de6c527ea8ae8c0c1c7fefed420dd5d3a440af2a41eb4f0f431c85a8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x64f}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x8, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xffff}]}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x6, 0x24, 0x4f, [@generic={0xc3, 0x7, "2a6bc77cd7a78e537a416fd0ee5bbcac64abf427debe5b1978b4156c4b36c816a72a7f1fb3d7c85f83b290ea9c48349279ef4a6a5a5abbe2918f4dca7beea130f289f3c2703e01d6149622d3026c4ee589c39402bc22dbf55be59d88c2438e74b6786fe2048e8d9b464bf658583de76f5878371c33f8eb5944f894cecac0e15efeff0e4113e7a2d35c30dcb05a96350bad90be633cecacca7453411890a6e8e63eca2bf957c1e27981c23586da7355ec4ac40d5c6614885fb12de08d59e0ab663d"}, @uac_iso={0x7, 0x25, 0x1, 0x9e73662a7686e372, 0x6, 0x6}]}}, {{0x9, 0x5, 0xa7fccc9fd90c4fbf, 0x2, 0x8, 0x2, 0x0, 0x13}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x1, 0xea, 0x20}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x4, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x5}, @generic={0x13, 0x5, "70967591415a6f843cc67b4b1ff7a5ceba"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x3, 0x1, 0x7, [@generic={0xc5, 0x0, "0ee54da5b83f6e40145b07816bf872ca643015920829fc0d28434b2b3d34865ab4a6ae6a91cab403d9b7f243fe9d42879821c7d08100de2d4774344603d79e1a3d1d805e36086db782bc33b66cd699afa2a0c7a19a0660afa1110fef2ec87b2761ddb3b48f8cc35456089bc10fc45f675166e61b14ee079a4f699099daab55f9cfce37d7d8c621d0719d7beaa81180db2d20d139066c272573c3b24007ea24dd7a8482af40993c47ac28cdac04b421ec9563b7cfc1ad8210ec5e7811a23d23cf51118c"}, @generic={0x3a, 0x13, "e8d061d259c1c0e058bd3217128f41bcbaf0e5018b66e87b353cdc5fff680e1d29798c3a946b77c6845cd89d45f6b5706327fc067f2fd46c"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7f, 0x81, 0xb3, [@generic={0xd4, 0xa, "2e71ae1f3e6b7c489af7d28c3888d28f7a200e686f36a57e91673eee31e212d1ec4a1e17666bb691fd479e0eaaf6df7f512138cf110d4060754bdcdb92f07ba2f6435b7873021e8201f383f13de12a86ecc18e69da515e5dc5f6ae620a0627b05b91b8832c5e143ac844ad850fe0f3a478eb4aa6ca1cafbab6e7d5ceb2efa735dfa8cc0f073515699da266e01ef41e34d606da16f1d15f73904422f7bc10c49f826394c5511c41fd5eca390b4a94fc7abb542aceb54887f1341fa2a1560bc0bb73d2ef538b5b958b9202a5ae1235a68e30ff"}, @generic={0xb0, 0x45c2a9e6be7ef827, "a8dffe1f0888c411d24d777139f8e49dc7eb91a04a534a07e3392acf00a22477a2b485e71aa6582cd2d282274f9ace5dea56e3813dee8155f9c67eba44a8a00e168f034a0cc5324cc5bd69e67210e140989050d03fc86076a48a8d577bc6be12693f10d90e26f5115a4b34dd3a518c8bb27f62354696290d870e0f7b4cb911c60090c579d603f2576ec16c9622c693a3c8cd4c7c4824a80f9199253baf1a48f1341a4634b281bb4613f1ab556c2d"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x8, 0x1f, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7f}, @generic={0xcd, 0xd, "280c3a323c09c67ed08f436ab36c2c9b3783623797b7c79ba8985d5df1ad92e5d3c741df11e603ce701a14cac2b0d95d1d52812831c9d173913223acda3dfbebb0595f568eb543c7a4d4963d2d5d386aa284d6aabceabef19e67680d908d32f680c80579ab5b85b9ba70ec2e5245ed3e53c055785c599bf4429c79290afff9ee2183e437d1d60e973a952b0d11b059baadf79794d9cba9447598c49bbba74c7bf7955308988dc94d4b657d1265d731a33ca157fae2b6fe2f8f1910f22ea9ff90f240188f8f43c53c1431d3"}]}}]}}, {{0x9, 0x4, 0x1, 0x20, 0xe, 0x40, 0x76, 0xd2, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x7fff, 0x81}, [@mixer_unit={0x9, 0x24, 0x4, 0x2, 0x40, "abfd8202"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x6, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x5, 0x45, 0x8000, 0x1f, 0x3}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x3, 0x64, "2d97671e"}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x20, "37375d1d63ed"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x5, 0x7f, 0x5, 0x68, 0xff}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x20, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x0, 0x4, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x5, 0x4, 0x4, [@generic={0x7b, 0xf, "a242c8b4074a42a2c04ccb265519052ff3eeb71ddbc29e1b966340aaaabff89b638da8d05901cf8480f1de20c527d19f61cbce6c63bf4416bf2b595918b8e09e3553c37679f92ff28f88f8a2151ec4af5d02b9281a258c1a3ec0b138299c1b50add4ca88bfaedcdfcbcafbd5591b20176364af901706a58df6"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x60, 0x9, 0x7}}, {{0x9, 0x5, 0xf, 0x1, 0xb8, 0x6, 0x3e, 0x1, [@generic={0x86, 0x6, "da701a9bb476a922fe3ce82458dd3756698e1854de816d6d35a2b63220332e6c209c367ef2f9d15a899f9d3fcdfdc063df2776b28db9ed2693509d247fb336da5cb3b37b7426e60c4648837efae218d6d0ee73e223ad6255c53e6d1469129b7385471e37c6c857aab2de04796d100a313b5e8709ad294ac87e9e1b0e9170f7126c2c1db7"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x3f, 0x7, 0x3, [@generic={0xfa, 0xd, "ccc03968022665d3c182fc5ac191b315908ebc863152386f0cfc47d0a9cc714ac7ed2a04c1ccfb9bd29706e410278ca29220e26f95b9477ea6c2443dfd7044adffa84505767d699e4718e60323e4c030ef3291d86afa41ac9811c7bf27ce3ee34449c126fa2b430c70577ecd7dcf83713a68f9c3d37c170575e82b8df8e8b62ac2e98924a1ef6c1a62630e5b98b8548af5f32d0935dca4d2d3e1916a46814b5da144743f285706f22ecaed68303675a23dbd99ca521e17b67ce1131b9c95e3eb6d771d93f7fe5f9a730e4993cb8d29bda23f5a1f38eb858bb59588141054971c436ac166d016dbb39ad3b9f8440df0fe59bdb1e97c7208b4"}, @generic={0xc1, 0x1, "32a38bbba036d714fa55d32dd7c6e71a5b2d8c08d465e5aae981ae56b4da4a93b3c5e280fcaa4c67619c843f72beea36fa24efe32ddcf287b61058b71d3ac4a7f240f5adf75568245d728d4012578b65c5620df4958e840f2b3da26f17d42e0894ef61da6dc6742d56f05b0c2f7cf6115cfca9500d308dcf24dc90fd67dbef02c52a048300039b7a0249b81ae911e73058ee0f9b914b9e5769fd688da72ce837e31f057dd052323718d38d95f2038e5cc1aadab2894e7fd0cd9fe4881da7e0"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xe5, 0x4, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x2, 0xb7, 0x1, [@generic={0xe, 0x10, "827011a024b2d14b9a42730b"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x9, 0x5, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x16}, @generic={0x6d, 0x8, "833ccb3d06ac298dff5b125826fecb0f1bfb61459128986401cbe9be975176922ca53680299dc004d8a1c6bdff87006a1d08cc5f662ac1a124f37e8223a7999a3d4881413d4687b68a2ebee6d89ef48618fbe9e5704f008b71685dd86974f76f7812ffcb49e093b56331e7"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7d, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x7f}, @generic={0xbe, 0xd, "e30123d3303eec767b80fdb6b76ae20d31b9de6c924efb1607c098daa7848e3b3aa7a004099e844d445ae3d53e981d5dc0d127596bf1fa7026ac6d5c180c9afa687dd3b7b107ed203d328d86fe49066a4170aa1500fa32f760893d86aa81ac9f04a931c1af075b51c692dad90054e6766e85b2069f7500a54bc63f7e4c3e4b5e9d847ad2723d780c971daddc32c2c2d8c0e1ef6a2d470f8f8270bfe2dfdbe99b70c2185491efa56cdfb3ca869a0d16938448e5938a149d0b152312bf"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x4, 0xb8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0xc5}]}}, {{0x9, 0x5, 0x2, 0x0, 0x248, 0x7f, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x25, 0x2, 0x2, [@generic={0x23, 0xe, "3c03afe2b1daf95f85117c1f942c32fb4edb2175bad1e662d9a6eb0806e6cda072"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x2, 0x0, 0x5b}}]}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002400)={0xa, 0x6, 0x100, 0x0, 0x8, 0x4, 0x40, 0x5}, 0x32, &(0x7f0000002440)={0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6a, 0x1, 0x7f, 0x101, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x7f, 0xf00f, 0x8, [0xc0, 0xff0000, 0x0]}]}, 0x3, [{0xd1, &(0x7f0000002480)=@string={0xd1, 0x3, "d64c0b64ec0a3359cdcfb5f889abd0242e41702bd6766dbc8d4f4329f4758cd214f93bb1c1368883c179c46f6baf1d00cfde457eebfe32496a0123a976f50cc4f9f0e6041c25ccdb44a61773d1001c096dabd532f909ece67b026570c668388bfd0723586060b197723881f1331f81754d65ddab6c6c8ef46b89b36aaf2bc0a8dcbd08b50c41e7e38315b09af416038a16cfae6c873cb9f83235fc010177533bc28b6e3557622c8cded96f8f00f2decabc0437d2074247659fd333e3fbcd1be8fabda58367ec5a0845f6cf22576db9"}}, {0xe6, &(0x7f0000002580)=@string={0xe6, 0x3, "4eaf81ea3f403fb620c5597b9cd85b06261854ab7f672656aa7f2d87cfe82bb18665af04634c45c2104e29e51727d288944783bf960b6b23e0a0ca7104678761ae37f3c235a42c34b646eeeb89b416cf775024181c29df05cf5eac9f8d14ce0039a092d259b130f83abbb772a07a3a48768da235f72b47c4465ad1107ca1efc95374cfc861fe434cc87530a7c32e9f3e6ffcb8ce9856fcc5f6d8e45720293a1ea63c812652441ee4cada0b8a7b33337e1ee5af36ac23053850c7b65477d33f33196bb2d648effa907acbf72962ffc24d17fe0ea65ea9ca6dd90337d4b499402fe245a3a3"}}, {0x4, &(0x7f0000002680)=@lang_id={0x4, 0x3, 0x3c1a}}]}) (async) syz_usb_connect(0x7, 0x6e2, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x99, 0x36, 0x11, 0xff, 0x93a, 0x2620, 0x78ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d0, 0x2, 0x1, 0x57, 0x0, 0x1, [{{0x9, 0x4, 0x89, 0x2, 0x3, 0x47, 0xb5, 0x14, 0x4, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e404a5ba4b"}, {0x5, 0x24, 0x0, 0x7d4c}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xfffb, 0x80, 0x6}, [@acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x6, 0x10, 0x40, 0x9, 0x2, 0x4, [@generic={0x3b, 0x8, "01d1ea49761a6f4cd6e0fb4f2be234f928bd117827a088f92490add47713f6d9383ebbe7cf36765bc85de9d19b9cea75563a7438741565fb72"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x7, 0xe, 0x7f, [@generic={0xd4, 0x10, "a6544b8ebd33cae08bfb672293a02efd852b2daa0a5446f74d65b41f3bec453217932b1a3dd23582d95a36b47aff626e10066b3025afe967884ea4962a23ed93a8f4465aac697cc9c8f4781209f896ff5bb4e552235191b64448dbb442542fee2b992ce0259e32781ba6d7b4d47fd6c8e71b4cf2a01ee321da7ce3f79f97149504cc569af9ec354df9be5cb351da6fd38934ea150dee13eeef4740a2d0c44af62424d4a3057d024af3fa363415680e2009a06b09e0e990e9580e23c3b6fc5eb63f5015a4e287d921f885c6bb1a711030bbd0"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x81, 0x20, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3ff}]}}]}}, {{0x9, 0x4, 0xdc, 0x1, 0xd, 0xff, 0x78, 0xc8, 0x55, [@hid_hid={0x9, 0x21, 0x800, 0x4, 0x1, {0x22, 0x61d}}, @generic={0xb5, 0x9, "f55f13fcfb49837634da548f2a2aef32fa7e86de005597d704d5e0db76571d8260551991d02b0424556239b0d44f99e9220b12873209c82e9cd7fcdb070c02329314fb93dc0b2540054a7b6fc20ba6604c8321424a27cce87db08028b6c5235251fde166d67bb1e2b04ce254d82eef35a870db7804037f96663aa48a006e474e2b315614d067d86e91804d7d80bc4e3fcd08e2a96388f17c7fba6803163e88dd0f4891849b842180f59b08eb009f94b81f4ecb"}], [{{0x9, 0x5, 0x3, 0x3, 0x40, 0x6, 0x7f, 0x1, [@generic={0x6e, 0x6, "9cb192b0edba71e48640d9a7ef8bc164f1bbc56825a30f140e58d4603ed8e9ce3239d0c95554dc5dac28df70e86a606db5d6676f35a96bb2acf8fc93fdb2f93cb1bc04a19c1d20ac3caf9bc504cbd07a788a8630c1e5dab62b35a58d384d97c4845fbedb01faa43d68025fed"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xc7, 0x401}]}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x3, 0x5, 0x2, [@generic={0x91, 0x30, "09bd8012863a261fc0e0b8c1eb9629d0232d4f6ced5ea971bba81caced67493498ccafef5eb02abd26477f901394506ccf6cd981c944968a42f738725b656f921feab4a2a6333cbb8c407f7cf31636b10e43a5bb321fc3d6218b960ff757b5769fe0bfca65d2b1dbf4c1b008183c53f1e2c5929cf9bda7385f6eaba53274217796bd530fa34fdb0f77926ad7f3b774"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x8, 0x6437}]}}, {{0x9, 0x5, 0xe, 0x10, 0x7f7, 0xb7, 0x80, 0x0, [@generic={0x95, 0x11, "7a94f7e3b6665f364a9613eaff27c6c2cded46ba803b808025d55e97d55e73e41c13f7208da2a7a21e98c25929890e5498e77130dc2660e380e8f2867de0e821f669d70b403f2cfb727ff375e4f22ffd4094bc0632f3be2a7fabab6d06f4dae8bf3dba47c00e205d1282ab41be0bd7e6b798a037205592d1ed8834943ef9f9279045d43532ed1f8dd2487b1564e53e30c38140"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x9, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8000}, @generic={0x66, 0x1, "69c07a2c196fbb73ec0400d5916a219bf836340f6f9e8f93023455e98febf77604166d7ba2b42d1f84dede984f613f943c31fe257cc55e8d2dc89916598ed16bc5a63698987fd4860b72f931d9eecbf7403b5874767c661536ab5a7aeccf23f637697cd2"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x5a, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0xbf}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x6}]}}, {{0x9, 0x5, 0x0, 0x5ece36e416787ee3, 0x10, 0xe0, 0x14, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xc3, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x3}, @generic={0xcf, 0xf, "c6a9840e1af5335f0eb9999a875147085d75c7b28210708a42d060fb6a8c124ada06997905082ae242dbaa1649b9fd9dea9acde30fceb5e74431af01df1f067f70a9db512132f9bd8093abb398b355d244482aab2a65b729af3f3e1484d1e75056dc2c642f79ccc9272c0a65ace440405a92cbf630cb66a9ef1144eac5534268221d77cf247c9c5166e5bbab2edd4ffd3172e9958ce1b6e7811a200394336b1891e91b7915deb287c0f88e8e2d29df9f52dbe92cf352574cec855005b87fd490f0be7c647c69c202134aa14039"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x6, 0x61, 0x68, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xffff}, @generic={0x30, 0x30, "4ae96a19a630ca0cf9651fb76462a744e084b5ae8b2829550d745648deeedfe94d7b46a499b16eef8e6dc068336a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x9, 0x80, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xcfcd}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x6, 0x81, 0x1, [@generic={0xdd, 0xe, "b31e38b76b0eac27b5d68b7fc84a3ba55a1f71c50f2ab16f96a6b028cb0ebe0383fdcfafd5c11841befd60f9b5d037b4b1eac0c737af6b8bdffad70964f99c7d7f4c831db7cc022f61e8795defa4a059f653a466ef89b90c712beca938bcbad64b888d9cc00c97d10808bd2497d7351a0e932904a08cae4a5afd161307287f88f94acb3edba895e866c0550dca2ac9199a072bad791e028213eef5b01be79e503fde608fc6c0d1cd948c47605ac6a90b4fa8c4f4da751a04f4befd17983ef63db03deb69ef63ae4819d852a2f046e7e9f0b39ad181ac83c4cbd0ba"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x1, 0x1f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x75, 0x61}]}}, {{0x9, 0x5, 0x5, 0x2, 0x48, 0x34, 0x0, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x1, 0x51}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0xea, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x29, 0x400}]}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x310, 0xa8, 0x3, 0x5, 0x10, 0x40}, 0x2f, &(0x7f0000000f80)={0x5, 0xf, 0x2f, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0xfe, 0x3, 0x1, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x8, 0x40}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x0, 0xf00f, 0x4, [0x7f80f0, 0xff0000]}, @generic={0x4, 0x10, 0x1, '*'}]}, 0x8, [{0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x443}}, {0x7, &(0x7f0000001000)=@string={0x7, 0x3, "a0943aa351"}}, {0x68, &(0x7f0000001040)=@string={0x68, 0x3, "38882e68038ebd41edda1264c6d43eb8fc6d59f3fb13a070e2e66f19ddb44ca4763ca54f7b7fdaebbff6018477b149d7120cd91ac300b034898b7893a11d701a2fb1e1b39874a62bdc835843bb5b679fc8de797187bb15ae573c264635c809f8ac4cd9399008"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x459}}, {0x51, &(0x7f0000001100)=@string={0x51, 0x3, "6472156974fbfea2a0ac43d1233db0c5dc3e06a97c5d34aab170e0212632c091eeea100f023adf71d2fc12f91e8f2ed1456b820121b86c173df33a2c2a4c9e609a65391deb09cf72af7d7654c473ce"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x4001}}, {0x19, &(0x7f00000011c0)=@string={0x19, 0x3, "791321dcfe8958d1f62afe6de22aff441dcb4ec4fe4059"}}, {0x23, &(0x7f0000001200)=@string={0x23, 0x3, "04a86053548c43230895210e40e54c196373288e415cbbd76417388f7fec44da86"}}]}) (async) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, &(0x7f00000012c0)={0x20, 0x30, 0xa8, {0xa8, 0x23, "575f11a845848168c72915a14479e0d2ed7b575bef24c10d2f154e95ad2e9fca5eef7e2e6c56831313ab1f0106a00e04d2e95ae878a0953eadd29e468f10a0fc9110553ee6232bccbe0a86f36f93d9f3bfe6900fc4f224bc4ebf7d53c122fef4090181304d817248a4665e2fced5e6275fd8585827a23097f8e5c1ecbae96d38c848f65a48119d92fa7f0b6ebf1a4bcb6519f62c4017603f0e7d2e7b05b913686e80a10cdeab"}}, &(0x7f0000001380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f00000013c0), &(0x7f0000001400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x5, 0x1, {0x22, 0xc03}}}}, &(0x7f0000001740)={0x2c, &(0x7f0000001480)={0x40, 0x15, 0xe9, "bd7b6e54f58c0f30b8ca64a8a1d6b77399159a6bed9307c5c35e1b98d2f306777cf1f1ae7d9ed973862ba7bbf72e3a16958839d0c2cc9045657b8e025f197bd5babe72f83cc4bba3763bd362bcdc81c45f1cb26d4c663139771abb26f5bebe01e889dded5c81464dff015c0d43d13f3d727e958bc9edbdbbd80b2674f8142fbad2fd30514bea000a7707f44c628fed932fc9767eddcfd809f235baf8119d7ecff5c17832d1f923917c796b08e898e6d79361e3d0bb444e07131472cd6e81e2def32479b28ccdf9f99948eae731a106e113713252874d284906297b543e491b02c7fa1a648327b43a2a"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000001600)={0x20, 0x1, 0xeb, "26c4fe1aa8dbe261d2d32eb13b02244f18eaecafeb317a04b98d677285bae076244d66ca5a42cfb08c50c7953a31676028973883dcc27926f9684572f16c27f6dc3129dd2025ec8fa9aa15cf4b24623b8f79fbe48a19bff3860d37f67d1dcd31c63dd80a1d2fd651a33fbb026d74711fc4341e991d4c005da36042059410c63a43dbe33ea547800e5fbbfe091640d21aee7df1e99b6b8ecb7b42b5d3b3b1291f184b6e2d357c68ea8bb99a3febffee5788e2e897dbfc6d4d232dceb5e40ccfb07d7f0b17ec6ad0317bda8366faf120a659a4836e6a13f234320b9dde588b03808cb77dc02461ed71223524"}, &(0x7f0000001700)={0x20, 0x3, 0x1, 0x4}}) (async) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x24f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xe2, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x68b8, 0x9b, 0x1, {0x22, 0x521}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x90, 0x40, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x40, 0x3f}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x3f, 0x3, 0x53, 0x8, 0x48}, 0x18d, &(0x7f0000000240)={0x5, 0xf, 0x18d, 0x2, [@generic={0x9f, 0x10, 0x1, "803fc83eaf136152a5f14f77b5bf127b8a83e27e5c3c27098f98c9ff472517240ca8d0a9248b4a0116abd15ac506740b5215f9550ea1112c6814832fc656589cf4d8a6635e423a28328ba4041c16421c9bcaf2d2ca5fb71b008c556195b7e1394ae106ed4be156e3979620313537376174918917102c5491d17710eb1e0d1715c7a87fa5c4e968a74643ba15107cff77604dd6e8bc747394cdae4cde"}, @generic={0xe9, 0x10, 0x3, "2767ac83035d4cfb36ccc3c06c202dfa08d49b3bf4a2bb4511b723e433c4cdef02548f1588903685b1ea1155bbba7a552e7b62e1e79260d579ba87632c9222fca478dca55bc961f3173493591dba02f460a326575888d7d6eda26c15403923669fa1eeedb3c2febe939e2f249bf64a078f624745d33a24957e904b68d47e5d37b4b1e13e274a3f0de042f4450310bdf6ad1b4edfaee2b431323bdc7f9c17907cb9fb4b9afda3fd519fd9727a3741edeccb18bfbf07e0ba03100d123c62f26742932722f5c0aa3a215b7fbd162fd59779d2d034765f141e34b387513a5c502a9fd6e1d6b76f9c"}]}, 0x1, [{0x90, &(0x7f0000000400)=@string={0x90, 0x3, "86b51a380aa04e7543e4f32f6ebb65bf1bc4067c54bfbd3c6614475ab723d09e8561f048156d53434f408e4dbdb443cf80cf9f1523227ebaf7286e9c8c4688a83f93950fe31bec36b617aeea191180b31f9b22de261aefb8402e6bec9cbf54abbc8f282e051942d066a293dfa4d545e7aeb3b36031621862410a5bf94747a0179555a700d11a37b90319ba455d68"}}]}) (async) syz_usb_control_io$hid(r3, &(0x7f0000000580)={0x24, &(0x7f0000000180)={0x40, 0x31, 0x23, {0x23, 0x21, "95d4a01cabee41934a80339eeca2f7d49f173ce9e7fbb45fb535a6db263d9f62e9"}}, &(0x7f00000001c0)={0x0, 0x3, 0x18, @string={0x18, 0x3, "7e06d6da35cf004cc82df3baff7f9d002d6a64b15758"}}, &(0x7f00000004c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x0, 0x0, 0xc}, @global=@item_012={0x1, 0x1, 0x5, "c9"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x33b}}}}, &(0x7f0000000800)={0x2c, &(0x7f00000005c0)={0x0, 0x31, 0xb3, "a8ef6f0509e96767de94f7c336dae561c082f4eba4441258b7264f760f8c6f385aba9a5e9e6fe7123ad4cc83937df9d2c4fb9511f7136d720b9a9b8e8485ee7b49da1e6782bee02699556dc6c5d3c3ee8f1571990553cfe0ad6906fe5356e4c5a10bff6b854b5922960225aa4c4293503ff648795d01acec3ff24a1efae16368c7bd3d57919828f69cc124cae7ef13e127b5203651f15919314a8a220cb73d0d7cc8c8aab5a223a86df41f0e6cb998d9f3639e"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0x20, 0x1, 0x9a, "0f8b5d1b1c7c247560f958fccd9789c33bb8a7da7bf52dd854fd802dd662a12018a62fbbe0d25f348c820be2c9446b12c3ab01514d4849af0b9b7e888a8c0859973ae34d4df96c6fd66c9ae62c8c046f2c1b38bfffe1b1642b3a96ef04957309462501943cf78d07262e7f28e13332e8b5e4538a201dda2241c7787029407f60542cbb1ae9c6ca58d7f599cd49336daabcede3af283b06a9b015"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x8}}) (async) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) (async) syz_usb_connect(0x4, 0x314, &(0x7f0000002700)={{0x12, 0x1, 0x310, 0x16, 0xa1, 0x6f, 0x8, 0xbda, 0x817f, 0xe3ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x302, 0x1, 0xfb, 0x9, 0xa0, 0x9, [{{0x9, 0x4, 0xa2, 0x2, 0x7, 0x1a, 0xf7, 0xc, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x8001}, [@processing_unit={0xb, 0x24, 0x7, 0x2, 0x6, 0x9, '+}rQ'}]}], [{{0x9, 0x5, 0xc, 0x14, 0x200, 0xdd, 0x4d, 0x2, [@generic={0x2e, 0xe, "86ce9d9716f6cdf899995fe9335a75b4dcb9461edb80f13b83abf9515cdbfb552fc0439f16b48993e8dbda69"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x6, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x1000}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0xff, 0x6, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1a}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x3f, 0x20, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9800}, @generic={0x102, 0x21, "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"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x4, 0x7, 0x1, [@generic={0xbc, 0xa, "5395107b48acc23e89619870062f1d6ad8877f3c266bea9a195a113f64f674a58b48af9146f7cc6fa7dd906d156c7472736b9d56805218d7d7828281d48d98fb15a2ea54da0bdca89e0378dea7c8905811fbb19ec644bfec8ea5c4db2029cbefea2a7e7056ef586097c49415b3bb0b3a124bc89d5559470d84586d9b42c0959823802e0a62efe557d494ab844bb25df2b338253d740752ca7a174f064c91e91ef8fee71ee34180eaddf8e6c50c8db5177037a2c13e6ebb404b94"}, @uac_iso={0x7, 0x25, 0x1, 0xb899cb6f77ccd4a, 0x2, 0x401}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x7f, 0x40, 0x81, [@generic={0x80, 0x21, "eb397508253f260c175974d7f5ca8249ebcf6e1c9997711b6638766c86bdaa034cf68de1ee8368a6670d91a21ddac1326d147ca735a3c6cd881435c3f007bac4cb5e2fe338dc1a1f1a19d106585b2ce2605d2c2a297366eadaca2d1ffbd585933e36cec06b92a1fbb6eb5c3c4feab6ad790d25c2faa207080b99a28c49ff"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x438, 0x2, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7a, 0x4}]}}]}}]}}]}}, &(0x7f0000002e00)={0xa, &(0x7f0000002a40)={0xa, 0x6, 0x310, 0x9, 0x7, 0x70, 0x8, 0x20}, 0x20, &(0x7f0000002a80)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "c58c430f017876270cbbd4472588a11c"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x0, 0x199}]}, 0x7, [{0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x41b}}, {0xf7, &(0x7f0000002b00)=@string={0xf7, 0x3, "45b0f5bd836dda45df1b34c2ec04d963c3f78a6393bae5e76425e6d3464a081854e0851784cd427e082185018d61e8658da22166abe1f14073d9b4177042496b133694174055c223c2334fd4ec05b41ccf2101d97f4b7856af947a40ab2479c00c500d7de4893ce11ef7f880cf222718a45756a5ba97f9b86acff08a3f2064a9f42580cf8f5c650b81a6b6f778eb9fb638a5ecd833a63fdd6936963a0f16cf84bb6404ab4df466aa69955f262e215ed30cd9c7bcef30f81380d69f3262029b52ab76194019000e3d20ac3a409cdddc09bb05d7d7d5012fe6de0eecf724e50979cc3d2d355ecb3f00f729fd0f18da65693016f33f62"}}, {0x5e, &(0x7f0000002c00)=@string={0x5e, 0x3, "3bdaa16c91d004c8649c82ad098a293bb08f2aee2cf17d565c0a699578375d8fcbeba3de859c4a7f293001d01a7890eab01b74b534cd71bfbced16b9a1a804b0753501a9c205af3315b656299be8ab043f37e4fba81e638b2d50661e"}}, {0xb, &(0x7f0000002c80)=@string={0xb, 0x3, "23907bff16781a06a9"}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000002d00)=@lang_id={0x4, 0x3, 0x280a}}, {0x9c, &(0x7f0000002d40)=@string={0x9c, 0x3, "bcc23b6aba3374f28e98051e42cac42e20aff1f93103962ce13990a18db3672b962ed5677b46aa26e6e9f5652b41a2e9e08fa2b67cfbbdd74207f766dac44777f336cfae4065820591efb3e2870106c99b0ccf84957eced91adf964f411b9d5f3ab67161f369757ae1cc5c888af9ce74723bcbe3d3f1d6cd5999eff864b8bb15a9e3df9c5055d8e2ace532e2f9e49375b6d4b61ceae41cf29f0e"}}]}) (async) syz_usb_control_io$hid(r4, &(0x7f00000030c0)={0x24, &(0x7f0000002e80)={0x20, 0x31, 0xe1, {0xe1, 0xf, "c88a2cb609996c0be20ca044196312112b80a2870135feeeb87b03d89e8e882f318048fc6c3a588e8649f04c34f46a5915bd660b478bc231705875ae01b9253e9551f3641480ead3d4f9df910a3be57d80d8793b12910d80eade628523d0c1119209300bfb41dac037fcb17c131399927f2b2f51d142169cda23430a06965101e3d71e7a622b4616bd3e6a6d5935bee26adf5d720be1692102f5526c6bbc48a38a538554c701b3b3387c46a0fc8a708304af19ab21f2b1891b8e3639a90b69d570a5c49185ba8500bd5874f62098c4d47329af07195e13fe8a13cf3f03f0d4"}}, &(0x7f0000002f80)={0x0, 0x3, 0x96, @string={0x96, 0x3, "79ad8e2d91b7ff42770b0b610357b8a04f7e90a54ce3f89cc83e4118bff4cf67d25a51b0d7919b95cb2e844789a493e7bce171420d11f27f53055b36f634fa6ec52f6b5dbaf87bfa029c9ea10997e978125f79bb14c241ca870e96d6eae5c12f6fe30d703bfa82b15f91e4136b87ce4ac11fea7f4c0c566e5cf5dec4031c23f9654292dd9a626e4d353f447645607befc8e85793"}}, &(0x7f0000003040)={0x0, 0x22, 0x19, {[@local=@item_4={0x3, 0x2, 0x7, "63678798"}, @main=@item_012={0x1, 0x0, 0xa, "aa"}, @local=@item_4={0x3, 0x2, 0x1, "2c7191ea"}, @main=@item_4={0x3, 0x0, 0xc, "629c23f3"}, @global=@item_4={0x3, 0x1, 0x9, "6de7ac6f"}, @local=@item_012={0x2, 0x2, 0xa, "5b12"}]}}, &(0x7f0000003080)={0x0, 0x21, 0x9, {0x9, 0x21, 0xba00, 0x7f, 0x1, {0x22, 0x366}}}}, &(0x7f0000003380)={0x2c, &(0x7f0000003100)={0x0, 0xa, 0xf1, "47ea1147fb56aec356aa30ae495cce9313bc91312aee93630a2054ac1e0225231bbc137c5f8e82335d54091d44bb44194d0b7d6227b60e405818062287c54533e3de4b1842fdc0efb24aa451a5ccbbb292da27df347e97869d0ca04dc87c64a031b4e1d83ecbf053a642014007bb90ceb01a76f50a3dac9d973dd8e42d2acc8cec5070d26f060945a5a4252e63314a599e3b0ddbbe6e76f68e5ce7292177dedc522c35565ca22affbc9021ee2ab90998ae72d0026f7d109e9d66502a9286655d8e0036ac76673295721f0df52977fa41ffa8170c1a479654eb4d6a83f1c3a36a982983e8d19428de7d1baf7c71afc606d1"}, &(0x7f0000003200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000003240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000003280)={0x20, 0x1, 0x9e, "3fb1d6d9909ef869cf73881e7000dd17844cb456cd909ee10249ab723161fd944ad9b3b91ca1aef3427db642465ea81eb45954651ee635ff28f8efd9c4a344799d8d432c1626fb2a38f060326435854f580222e23bec410df32c2ac451e0d25d73b2d55132eb9682ef3e3d5c1ede6dc94799ce7d1f1a578be4220e145b92b793226a46e5a57951c751317ef9ba556f38de7e6ba3762ea6fd3e3f14695499"}, &(0x7f0000003340)={0x20, 0x3, 0x1, 0x5}}) (async) 06:29:07 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x18, 0x0, 0x2000000000000012) 06:29:07 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x1e, 0x0, 0x2000000000000012) [ 3100.165172][T17901] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 3100.605783][T17901] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3100.661091][T17901] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 06:29:08 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x1e, 0x0, 0x2000000000000012) 06:29:08 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) [ 3100.768129][T17901] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 06:29:08 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x24, 0x0, 0x2000000000000012) 06:29:08 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x24, 0x0, 0x0, 0x2000000000000012) [ 3100.849775][T17901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3101.393621][T17901] wacom 0003:056A:0331.00AD: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3101.586319][T19188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3101.596166][T19188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3101.634172][T19188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3101.685520][T19188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:29:09 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x2a, 0x0, 0x2000000000000012) 06:29:09 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x2a, 0x0, 0x0, 0x2000000000000012) [ 3101.784933][T19188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3101.881221][T19188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3101.905889][ T7542] usb 6-1: USB disconnect, device number 85 [ 3108.485350][T17901] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 3108.895396][T17901] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3108.906442][T17901] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3108.917011][T17901] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3108.926264][T17901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3110.509883][T19232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3110.519352][T19232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3110.541069][T17901] wacom 0003:056A:0331.00AE: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3110.740853][ T7542] usb 4-1: USB disconnect, device number 46 06:29:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448c9, 0x0) 06:29:19 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x24, 0x0, 0x2000000000000012) 06:29:19 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0xc4a, &(0x7f0000001780)={{0x12, 0x1, 0x0, 0xf2, 0x9e, 0xaa, 0x8, 0x46d, 0x900, 0x8a76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc38, 0x3, 0xfb, 0x81, 0x60, 0x7f, [{{0x9, 0x4, 0x65, 0x0, 0x6, 0x76, 0xd1, 0xed, 0x7d, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "a648f509"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x0, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x34e6}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x7, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x8, [0x100, 0x2, 0x3ff, 0x20, 0x6, 0xffc1]}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x6, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x5, 0x9fc}]}], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x3, 0x6, 0x0, [@generic={0x9f, 0x1, "835787de63030a75d91a0caeb791b7e7a012f44f4d8e1d8053fb3bd00248defc2b1995fa5d489404628fbf7d934c09e2e66f1fc4cc2ca77a294e304e316448526ea8b2c53ecfca1aa509a53e5b64bca28381f2f1fb9a618b45684f95358fbd8b20ef23b4ec2a72f657dd4ed92fb62da6e1306def3af17baa4a9424acf8325bb2cce5ef5b87fd6c2605eb168067c090c8c94d887de624f9e4fd3939f291"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0xff, 0x40, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x51b5}]}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x7, 0x2, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x40, 0x6, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0xd3d0cb100c613571, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xa560}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x7, 0x7}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x40, 0x3f, 0x4e, [@generic={0x5e, 0x24, "ddb8bb442a3d6567cbd7f18a6e91ff1cb5f61623ea776b01b502fdc137b356681a163aa95d7c69dc768956c6a7d7b852a2ec49ed9fddf1c2bf44e8bb66b562774238b071f2f2c223fa5fc6865c3870aa6cf31f5d817b47b64371368e"}]}}]}}, {{0x9, 0x4, 0xd7, 0x94, 0xa, 0xc0, 0x81, 0x78, 0x4, [], [{{0x9, 0x5, 0x4, 0xc, 0x400, 0x0, 0x7, 0xfb, [@generic={0x1c, 0x5, "3f16768351226b47b7c6d71042b41d347a7c951bdd31ad9a1b50"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x95}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0xf7, 0x5, 0x9, [@generic={0xba, 0x2, "19386389e6aadd6b2c538a11b24fa11dc0b428bc77aa880418fa19235c1e4a5e67f5a8d3604ed07bc1cb887a740b6082fab717825c8b3a0ca191728d1eb15b6743928c0c9186ac569992a33037f614c6f2441d969482c48aeaf51af7b4a15510e975ae5fb55c087229e48a2890d4e5b657ce66d81d96ba6dd9f799adea315a2978390d1bf2782817044580a41fa0059bfa256ad85a2a7038a6708992de6c527ea8ae8c0c1c7fefed420dd5d3a440af2a41eb4f0f431c85a8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x64f}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x8, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xffff}]}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x6, 0x24, 0x4f, [@generic={0xc3, 0x7, "2a6bc77cd7a78e537a416fd0ee5bbcac64abf427debe5b1978b4156c4b36c816a72a7f1fb3d7c85f83b290ea9c48349279ef4a6a5a5abbe2918f4dca7beea130f289f3c2703e01d6149622d3026c4ee589c39402bc22dbf55be59d88c2438e74b6786fe2048e8d9b464bf658583de76f5878371c33f8eb5944f894cecac0e15efeff0e4113e7a2d35c30dcb05a96350bad90be633cecacca7453411890a6e8e63eca2bf957c1e27981c23586da7355ec4ac40d5c6614885fb12de08d59e0ab663d"}, @uac_iso={0x7, 0x25, 0x1, 0x9e73662a7686e372, 0x6, 0x6}]}}, {{0x9, 0x5, 0xa7fccc9fd90c4fbf, 0x2, 0x8, 0x2, 0x0, 0x13}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x1, 0xea, 0x20}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x4, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x5}, @generic={0x13, 0x5, "70967591415a6f843cc67b4b1ff7a5ceba"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x3, 0x1, 0x7, [@generic={0xc5, 0x0, "0ee54da5b83f6e40145b07816bf872ca643015920829fc0d28434b2b3d34865ab4a6ae6a91cab403d9b7f243fe9d42879821c7d08100de2d4774344603d79e1a3d1d805e36086db782bc33b66cd699afa2a0c7a19a0660afa1110fef2ec87b2761ddb3b48f8cc35456089bc10fc45f675166e61b14ee079a4f699099daab55f9cfce37d7d8c621d0719d7beaa81180db2d20d139066c272573c3b24007ea24dd7a8482af40993c47ac28cdac04b421ec9563b7cfc1ad8210ec5e7811a23d23cf51118c"}, @generic={0x3a, 0x13, "e8d061d259c1c0e058bd3217128f41bcbaf0e5018b66e87b353cdc5fff680e1d29798c3a946b77c6845cd89d45f6b5706327fc067f2fd46c"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7f, 0x81, 0xb3, [@generic={0xd4, 0xa, "2e71ae1f3e6b7c489af7d28c3888d28f7a200e686f36a57e91673eee31e212d1ec4a1e17666bb691fd479e0eaaf6df7f512138cf110d4060754bdcdb92f07ba2f6435b7873021e8201f383f13de12a86ecc18e69da515e5dc5f6ae620a0627b05b91b8832c5e143ac844ad850fe0f3a478eb4aa6ca1cafbab6e7d5ceb2efa735dfa8cc0f073515699da266e01ef41e34d606da16f1d15f73904422f7bc10c49f826394c5511c41fd5eca390b4a94fc7abb542aceb54887f1341fa2a1560bc0bb73d2ef538b5b958b9202a5ae1235a68e30ff"}, @generic={0xb0, 0x45c2a9e6be7ef827, "a8dffe1f0888c411d24d777139f8e49dc7eb91a04a534a07e3392acf00a22477a2b485e71aa6582cd2d282274f9ace5dea56e3813dee8155f9c67eba44a8a00e168f034a0cc5324cc5bd69e67210e140989050d03fc86076a48a8d577bc6be12693f10d90e26f5115a4b34dd3a518c8bb27f62354696290d870e0f7b4cb911c60090c579d603f2576ec16c9622c693a3c8cd4c7c4824a80f9199253baf1a48f1341a4634b281bb4613f1ab556c2d"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x8, 0x1f, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7f}, @generic={0xcd, 0xd, "280c3a323c09c67ed08f436ab36c2c9b3783623797b7c79ba8985d5df1ad92e5d3c741df11e603ce701a14cac2b0d95d1d52812831c9d173913223acda3dfbebb0595f568eb543c7a4d4963d2d5d386aa284d6aabceabef19e67680d908d32f680c80579ab5b85b9ba70ec2e5245ed3e53c055785c599bf4429c79290afff9ee2183e437d1d60e973a952b0d11b059baadf79794d9cba9447598c49bbba74c7bf7955308988dc94d4b657d1265d731a33ca157fae2b6fe2f8f1910f22ea9ff90f240188f8f43c53c1431d3"}]}}]}}, {{0x9, 0x4, 0x1, 0x20, 0xe, 0x40, 0x76, 0xd2, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x7fff, 0x81}, [@mixer_unit={0x9, 0x24, 0x4, 0x2, 0x40, "abfd8202"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x6, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x5, 0x45, 0x8000, 0x1f, 0x3}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x3, 0x64, "2d97671e"}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x20, "37375d1d63ed"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x5, 0x7f, 0x5, 0x68, 0xff}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x20, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x0, 0x4, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x5, 0x4, 0x4, [@generic={0x7b, 0xf, "a242c8b4074a42a2c04ccb265519052ff3eeb71ddbc29e1b966340aaaabff89b638da8d05901cf8480f1de20c527d19f61cbce6c63bf4416bf2b595918b8e09e3553c37679f92ff28f88f8a2151ec4af5d02b9281a258c1a3ec0b138299c1b50add4ca88bfaedcdfcbcafbd5591b20176364af901706a58df6"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x60, 0x9, 0x7}}, {{0x9, 0x5, 0xf, 0x1, 0xb8, 0x6, 0x3e, 0x1, [@generic={0x86, 0x6, "da701a9bb476a922fe3ce82458dd3756698e1854de816d6d35a2b63220332e6c209c367ef2f9d15a899f9d3fcdfdc063df2776b28db9ed2693509d247fb336da5cb3b37b7426e60c4648837efae218d6d0ee73e223ad6255c53e6d1469129b7385471e37c6c857aab2de04796d100a313b5e8709ad294ac87e9e1b0e9170f7126c2c1db7"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x3f, 0x7, 0x3, [@generic={0xfa, 0xd, "ccc03968022665d3c182fc5ac191b315908ebc863152386f0cfc47d0a9cc714ac7ed2a04c1ccfb9bd29706e410278ca29220e26f95b9477ea6c2443dfd7044adffa84505767d699e4718e60323e4c030ef3291d86afa41ac9811c7bf27ce3ee34449c126fa2b430c70577ecd7dcf83713a68f9c3d37c170575e82b8df8e8b62ac2e98924a1ef6c1a62630e5b98b8548af5f32d0935dca4d2d3e1916a46814b5da144743f285706f22ecaed68303675a23dbd99ca521e17b67ce1131b9c95e3eb6d771d93f7fe5f9a730e4993cb8d29bda23f5a1f38eb858bb59588141054971c436ac166d016dbb39ad3b9f8440df0fe59bdb1e97c7208b4"}, @generic={0xc1, 0x1, "32a38bbba036d714fa55d32dd7c6e71a5b2d8c08d465e5aae981ae56b4da4a93b3c5e280fcaa4c67619c843f72beea36fa24efe32ddcf287b61058b71d3ac4a7f240f5adf75568245d728d4012578b65c5620df4958e840f2b3da26f17d42e0894ef61da6dc6742d56f05b0c2f7cf6115cfca9500d308dcf24dc90fd67dbef02c52a048300039b7a0249b81ae911e73058ee0f9b914b9e5769fd688da72ce837e31f057dd052323718d38d95f2038e5cc1aadab2894e7fd0cd9fe4881da7e0"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xe5, 0x4, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x2, 0xb7, 0x1, [@generic={0xe, 0x10, "827011a024b2d14b9a42730b"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x9, 0x5, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x16}, @generic={0x6d, 0x8, "833ccb3d06ac298dff5b125826fecb0f1bfb61459128986401cbe9be975176922ca53680299dc004d8a1c6bdff87006a1d08cc5f662ac1a124f37e8223a7999a3d4881413d4687b68a2ebee6d89ef48618fbe9e5704f008b71685dd86974f76f7812ffcb49e093b56331e7"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7d, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x7f}, @generic={0xbe, 0xd, "e30123d3303eec767b80fdb6b76ae20d31b9de6c924efb1607c098daa7848e3b3aa7a004099e844d445ae3d53e981d5dc0d127596bf1fa7026ac6d5c180c9afa687dd3b7b107ed203d328d86fe49066a4170aa1500fa32f760893d86aa81ac9f04a931c1af075b51c692dad90054e6766e85b2069f7500a54bc63f7e4c3e4b5e9d847ad2723d780c971daddc32c2c2d8c0e1ef6a2d470f8f8270bfe2dfdbe99b70c2185491efa56cdfb3ca869a0d16938448e5938a149d0b152312bf"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x4, 0xb8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0xc5}]}}, {{0x9, 0x5, 0x2, 0x0, 0x248, 0x7f, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x25, 0x2, 0x2, [@generic={0x23, 0xe, "3c03afe2b1daf95f85117c1f942c32fb4edb2175bad1e662d9a6eb0806e6cda072"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x2, 0x0, 0x5b}}]}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002400)={0xa, 0x6, 0x100, 0x0, 0x8, 0x4, 0x40, 0x5}, 0x32, &(0x7f0000002440)={0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6a, 0x1, 0x7f, 0x101, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x7f, 0xf00f, 0x8, [0xc0, 0xff0000, 0x0]}]}, 0x3, [{0xd1, &(0x7f0000002480)=@string={0xd1, 0x3, "d64c0b64ec0a3359cdcfb5f889abd0242e41702bd6766dbc8d4f4329f4758cd214f93bb1c1368883c179c46f6baf1d00cfde457eebfe32496a0123a976f50cc4f9f0e6041c25ccdb44a61773d1001c096dabd532f909ece67b026570c668388bfd0723586060b197723881f1331f81754d65ddab6c6c8ef46b89b36aaf2bc0a8dcbd08b50c41e7e38315b09af416038a16cfae6c873cb9f83235fc010177533bc28b6e3557622c8cded96f8f00f2decabc0437d2074247659fd333e3fbcd1be8fabda58367ec5a0845f6cf22576db9"}}, {0xe6, &(0x7f0000002580)=@string={0xe6, 0x3, "4eaf81ea3f403fb620c5597b9cd85b06261854ab7f672656aa7f2d87cfe82bb18665af04634c45c2104e29e51727d288944783bf960b6b23e0a0ca7104678761ae37f3c235a42c34b646eeeb89b416cf775024181c29df05cf5eac9f8d14ce0039a092d259b130f83abbb772a07a3a48768da235f72b47c4465ad1107ca1efc95374cfc861fe434cc87530a7c32e9f3e6ffcb8ce9856fcc5f6d8e45720293a1ea63c812652441ee4cada0b8a7b33337e1ee5af36ac23053850c7b65477d33f33196bb2d648effa907acbf72962ffc24d17fe0ea65ea9ca6dd90337d4b499402fe245a3a3"}}, {0x4, &(0x7f0000002680)=@lang_id={0x4, 0x3, 0x3c1a}}]}) (async) syz_usb_connect(0x0, 0xc4a, &(0x7f0000001780)={{0x12, 0x1, 0x0, 0xf2, 0x9e, 0xaa, 0x8, 0x46d, 0x900, 0x8a76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc38, 0x3, 0xfb, 0x81, 0x60, 0x7f, [{{0x9, 0x4, 0x65, 0x0, 0x6, 0x76, 0xd1, 0xed, 0x7d, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "a648f509"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x0, 0x2}, [@dmm={0x7, 0x24, 0x14, 0x7, 0x34e6}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x1, 0x7, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x8, [0x100, 0x2, 0x3ff, 0x20, 0x6, 0xffc1]}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x3, 0x6, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x5, 0x9fc}]}], [{{0x9, 0x5, 0xe, 0x0, 0x40, 0x3, 0x6, 0x0, [@generic={0x9f, 0x1, "835787de63030a75d91a0caeb791b7e7a012f44f4d8e1d8053fb3bd00248defc2b1995fa5d489404628fbf7d934c09e2e66f1fc4cc2ca77a294e304e316448526ea8b2c53ecfca1aa509a53e5b64bca28381f2f1fb9a618b45684f95358fbd8b20ef23b4ec2a72f657dd4ed92fb62da6e1306def3af17baa4a9424acf8325bb2cce5ef5b87fd6c2605eb168067c090c8c94d887de624f9e4fd3939f291"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0xff, 0x40, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x51b5}]}}, {{0x9, 0x5, 0x80, 0xc, 0x8, 0x7, 0x2, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x200, 0x40, 0x6, 0xbc, [@uac_iso={0x7, 0x25, 0x1, 0xd3d0cb100c613571, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0xa560}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x7, 0x7}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x40, 0x3f, 0x4e, [@generic={0x5e, 0x24, "ddb8bb442a3d6567cbd7f18a6e91ff1cb5f61623ea776b01b502fdc137b356681a163aa95d7c69dc768956c6a7d7b852a2ec49ed9fddf1c2bf44e8bb66b562774238b071f2f2c223fa5fc6865c3870aa6cf31f5d817b47b64371368e"}]}}]}}, {{0x9, 0x4, 0xd7, 0x94, 0xa, 0xc0, 0x81, 0x78, 0x4, [], [{{0x9, 0x5, 0x4, 0xc, 0x400, 0x0, 0x7, 0xfb, [@generic={0x1c, 0x5, "3f16768351226b47b7c6d71042b41d347a7c951bdd31ad9a1b50"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x95}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0xf7, 0x5, 0x9, [@generic={0xba, 0x2, "19386389e6aadd6b2c538a11b24fa11dc0b428bc77aa880418fa19235c1e4a5e67f5a8d3604ed07bc1cb887a740b6082fab717825c8b3a0ca191728d1eb15b6743928c0c9186ac569992a33037f614c6f2441d969482c48aeaf51af7b4a15510e975ae5fb55c087229e48a2890d4e5b657ce66d81d96ba6dd9f799adea315a2978390d1bf2782817044580a41fa0059bfa256ad85a2a7038a6708992de6c527ea8ae8c0c1c7fefed420dd5d3a440af2a41eb4f0f431c85a8"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x64f}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x8, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xffff}]}}, {{0x9, 0x5, 0x1, 0x8, 0x200, 0x6, 0x24, 0x4f, [@generic={0xc3, 0x7, "2a6bc77cd7a78e537a416fd0ee5bbcac64abf427debe5b1978b4156c4b36c816a72a7f1fb3d7c85f83b290ea9c48349279ef4a6a5a5abbe2918f4dca7beea130f289f3c2703e01d6149622d3026c4ee589c39402bc22dbf55be59d88c2438e74b6786fe2048e8d9b464bf658583de76f5878371c33f8eb5944f894cecac0e15efeff0e4113e7a2d35c30dcb05a96350bad90be633cecacca7453411890a6e8e63eca2bf957c1e27981c23586da7355ec4ac40d5c6614885fb12de08d59e0ab663d"}, @uac_iso={0x7, 0x25, 0x1, 0x9e73662a7686e372, 0x6, 0x6}]}}, {{0x9, 0x5, 0xa7fccc9fd90c4fbf, 0x2, 0x8, 0x2, 0x0, 0x13}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x1, 0xea, 0x20}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x4, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x5}, @generic={0x13, 0x5, "70967591415a6f843cc67b4b1ff7a5ceba"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x3, 0x1, 0x7, [@generic={0xc5, 0x0, "0ee54da5b83f6e40145b07816bf872ca643015920829fc0d28434b2b3d34865ab4a6ae6a91cab403d9b7f243fe9d42879821c7d08100de2d4774344603d79e1a3d1d805e36086db782bc33b66cd699afa2a0c7a19a0660afa1110fef2ec87b2761ddb3b48f8cc35456089bc10fc45f675166e61b14ee079a4f699099daab55f9cfce37d7d8c621d0719d7beaa81180db2d20d139066c272573c3b24007ea24dd7a8482af40993c47ac28cdac04b421ec9563b7cfc1ad8210ec5e7811a23d23cf51118c"}, @generic={0x3a, 0x13, "e8d061d259c1c0e058bd3217128f41bcbaf0e5018b66e87b353cdc5fff680e1d29798c3a946b77c6845cd89d45f6b5706327fc067f2fd46c"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7f, 0x81, 0xb3, [@generic={0xd4, 0xa, "2e71ae1f3e6b7c489af7d28c3888d28f7a200e686f36a57e91673eee31e212d1ec4a1e17666bb691fd479e0eaaf6df7f512138cf110d4060754bdcdb92f07ba2f6435b7873021e8201f383f13de12a86ecc18e69da515e5dc5f6ae620a0627b05b91b8832c5e143ac844ad850fe0f3a478eb4aa6ca1cafbab6e7d5ceb2efa735dfa8cc0f073515699da266e01ef41e34d606da16f1d15f73904422f7bc10c49f826394c5511c41fd5eca390b4a94fc7abb542aceb54887f1341fa2a1560bc0bb73d2ef538b5b958b9202a5ae1235a68e30ff"}, @generic={0xb0, 0x45c2a9e6be7ef827, "a8dffe1f0888c411d24d777139f8e49dc7eb91a04a534a07e3392acf00a22477a2b485e71aa6582cd2d282274f9ace5dea56e3813dee8155f9c67eba44a8a00e168f034a0cc5324cc5bd69e67210e140989050d03fc86076a48a8d577bc6be12693f10d90e26f5115a4b34dd3a518c8bb27f62354696290d870e0f7b4cb911c60090c579d603f2576ec16c9622c693a3c8cd4c7c4824a80f9199253baf1a48f1341a4634b281bb4613f1ab556c2d"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x8, 0x1f, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7f}, @generic={0xcd, 0xd, "280c3a323c09c67ed08f436ab36c2c9b3783623797b7c79ba8985d5df1ad92e5d3c741df11e603ce701a14cac2b0d95d1d52812831c9d173913223acda3dfbebb0595f568eb543c7a4d4963d2d5d386aa284d6aabceabef19e67680d908d32f680c80579ab5b85b9ba70ec2e5245ed3e53c055785c599bf4429c79290afff9ee2183e437d1d60e973a952b0d11b059baadf79794d9cba9447598c49bbba74c7bf7955308988dc94d4b657d1265d731a33ca157fae2b6fe2f8f1910f22ea9ff90f240188f8f43c53c1431d3"}]}}]}}, {{0x9, 0x4, 0x1, 0x20, 0xe, 0x40, 0x76, 0xd2, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x7fff, 0x81}, [@mixer_unit={0x9, 0x24, 0x4, 0x2, 0x40, "abfd8202"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x6, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x5, 0x45, 0x8000, 0x1f, 0x3}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x3, 0x64, "2d97671e"}, @mixer_unit={0xb, 0x24, 0x4, 0x5, 0x20, "37375d1d63ed"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x5, 0x7f, 0x5, 0x68, 0xff}]}], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x20, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x0, 0x4, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x5, 0x4, 0x4, [@generic={0x7b, 0xf, "a242c8b4074a42a2c04ccb265519052ff3eeb71ddbc29e1b966340aaaabff89b638da8d05901cf8480f1de20c527d19f61cbce6c63bf4416bf2b595918b8e09e3553c37679f92ff28f88f8a2151ec4af5d02b9281a258c1a3ec0b138299c1b50add4ca88bfaedcdfcbcafbd5591b20176364af901706a58df6"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0x60, 0x9, 0x7}}, {{0x9, 0x5, 0xf, 0x1, 0xb8, 0x6, 0x3e, 0x1, [@generic={0x86, 0x6, "da701a9bb476a922fe3ce82458dd3756698e1854de816d6d35a2b63220332e6c209c367ef2f9d15a899f9d3fcdfdc063df2776b28db9ed2693509d247fb336da5cb3b37b7426e60c4648837efae218d6d0ee73e223ad6255c53e6d1469129b7385471e37c6c857aab2de04796d100a313b5e8709ad294ac87e9e1b0e9170f7126c2c1db7"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x3f, 0x7, 0x3, [@generic={0xfa, 0xd, "ccc03968022665d3c182fc5ac191b315908ebc863152386f0cfc47d0a9cc714ac7ed2a04c1ccfb9bd29706e410278ca29220e26f95b9477ea6c2443dfd7044adffa84505767d699e4718e60323e4c030ef3291d86afa41ac9811c7bf27ce3ee34449c126fa2b430c70577ecd7dcf83713a68f9c3d37c170575e82b8df8e8b62ac2e98924a1ef6c1a62630e5b98b8548af5f32d0935dca4d2d3e1916a46814b5da144743f285706f22ecaed68303675a23dbd99ca521e17b67ce1131b9c95e3eb6d771d93f7fe5f9a730e4993cb8d29bda23f5a1f38eb858bb59588141054971c436ac166d016dbb39ad3b9f8440df0fe59bdb1e97c7208b4"}, @generic={0xc1, 0x1, "32a38bbba036d714fa55d32dd7c6e71a5b2d8c08d465e5aae981ae56b4da4a93b3c5e280fcaa4c67619c843f72beea36fa24efe32ddcf287b61058b71d3ac4a7f240f5adf75568245d728d4012578b65c5620df4958e840f2b3da26f17d42e0894ef61da6dc6742d56f05b0c2f7cf6115cfca9500d308dcf24dc90fd67dbef02c52a048300039b7a0249b81ae911e73058ee0f9b914b9e5769fd688da72ce837e31f057dd052323718d38d95f2038e5cc1aadab2894e7fd0cd9fe4881da7e0"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0xe5, 0x4, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x2, 0xb7, 0x1, [@generic={0xe, 0x10, "827011a024b2d14b9a42730b"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x9, 0x5, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x16}, @generic={0x6d, 0x8, "833ccb3d06ac298dff5b125826fecb0f1bfb61459128986401cbe9be975176922ca53680299dc004d8a1c6bdff87006a1d08cc5f662ac1a124f37e8223a7999a3d4881413d4687b68a2ebee6d89ef48618fbe9e5704f008b71685dd86974f76f7812ffcb49e093b56331e7"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x7d, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x7f}, @generic={0xbe, 0xd, "e30123d3303eec767b80fdb6b76ae20d31b9de6c924efb1607c098daa7848e3b3aa7a004099e844d445ae3d53e981d5dc0d127596bf1fa7026ac6d5c180c9afa687dd3b7b107ed203d328d86fe49066a4170aa1500fa32f760893d86aa81ac9f04a931c1af075b51c692dad90054e6766e85b2069f7500a54bc63f7e4c3e4b5e9d847ad2723d780c971daddc32c2c2d8c0e1ef6a2d470f8f8270bfe2dfdbe99b70c2185491efa56cdfb3ca869a0d16938448e5938a149d0b152312bf"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x4, 0xb8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0xc5}]}}, {{0x9, 0x5, 0x2, 0x0, 0x248, 0x7f, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x4}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x25, 0x2, 0x2, [@generic={0x23, 0xe, "3c03afe2b1daf95f85117c1f942c32fb4edb2175bad1e662d9a6eb0806e6cda072"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x8, 0x2, 0x0, 0x5b}}]}}]}}]}}, &(0x7f00000026c0)={0xa, &(0x7f0000002400)={0xa, 0x6, 0x100, 0x0, 0x8, 0x4, 0x40, 0x5}, 0x32, &(0x7f0000002440)={0x5, 0xf, 0x32, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x9, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6a, 0x1, 0x7f, 0x101, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x7f, 0xf00f, 0x8, [0xc0, 0xff0000, 0x0]}]}, 0x3, [{0xd1, &(0x7f0000002480)=@string={0xd1, 0x3, "d64c0b64ec0a3359cdcfb5f889abd0242e41702bd6766dbc8d4f4329f4758cd214f93bb1c1368883c179c46f6baf1d00cfde457eebfe32496a0123a976f50cc4f9f0e6041c25ccdb44a61773d1001c096dabd532f909ece67b026570c668388bfd0723586060b197723881f1331f81754d65ddab6c6c8ef46b89b36aaf2bc0a8dcbd08b50c41e7e38315b09af416038a16cfae6c873cb9f83235fc010177533bc28b6e3557622c8cded96f8f00f2decabc0437d2074247659fd333e3fbcd1be8fabda58367ec5a0845f6cf22576db9"}}, {0xe6, &(0x7f0000002580)=@string={0xe6, 0x3, "4eaf81ea3f403fb620c5597b9cd85b06261854ab7f672656aa7f2d87cfe82bb18665af04634c45c2104e29e51727d288944783bf960b6b23e0a0ca7104678761ae37f3c235a42c34b646eeeb89b416cf775024181c29df05cf5eac9f8d14ce0039a092d259b130f83abbb772a07a3a48768da235f72b47c4465ad1107ca1efc95374cfc861fe434cc87530a7c32e9f3e6ffcb8ce9856fcc5f6d8e45720293a1ea63c812652441ee4cada0b8a7b33337e1ee5af36ac23053850c7b65477d33f33196bb2d648effa907acbf72962ffc24d17fe0ea65ea9ca6dd90337d4b499402fe245a3a3"}}, {0x4, &(0x7f0000002680)=@lang_id={0x4, 0x3, 0x3c1a}}]}) r1 = syz_usb_connect(0x7, 0x6e2, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x99, 0x36, 0x11, 0xff, 0x93a, 0x2620, 0x78ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d0, 0x2, 0x1, 0x57, 0x0, 0x1, [{{0x9, 0x4, 0x89, 0x2, 0x3, 0x47, 0xb5, 0x14, 0x4, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e404a5ba4b"}, {0x5, 0x24, 0x0, 0x7d4c}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xfffb, 0x80, 0x6}, [@acm={0x4, 0x24, 0x2, 0xf}]}], [{{0x9, 0x5, 0x6, 0x10, 0x40, 0x9, 0x2, 0x4, [@generic={0x3b, 0x8, "01d1ea49761a6f4cd6e0fb4f2be234f928bd117827a088f92490add47713f6d9383ebbe7cf36765bc85de9d19b9cea75563a7438741565fb72"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x7, 0xe, 0x7f, [@generic={0xd4, 0x10, "a6544b8ebd33cae08bfb672293a02efd852b2daa0a5446f74d65b41f3bec453217932b1a3dd23582d95a36b47aff626e10066b3025afe967884ea4962a23ed93a8f4465aac697cc9c8f4781209f896ff5bb4e552235191b64448dbb442542fee2b992ce0259e32781ba6d7b4d47fd6c8e71b4cf2a01ee321da7ce3f79f97149504cc569af9ec354df9be5cb351da6fd38934ea150dee13eeef4740a2d0c44af62424d4a3057d024af3fa363415680e2009a06b09e0e990e9580e23c3b6fc5eb63f5015a4e287d921f885c6bb1a711030bbd0"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x20, 0x81, 0x20, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3ff}]}}]}}, {{0x9, 0x4, 0xdc, 0x1, 0xd, 0xff, 0x78, 0xc8, 0x55, [@hid_hid={0x9, 0x21, 0x800, 0x4, 0x1, {0x22, 0x61d}}, @generic={0xb5, 0x9, "f55f13fcfb49837634da548f2a2aef32fa7e86de005597d704d5e0db76571d8260551991d02b0424556239b0d44f99e9220b12873209c82e9cd7fcdb070c02329314fb93dc0b2540054a7b6fc20ba6604c8321424a27cce87db08028b6c5235251fde166d67bb1e2b04ce254d82eef35a870db7804037f96663aa48a006e474e2b315614d067d86e91804d7d80bc4e3fcd08e2a96388f17c7fba6803163e88dd0f4891849b842180f59b08eb009f94b81f4ecb"}], [{{0x9, 0x5, 0x3, 0x3, 0x40, 0x6, 0x7f, 0x1, [@generic={0x6e, 0x6, "9cb192b0edba71e48640d9a7ef8bc164f1bbc56825a30f140e58d4603ed8e9ce3239d0c95554dc5dac28df70e86a606db5d6676f35a96bb2acf8fc93fdb2f93cb1bc04a19c1d20ac3caf9bc504cbd07a788a8630c1e5dab62b35a58d384d97c4845fbedb01faa43d68025fed"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xc7, 0x401}]}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x3, 0x5, 0x2, [@generic={0x91, 0x30, "09bd8012863a261fc0e0b8c1eb9629d0232d4f6ced5ea971bba81caced67493498ccafef5eb02abd26477f901394506ccf6cd981c944968a42f738725b656f921feab4a2a6333cbb8c407f7cf31636b10e43a5bb321fc3d6218b960ff757b5769fe0bfca65d2b1dbf4c1b008183c53f1e2c5929cf9bda7385f6eaba53274217796bd530fa34fdb0f77926ad7f3b774"}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x8, 0x6437}]}}, {{0x9, 0x5, 0xe, 0x10, 0x7f7, 0xb7, 0x80, 0x0, [@generic={0x95, 0x11, "7a94f7e3b6665f364a9613eaff27c6c2cded46ba803b808025d55e97d55e73e41c13f7208da2a7a21e98c25929890e5498e77130dc2660e380e8f2867de0e821f669d70b403f2cfb727ff375e4f22ffd4094bc0632f3be2a7fabab6d06f4dae8bf3dba47c00e205d1282ab41be0bd7e6b798a037205592d1ed8834943ef9f9279045d43532ed1f8dd2487b1564e53e30c38140"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x9, 0x81, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x8000}, @generic={0x66, 0x1, "69c07a2c196fbb73ec0400d5916a219bf836340f6f9e8f93023455e98febf77604166d7ba2b42d1f84dede984f613f943c31fe257cc55e8d2dc89916598ed16bc5a63698987fd4860b72f931d9eecbf7403b5874767c661536ab5a7aeccf23f637697cd2"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x5a, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x20, 0xbf}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x6}]}}, {{0x9, 0x5, 0x0, 0x5ece36e416787ee3, 0x10, 0xe0, 0x14, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xc3, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x3}, @generic={0xcf, 0xf, "c6a9840e1af5335f0eb9999a875147085d75c7b28210708a42d060fb6a8c124ada06997905082ae242dbaa1649b9fd9dea9acde30fceb5e74431af01df1f067f70a9db512132f9bd8093abb398b355d244482aab2a65b729af3f3e1484d1e75056dc2c642f79ccc9272c0a65ace440405a92cbf630cb66a9ef1144eac5534268221d77cf247c9c5166e5bbab2edd4ffd3172e9958ce1b6e7811a200394336b1891e91b7915deb287c0f88e8e2d29df9f52dbe92cf352574cec855005b87fd490f0be7c647c69c202134aa14039"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x6, 0x61, 0x68, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xffff}, @generic={0x30, 0x30, "4ae96a19a630ca0cf9651fb76462a744e084b5ae8b2829550d745648deeedfe94d7b46a499b16eef8e6dc068336a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x9, 0x80, 0xe0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xcfcd}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x6, 0x81, 0x1, [@generic={0xdd, 0xe, "b31e38b76b0eac27b5d68b7fc84a3ba55a1f71c50f2ab16f96a6b028cb0ebe0383fdcfafd5c11841befd60f9b5d037b4b1eac0c737af6b8bdffad70964f99c7d7f4c831db7cc022f61e8795defa4a059f653a466ef89b90c712beca938bcbad64b888d9cc00c97d10808bd2497d7351a0e932904a08cae4a5afd161307287f88f94acb3edba895e866c0550dca2ac9199a072bad791e028213eef5b01be79e503fde608fc6c0d1cd948c47605ac6a90b4fa8c4f4da751a04f4befd17983ef63db03deb69ef63ae4819d852a2f046e7e9f0b39ad181ac83c4cbd0ba"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x1, 0x1f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x75, 0x61}]}}, {{0x9, 0x5, 0x5, 0x2, 0x48, 0x34, 0x0, 0x15, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x84, 0x1, 0x51}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0xea, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x29, 0x400}]}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x310, 0xa8, 0x3, 0x5, 0x10, 0x40}, 0x2f, &(0x7f0000000f80)={0x5, 0xf, 0x2f, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0xfe, 0x3, 0x1, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x0, 0x8, 0x40}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x0, 0xf00f, 0x4, [0x7f80f0, 0xff0000]}, @generic={0x4, 0x10, 0x1, '*'}]}, 0x8, [{0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x443}}, {0x7, &(0x7f0000001000)=@string={0x7, 0x3, "a0943aa351"}}, {0x68, &(0x7f0000001040)=@string={0x68, 0x3, "38882e68038ebd41edda1264c6d43eb8fc6d59f3fb13a070e2e66f19ddb44ca4763ca54f7b7fdaebbff6018477b149d7120cd91ac300b034898b7893a11d701a2fb1e1b39874a62bdc835843bb5b679fc8de797187bb15ae573c264635c809f8ac4cd9399008"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x459}}, {0x51, &(0x7f0000001100)=@string={0x51, 0x3, "6472156974fbfea2a0ac43d1233db0c5dc3e06a97c5d34aab170e0212632c091eeea100f023adf71d2fc12f91e8f2ed1456b820121b86c173df33a2c2a4c9e609a65391deb09cf72af7d7654c473ce"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x4001}}, {0x19, &(0x7f00000011c0)=@string={0x19, 0x3, "791321dcfe8958d1f62afe6de22aff441dcb4ec4fe4059"}}, {0x23, &(0x7f0000001200)=@string={0x23, 0x3, "04a86053548c43230895210e40e54c196373288e415cbbd76417388f7fec44da86"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, &(0x7f00000012c0)={0x20, 0x30, 0xa8, {0xa8, 0x23, "575f11a845848168c72915a14479e0d2ed7b575bef24c10d2f154e95ad2e9fca5eef7e2e6c56831313ab1f0106a00e04d2e95ae878a0953eadd29e468f10a0fc9110553ee6232bccbe0a86f36f93d9f3bfe6900fc4f224bc4ebf7d53c122fef4090181304d817248a4665e2fced5e6275fd8585827a23097f8e5c1ecbae96d38c848f65a48119d92fa7f0b6ebf1a4bcb6519f62c4017603f0e7d2e7b05b913686e80a10cdeab"}}, &(0x7f0000001380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}, &(0x7f00000013c0), &(0x7f0000001400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x5, 0x1, {0x22, 0xc03}}}}, &(0x7f0000001740)={0x2c, &(0x7f0000001480)={0x40, 0x15, 0xe9, "bd7b6e54f58c0f30b8ca64a8a1d6b77399159a6bed9307c5c35e1b98d2f306777cf1f1ae7d9ed973862ba7bbf72e3a16958839d0c2cc9045657b8e025f197bd5babe72f83cc4bba3763bd362bcdc81c45f1cb26d4c663139771abb26f5bebe01e889dded5c81464dff015c0d43d13f3d727e958bc9edbdbbd80b2674f8142fbad2fd30514bea000a7707f44c628fed932fc9767eddcfd809f235baf8119d7ecff5c17832d1f923917c796b08e898e6d79361e3d0bb444e07131472cd6e81e2def32479b28ccdf9f99948eae731a106e113713252874d284906297b543e491b02c7fa1a648327b43a2a"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000001600)={0x20, 0x1, 0xeb, "26c4fe1aa8dbe261d2d32eb13b02244f18eaecafeb317a04b98d677285bae076244d66ca5a42cfb08c50c7953a31676028973883dcc27926f9684572f16c27f6dc3129dd2025ec8fa9aa15cf4b24623b8f79fbe48a19bff3860d37f67d1dcd31c63dd80a1d2fd651a33fbb026d74711fc4341e991d4c005da36042059410c63a43dbe33ea547800e5fbbfe091640d21aee7df1e99b6b8ecb7b42b5d3b3b1291f184b6e2d357c68ea8bb99a3febffee5788e2e897dbfc6d4d232dceb5e40ccfb07d7f0b17ec6ad0317bda8366faf120a659a4836e6a13f234320b9dde588b03808cb77dc02461ed71223524"}, &(0x7f0000001700)={0x20, 0x3, 0x1, 0x4}}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x24f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0xe2, 0x2, 0x3, 0x1, 0x1, 0x8, {0x9, 0x21, 0x68b8, 0x9b, 0x1, {0x22, 0x521}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x90, 0x40, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x40, 0x3f}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x3f, 0x3, 0x53, 0x8, 0x48}, 0x18d, &(0x7f0000000240)={0x5, 0xf, 0x18d, 0x2, [@generic={0x9f, 0x10, 0x1, "803fc83eaf136152a5f14f77b5bf127b8a83e27e5c3c27098f98c9ff472517240ca8d0a9248b4a0116abd15ac506740b5215f9550ea1112c6814832fc656589cf4d8a6635e423a28328ba4041c16421c9bcaf2d2ca5fb71b008c556195b7e1394ae106ed4be156e3979620313537376174918917102c5491d17710eb1e0d1715c7a87fa5c4e968a74643ba15107cff77604dd6e8bc747394cdae4cde"}, @generic={0xe9, 0x10, 0x3, "2767ac83035d4cfb36ccc3c06c202dfa08d49b3bf4a2bb4511b723e433c4cdef02548f1588903685b1ea1155bbba7a552e7b62e1e79260d579ba87632c9222fca478dca55bc961f3173493591dba02f460a326575888d7d6eda26c15403923669fa1eeedb3c2febe939e2f249bf64a078f624745d33a24957e904b68d47e5d37b4b1e13e274a3f0de042f4450310bdf6ad1b4edfaee2b431323bdc7f9c17907cb9fb4b9afda3fd519fd9727a3741edeccb18bfbf07e0ba03100d123c62f26742932722f5c0aa3a215b7fbd162fd59779d2d034765f141e34b387513a5c502a9fd6e1d6b76f9c"}]}, 0x1, [{0x90, &(0x7f0000000400)=@string={0x90, 0x3, "86b51a380aa04e7543e4f32f6ebb65bf1bc4067c54bfbd3c6614475ab723d09e8561f048156d53434f408e4dbdb443cf80cf9f1523227ebaf7286e9c8c4688a83f93950fe31bec36b617aeea191180b31f9b22de261aefb8402e6bec9cbf54abbc8f282e051942d066a293dfa4d545e7aeb3b36031621862410a5bf94747a0179555a700d11a37b90319ba455d68"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000580)={0x24, &(0x7f0000000180)={0x40, 0x31, 0x23, {0x23, 0x21, "95d4a01cabee41934a80339eeca2f7d49f173ce9e7fbb45fb535a6db263d9f62e9"}}, &(0x7f00000001c0)={0x0, 0x3, 0x18, @string={0x18, 0x3, "7e06d6da35cf004cc82df3baff7f9d002d6a64b15758"}}, &(0x7f00000004c0)={0x0, 0x22, 0x3, {[@main=@item_012={0x0, 0x0, 0xc}, @global=@item_012={0x1, 0x1, 0x5, "c9"}]}}, &(0x7f0000000500)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0x33b}}}}, &(0x7f0000000800)={0x2c, &(0x7f00000005c0)={0x0, 0x31, 0xb3, "a8ef6f0509e96767de94f7c336dae561c082f4eba4441258b7264f760f8c6f385aba9a5e9e6fe7123ad4cc83937df9d2c4fb9511f7136d720b9a9b8e8485ee7b49da1e6782bee02699556dc6c5d3c3ee8f1571990553cfe0ad6906fe5356e4c5a10bff6b854b5922960225aa4c4293503ff648795d01acec3ff24a1efae16368c7bd3d57919828f69cc124cae7ef13e127b5203651f15919314a8a220cb73d0d7cc8c8aab5a223a86df41f0e6cb998d9f3639e"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0x20, 0x1, 0x9a, "0f8b5d1b1c7c247560f958fccd9789c33bb8a7da7bf52dd854fd802dd662a12018a62fbbe0d25f348c820be2c9446b12c3ab01514d4849af0b9b7e888a8c0859973ae34d4df96c6fd66c9ae62c8c046f2c1b38bfffe1b1642b3a96ef04957309462501943cf78d07262e7f28e13332e8b5e4538a201dda2241c7787029407f60542cbb1ae9c6ca58d7f599cd49336daabcede3af283b06a9b015"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x8}}) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) syz_usb_connect(0x4, 0x314, &(0x7f0000002700)={{0x12, 0x1, 0x310, 0x16, 0xa1, 0x6f, 0x8, 0xbda, 0x817f, 0xe3ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x302, 0x1, 0xfb, 0x9, 0xa0, 0x9, [{{0x9, 0x4, 0xa2, 0x2, 0x7, 0x1a, 0xf7, 0xc, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x8001}, [@processing_unit={0xb, 0x24, 0x7, 0x2, 0x6, 0x9, '+}rQ'}]}], [{{0x9, 0x5, 0xc, 0x14, 0x200, 0xdd, 0x4d, 0x2, [@generic={0x2e, 0xe, "86ce9d9716f6cdf899995fe9335a75b4dcb9461edb80f13b83abf9515cdbfb552fc0439f16b48993e8dbda69"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x6, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x1000}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0xff, 0x6, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1a}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x3f, 0x20, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9800}, @generic={0x102, 0x21, "76ecebb8be8c1de597c1f3569d7953b005a53ab91d813ec7efd943be39d60c0ee4e9b414c6480341c34bad14e78423130003d2c6d9f5d670fde14f4fe722390d205c149ce70119f4cf0fee454b5b7b55a40828ac1f8625457f9413d6ff6c085234272bd028ada8f5c0ad2b41c13f98947475a1b70fd17de0a6891169b969af5f17f698dd12ba3059fac485c06857d4e60403dddc48b7168b58664ff99b6efe1a56df40f57d8bf267ae87b731e7bbb2ec3da8e4395998bccf4c23d436d7b0dc24cfa70ee32892da856537f8a7049f3242398a5b5519858353459a6f85413d62a263a08b1d2fe925aa92d43494deed31ca6e11870f976c6e62d18a2566e46be9be"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x4, 0x7, 0x1, [@generic={0xbc, 0xa, "5395107b48acc23e89619870062f1d6ad8877f3c266bea9a195a113f64f674a58b48af9146f7cc6fa7dd906d156c7472736b9d56805218d7d7828281d48d98fb15a2ea54da0bdca89e0378dea7c8905811fbb19ec644bfec8ea5c4db2029cbefea2a7e7056ef586097c49415b3bb0b3a124bc89d5559470d84586d9b42c0959823802e0a62efe557d494ab844bb25df2b338253d740752ca7a174f064c91e91ef8fee71ee34180eaddf8e6c50c8db5177037a2c13e6ebb404b94"}, @uac_iso={0x7, 0x25, 0x1, 0xb899cb6f77ccd4a, 0x2, 0x401}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x7f, 0x40, 0x81, [@generic={0x80, 0x21, "eb397508253f260c175974d7f5ca8249ebcf6e1c9997711b6638766c86bdaa034cf68de1ee8368a6670d91a21ddac1326d147ca735a3c6cd881435c3f007bac4cb5e2fe338dc1a1f1a19d106585b2ce2605d2c2a297366eadaca2d1ffbd585933e36cec06b92a1fbb6eb5c3c4feab6ad790d25c2faa207080b99a28c49ff"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x438, 0x2, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7a, 0x4}]}}]}}]}}]}}, &(0x7f0000002e00)={0xa, &(0x7f0000002a40)={0xa, 0x6, 0x310, 0x9, 0x7, 0x70, 0x8, 0x20}, 0x20, &(0x7f0000002a80)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "c58c430f017876270cbbd4472588a11c"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x0, 0x199}]}, 0x7, [{0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x41b}}, {0xf7, &(0x7f0000002b00)=@string={0xf7, 0x3, "45b0f5bd836dda45df1b34c2ec04d963c3f78a6393bae5e76425e6d3464a081854e0851784cd427e082185018d61e8658da22166abe1f14073d9b4177042496b133694174055c223c2334fd4ec05b41ccf2101d97f4b7856af947a40ab2479c00c500d7de4893ce11ef7f880cf222718a45756a5ba97f9b86acff08a3f2064a9f42580cf8f5c650b81a6b6f778eb9fb638a5ecd833a63fdd6936963a0f16cf84bb6404ab4df466aa69955f262e215ed30cd9c7bcef30f81380d69f3262029b52ab76194019000e3d20ac3a409cdddc09bb05d7d7d5012fe6de0eecf724e50979cc3d2d355ecb3f00f729fd0f18da65693016f33f62"}}, {0x5e, &(0x7f0000002c00)=@string={0x5e, 0x3, "3bdaa16c91d004c8649c82ad098a293bb08f2aee2cf17d565c0a699578375d8fcbeba3de859c4a7f293001d01a7890eab01b74b534cd71bfbced16b9a1a804b0753501a9c205af3315b656299be8ab043f37e4fba81e638b2d50661e"}}, {0xb, &(0x7f0000002c80)=@string={0xb, 0x3, "23907bff16781a06a9"}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000002d00)=@lang_id={0x4, 0x3, 0x280a}}, {0x9c, &(0x7f0000002d40)=@string={0x9c, 0x3, "bcc23b6aba3374f28e98051e42cac42e20aff1f93103962ce13990a18db3672b962ed5677b46aa26e6e9f5652b41a2e9e08fa2b67cfbbdd74207f766dac44777f336cfae4065820591efb3e2870106c99b0ccf84957eced91adf964f411b9d5f3ab67161f369757ae1cc5c888af9ce74723bcbe3d3f1d6cd5999eff864b8bb15a9e3df9c5055d8e2ace532e2f9e49375b6d4b61ceae41cf29f0e"}}]}) (async) r4 = syz_usb_connect(0x4, 0x314, &(0x7f0000002700)={{0x12, 0x1, 0x310, 0x16, 0xa1, 0x6f, 0x8, 0xbda, 0x817f, 0xe3ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x302, 0x1, 0xfb, 0x9, 0xa0, 0x9, [{{0x9, 0x4, 0xa2, 0x2, 0x7, 0x1a, 0xf7, 0xc, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x8001}, [@processing_unit={0xb, 0x24, 0x7, 0x2, 0x6, 0x9, '+}rQ'}]}], [{{0x9, 0x5, 0xc, 0x14, 0x200, 0xdd, 0x4d, 0x2, [@generic={0x2e, 0xe, "86ce9d9716f6cdf899995fe9335a75b4dcb9461edb80f13b83abf9515cdbfb552fc0439f16b48993e8dbda69"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x6, 0xff, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x1000}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0xff, 0x6, 0xce, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x80}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1a}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x3f, 0x20, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9800}, @generic={0x102, 0x21, "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"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x4, 0x7, 0x1, [@generic={0xbc, 0xa, "5395107b48acc23e89619870062f1d6ad8877f3c266bea9a195a113f64f674a58b48af9146f7cc6fa7dd906d156c7472736b9d56805218d7d7828281d48d98fb15a2ea54da0bdca89e0378dea7c8905811fbb19ec644bfec8ea5c4db2029cbefea2a7e7056ef586097c49415b3bb0b3a124bc89d5559470d84586d9b42c0959823802e0a62efe557d494ab844bb25df2b338253d740752ca7a174f064c91e91ef8fee71ee34180eaddf8e6c50c8db5177037a2c13e6ebb404b94"}, @uac_iso={0x7, 0x25, 0x1, 0xb899cb6f77ccd4a, 0x2, 0x401}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x7f, 0x40, 0x81, [@generic={0x80, 0x21, "eb397508253f260c175974d7f5ca8249ebcf6e1c9997711b6638766c86bdaa034cf68de1ee8368a6670d91a21ddac1326d147ca735a3c6cd881435c3f007bac4cb5e2fe338dc1a1f1a19d106585b2ce2605d2c2a297366eadaca2d1ffbd585933e36cec06b92a1fbb6eb5c3c4feab6ad790d25c2faa207080b99a28c49ff"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x438, 0x2, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x7a, 0x4}]}}]}}]}}]}}, &(0x7f0000002e00)={0xa, &(0x7f0000002a40)={0xa, 0x6, 0x310, 0x9, 0x7, 0x70, 0x8, 0x20}, 0x20, &(0x7f0000002a80)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "c58c430f017876270cbbd4472588a11c"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x0, 0x199}]}, 0x7, [{0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x41b}}, {0xf7, &(0x7f0000002b00)=@string={0xf7, 0x3, "45b0f5bd836dda45df1b34c2ec04d963c3f78a6393bae5e76425e6d3464a081854e0851784cd427e082185018d61e8658da22166abe1f14073d9b4177042496b133694174055c223c2334fd4ec05b41ccf2101d97f4b7856af947a40ab2479c00c500d7de4893ce11ef7f880cf222718a45756a5ba97f9b86acff08a3f2064a9f42580cf8f5c650b81a6b6f778eb9fb638a5ecd833a63fdd6936963a0f16cf84bb6404ab4df466aa69955f262e215ed30cd9c7bcef30f81380d69f3262029b52ab76194019000e3d20ac3a409cdddc09bb05d7d7d5012fe6de0eecf724e50979cc3d2d355ecb3f00f729fd0f18da65693016f33f62"}}, {0x5e, &(0x7f0000002c00)=@string={0x5e, 0x3, "3bdaa16c91d004c8649c82ad098a293bb08f2aee2cf17d565c0a699578375d8fcbeba3de859c4a7f293001d01a7890eab01b74b534cd71bfbced16b9a1a804b0753501a9c205af3315b656299be8ab043f37e4fba81e638b2d50661e"}}, {0xb, &(0x7f0000002c80)=@string={0xb, 0x3, "23907bff16781a06a9"}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000002d00)=@lang_id={0x4, 0x3, 0x280a}}, {0x9c, &(0x7f0000002d40)=@string={0x9c, 0x3, "bcc23b6aba3374f28e98051e42cac42e20aff1f93103962ce13990a18db3672b962ed5677b46aa26e6e9f5652b41a2e9e08fa2b67cfbbdd74207f766dac44777f336cfae4065820591efb3e2870106c99b0ccf84957eced91adf964f411b9d5f3ab67161f369757ae1cc5c888af9ce74723bcbe3d3f1d6cd5999eff864b8bb15a9e3df9c5055d8e2ace532e2f9e49375b6d4b61ceae41cf29f0e"}}]}) syz_usb_control_io$hid(r4, &(0x7f00000030c0)={0x24, &(0x7f0000002e80)={0x20, 0x31, 0xe1, {0xe1, 0xf, "c88a2cb609996c0be20ca044196312112b80a2870135feeeb87b03d89e8e882f318048fc6c3a588e8649f04c34f46a5915bd660b478bc231705875ae01b9253e9551f3641480ead3d4f9df910a3be57d80d8793b12910d80eade628523d0c1119209300bfb41dac037fcb17c131399927f2b2f51d142169cda23430a06965101e3d71e7a622b4616bd3e6a6d5935bee26adf5d720be1692102f5526c6bbc48a38a538554c701b3b3387c46a0fc8a708304af19ab21f2b1891b8e3639a90b69d570a5c49185ba8500bd5874f62098c4d47329af07195e13fe8a13cf3f03f0d4"}}, &(0x7f0000002f80)={0x0, 0x3, 0x96, @string={0x96, 0x3, "79ad8e2d91b7ff42770b0b610357b8a04f7e90a54ce3f89cc83e4118bff4cf67d25a51b0d7919b95cb2e844789a493e7bce171420d11f27f53055b36f634fa6ec52f6b5dbaf87bfa029c9ea10997e978125f79bb14c241ca870e96d6eae5c12f6fe30d703bfa82b15f91e4136b87ce4ac11fea7f4c0c566e5cf5dec4031c23f9654292dd9a626e4d353f447645607befc8e85793"}}, &(0x7f0000003040)={0x0, 0x22, 0x19, {[@local=@item_4={0x3, 0x2, 0x7, "63678798"}, @main=@item_012={0x1, 0x0, 0xa, "aa"}, @local=@item_4={0x3, 0x2, 0x1, "2c7191ea"}, @main=@item_4={0x3, 0x0, 0xc, "629c23f3"}, @global=@item_4={0x3, 0x1, 0x9, "6de7ac6f"}, @local=@item_012={0x2, 0x2, 0xa, "5b12"}]}}, &(0x7f0000003080)={0x0, 0x21, 0x9, {0x9, 0x21, 0xba00, 0x7f, 0x1, {0x22, 0x366}}}}, &(0x7f0000003380)={0x2c, &(0x7f0000003100)={0x0, 0xa, 0xf1, "47ea1147fb56aec356aa30ae495cce9313bc91312aee93630a2054ac1e0225231bbc137c5f8e82335d54091d44bb44194d0b7d6227b60e405818062287c54533e3de4b1842fdc0efb24aa451a5ccbbb292da27df347e97869d0ca04dc87c64a031b4e1d83ecbf053a642014007bb90ceb01a76f50a3dac9d973dd8e42d2acc8cec5070d26f060945a5a4252e63314a599e3b0ddbbe6e76f68e5ce7292177dedc522c35565ca22affbc9021ee2ab90998ae72d0026f7d109e9d66502a9286655d8e0036ac76673295721f0df52977fa41ffa8170c1a479654eb4d6a83f1c3a36a982983e8d19428de7d1baf7c71afc606d1"}, &(0x7f0000003200)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000003240)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000003280)={0x20, 0x1, 0x9e, "3fb1d6d9909ef869cf73881e7000dd17844cb456cd909ee10249ab723161fd944ad9b3b91ca1aef3427db642465ea81eb45954651ee635ff28f8efd9c4a344799d8d432c1626fb2a38f060326435854f580222e23bec410df32c2ac451e0d25d73b2d55132eb9682ef3e3d5c1ede6dc94799ce7d1f1a578be4220e145b92b793226a46e5a57951c751317ef9ba556f38de7e6ba3762ea6fd3e3f14695499"}, &(0x7f0000003340)={0x20, 0x3, 0x1, 0x5}}) 06:29:19 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x30, 0x0, 0x2000000000000012) 06:29:19 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x30, 0x0, 0x0, 0x2000000000000012) 06:29:19 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) [ 3111.296351][T19244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3111.348309][T19244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3111.452174][T19244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3111.508383][T19251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3111.555261][T10411] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 3111.590763][T19244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3111.605735][T19251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3111.637898][T19251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3111.692338][T19251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3111.965414][T10411] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3112.004668][T10411] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3112.045053][T10411] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3112.085434][T10411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:29:20 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x36, 0x0, 0x0, 0x2000000000000012) 06:29:20 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x2a, 0x0, 0x2000000000000012) 06:29:20 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x36, 0x0, 0x2000000000000012) 06:29:20 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private}, 0x80, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000012) [ 3112.555423][T10411] usbhid 6-1:17.0: can't add hid device: -71 [ 3112.561709][T10411] usbhid: probe of 6-1:17.0 failed with error -71 [ 3112.614166][T10411] usb 6-1: USB disconnect, device number 86 06:29:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x1a}]}, 0x20}}, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) 06:29:21 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x30, 0x0, 0x2000000000000012) [ 3113.305298][T12924] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 3113.695288][T12924] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3113.709663][T12924] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3113.719757][T12924] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3113.729240][T12924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3114.229550][T12924] wacom 0003:056A:0331.00AF: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3114.422831][ T5171] usb 6-1: USB disconnect, device number 87 06:29:30 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:29:30 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x3c, 0x0, 0x0, 0x2000000000000012) 06:29:30 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x3c, 0x0, 0x2000000000000012) 06:29:30 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x24, 0x0, 0x2000000000000012) 06:29:30 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x36, 0x0, 0x2000000000000012) 06:29:30 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x1a}]}, 0x20}}, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) [ 3122.945177][T12924] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 3123.335318][T12924] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3123.346439][T12924] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3123.356493][T12924] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3123.369406][T12924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:29:31 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x3c, 0x0, 0x2000000000000012) 06:29:31 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x42, 0x0, 0x2000000000000012) 06:29:31 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xc, 0x0, 0x0, 0x2000000000000012) 06:29:31 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x42, 0x0, 0x0, 0x2000000000000012) [ 3123.791692][T12924] wacom 0003:056A:0331.00B0: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3123.990213][T12924] usb 6-1: USB disconnect, device number 88 06:29:32 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x1a}]}, 0x20}}, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x1a}]}, 0x20}}, 0x0) (async) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) (async) 06:29:32 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x5a, 0x0, 0x0, 0x2000000000000012) [ 3124.835311][T10411] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 3125.195244][T10411] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3125.206436][T10411] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3125.216460][T10411] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3125.225724][T10411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3125.722032][T10411] wacom 0003:056A:0331.00B1: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3125.927970][T19323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3125.938107][T19323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3125.949721][T18058] usb 6-1: USB disconnect, device number 89 [ 3131.365196][T17901] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3131.735604][T17901] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3131.746674][T17901] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3131.756603][T17901] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3131.765783][T17901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3133.390952][T19335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3133.400692][T19335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3133.428281][T17901] wacom 0003:056A:0331.00B2: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3133.620810][T10656] usb 4-1: USB disconnect, device number 47 06:29:42 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400454ca, 0x0) 06:29:42 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x5a, 0x0, 0x2000000000000012) 06:29:42 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x42, 0x0, 0x2000000000000012) 06:29:42 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x78, 0x0, 0x0, 0x2000000000000012) 06:29:42 executing program 0: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xc, 0x0, 0x0, 0x2000000000000012) 06:29:42 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201005e8f2ff579635de7aa8a343f8400000000406a05310340000000000109022400011100000009040000010301faff092100060101220100090581034701cc9aaa4c125a7f0d85e304930641b26c439877411c6bda3a4025c701ab97a9509ab1"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x815, 0x200000) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) [ 3134.425209][T12924] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 3134.625202][T12924] usb 6-1: device descriptor read/64, error 18 [ 3134.895320][T12924] usb 6-1: new high-speed USB device number 91 using dummy_hcd 06:29:43 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x78, 0x0, 0x2000000000000012) 06:29:43 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x96, 0x0, 0x0, 0x2000000000000012) 06:29:43 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x5a, 0x0, 0x2000000000000012) [ 3135.105243][T12924] usb 6-1: device descriptor read/64, error 18 06:29:43 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) [ 3135.228416][T12924] usb usb6-port1: attempt power cycle [ 3135.555260][T10656] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 3135.645190][T12924] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 3135.755343][T12924] usb 6-1: Invalid ep0 maxpacket: 121 [ 3135.905330][T12924] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 3135.925613][T10656] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3135.962687][T10656] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 06:29:44 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x96, 0x0, 0x2000000000000012) 06:29:44 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xb4, 0x0, 0x0, 0x2000000000000012) [ 3136.015302][T12924] usb 6-1: Invalid ep0 maxpacket: 121 [ 3136.020998][T12924] usb usb6-port1: unable to enumerate USB device [ 3136.090453][T10656] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3136.132832][T10656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3136.677267][T19367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3136.695508][T19367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3136.748606][T10656] wacom 0003:056A:0331.00B3: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 3137.000871][T10656] usb 1-1: USB disconnect, device number 37 [ 3142.715177][T15505] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3143.085214][T15505] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3143.096392][T15505] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3143.107513][T15505] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3143.116826][T15505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3143.167392][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.173731][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 06:29:51 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x40049409, 0x0) 06:29:51 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x78, 0x0, 0x2000000000000012) 06:29:51 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0xb4, 0x0, 0x2000000000000012) 06:29:51 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xd2, 0x0, 0x0, 0x2000000000000012) 06:29:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201005e8f2ff579635de7aa8a343f8400000000406a05310340000000000109022400011100000009040000010301faff092100060101220100090581034701cc9aaa4c125a7f0d85e304930641b26c439877411c6bda3a4025c701ab97a9509ab1"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x815, 0x200000) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201005e8f2ff579635de7aa8a343f8400000000406a05310340000000000109022400011100000009040000010301faff092100060101220100090581034701cc9aaa4c125a7f0d85e304930641b26c439877411c6bda3a4025c701ab97a9509ab1"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(&(0x7f00000000c0), 0x815, 0x200000) (async) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) (async) 06:29:51 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) [ 3143.466675][T15505] usbhid 4-1:17.0: can't add hid device: -71 [ 3143.472986][T15505] usbhid: probe of 4-1:17.0 failed with error -71 [ 3143.543195][T15505] usb 4-1: USB disconnect, device number 48 [ 3143.685202][T18716] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 3143.693177][T17901] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 3143.905232][T17901] usb 6-1: device descriptor read/64, error 18 [ 3144.105299][T18716] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3144.185137][T17901] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 3144.199204][T18716] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3144.235863][T18716] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3144.246362][T18716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:29:52 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x96, 0x0, 0x2000000000000012) 06:29:52 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0xd2, 0x0, 0x2000000000000012) 06:29:52 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xf0, 0x0, 0x0, 0x2000000000000012) [ 3144.415313][T17901] usb 6-1: device descriptor read/64, error 18 [ 3144.535363][T17901] usb usb6-port1: attempt power cycle [ 3144.720561][T19393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3144.745713][T19393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3144.828602][T18716] wacom 0003:056A:0331.00B4: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 3144.975259][T17901] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 3145.082950][T15505] usb 1-1: USB disconnect, device number 38 [ 3145.095420][T17901] usb 6-1: Invalid ep0 maxpacket: 121 06:29:53 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0xb4, 0x0, 0x2000000000000012) 06:29:53 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0xf0, 0x0, 0x2000000000000012) [ 3145.245272][T17901] usb 6-1: new high-speed USB device number 97 using dummy_hcd 06:29:53 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x10e, 0x0, 0x0, 0x2000000000000012) [ 3145.375418][T17901] usb 6-1: Invalid ep0 maxpacket: 121 [ 3145.381322][T17901] usb usb6-port1: unable to enumerate USB device [ 3149.985153][T15505] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3150.355302][T15505] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3150.366436][T15505] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3150.376377][T15505] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3150.385560][T15505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3150.856804][T19427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3150.866662][T19427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3150.902811][T15505] wacom 0003:056A:0331.00B5: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3151.102764][T17901] usb 4-1: USB disconnect, device number 49 06:29:59 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0xd2, 0x0, 0x2000000000000012) 06:29:59 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:29:59 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x10e, 0x0, 0x2000000000000012) 06:29:59 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x40086602, 0x0) 06:29:59 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x12c, 0x0, 0x0, 0x2000000000000012) 06:29:59 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201005e8f2ff579635de7aa8a343f8400000000406a05310340000000000109022400011100000009040000010301faff092100060101220100090581034701cc9aaa4c125a7f0d85e304930641b26c439877411c6bda3a4025c701ab97a9509ab1"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x815, 0x200000) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) [ 3151.915260][T15505] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 3151.923053][T10656] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 3152.105184][T15505] usb 6-1: device descriptor read/64, error 18 [ 3152.305429][T10656] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3152.339162][T10656] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3152.385200][T15505] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 3152.407283][T10656] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3152.461176][T10656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:30:00 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0xf0, 0x0, 0x2000000000000012) 06:30:00 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x14a, 0x0, 0x0, 0x2000000000000012) 06:30:00 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x12c, 0x0, 0x2000000000000012) [ 3152.597239][T15505] usb 6-1: device descriptor read/64, error 18 [ 3152.735333][T15505] usb usb6-port1: attempt power cycle [ 3152.966611][T19439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3152.975390][T19439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3153.054073][T10656] wacom 0003:056A:0331.00B6: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 3153.145431][T15505] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 3153.255473][T15505] usb 6-1: Invalid ep0 maxpacket: 121 [ 3153.332487][ T5171] usb 1-1: USB disconnect, device number 39 [ 3153.405315][T15505] usb 6-1: new high-speed USB device number 101 using dummy_hcd 06:30:01 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x168, 0x0, 0x0, 0x2000000000000012) 06:30:01 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x14a, 0x0, 0x2000000000000012) 06:30:01 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x10e, 0x0, 0x2000000000000012) [ 3153.505563][T15505] usb 6-1: Invalid ep0 maxpacket: 121 [ 3153.511381][T15505] usb usb6-port1: unable to enumerate USB device 06:30:01 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) [ 3154.165167][T15505] usb 1-1: new high-speed USB device number 40 using dummy_hcd 06:30:02 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x12c, 0x0, 0x2000000000000012) 06:30:02 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x186, 0x0, 0x0, 0x2000000000000012) 06:30:02 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x168, 0x0, 0x2000000000000012) [ 3154.575385][T15505] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3154.614526][T15505] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3154.693599][T15505] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3154.728005][T15505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3155.236780][T19473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3155.272928][T19473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3155.307648][T15505] wacom 0003:056A:0331.00B7: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 3155.527412][ T5171] usb 1-1: USB disconnect, device number 40 [ 3158.155294][T15505] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3158.515488][T15505] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3158.527444][T15505] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3158.537737][T15505] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3158.547555][T15505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3159.031555][T19486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3159.041105][T19486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3159.079669][T15505] wacom 0003:056A:0331.00B8: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3160.345157][T15505] usb 4-1: reset high-speed USB device number 50 using dummy_hcd 06:30:09 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x40186366, 0x0) 06:30:09 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902240001110080390a04000001030100000921000609012201000905810318518895a29d51a6fd08a476d262a78bb35f5e90856c7373e1a9e7879c2c5953257b01162b08a019b2548987ce063cb8e41baf3937d917a381e27fffa00e95c7ab59b06b0ca6a66dc2d51e778b4c7f867952c4cbeb3c2a9192c2d702341802d120ef6d982389"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) 06:30:09 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1a4, 0x0, 0x0, 0x2000000000000012) 06:30:09 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x186, 0x0, 0x2000000000000012) 06:30:09 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x14a, 0x0, 0x2000000000000012) 06:30:09 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x400448dd, 0x0) [ 3162.145142][T17901] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 3162.145290][T12924] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 3162.161463][T10656] usb 4-1: USB disconnect, device number 50 [ 3162.535357][T17901] usb 6-1: config 17 has an invalid descriptor of length 33, skipping remainder of the config [ 3162.569266][T17901] usb 6-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3162.615249][T12924] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3162.662392][T12924] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3162.676415][T17901] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 06:30:10 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x1a4, 0x0, 0x2000000000000012) [ 3162.727028][T12924] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3162.736285][T12924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:30:10 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1c2, 0x0, 0x0, 0x2000000000000012) 06:30:10 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x168, 0x0, 0x2000000000000012) [ 3162.773590][T17901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3162.878686][T17901] usbhid 6-1:17.0: couldn't find an input interrupt endpoint [ 3163.216286][T19493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3163.238570][T19493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3163.290066][T12924] wacom 0003:056A:0331.00B9: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 3163.489502][T18716] usb 1-1: USB disconnect, device number 41 06:30:11 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x1c2, 0x0, 0x2000000000000012) 06:30:11 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x186, 0x0, 0x2000000000000012) 06:30:11 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1e0, 0x0, 0x0, 0x2000000000000012) [ 3164.862873][ T5171] usb 6-1: USB disconnect, device number 102 [ 3172.585150][ T5171] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 3172.955300][ T5171] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3172.966425][ T5171] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3172.976747][ T5171] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3172.986541][ T5171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:30:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x401c5820, 0x0) 06:30:21 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x400448dd, 0x0) 06:30:21 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x1a4, 0x0, 0x2000000000000012) 06:30:21 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x1e0, 0x0, 0x2000000000000012) 06:30:21 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x1fe, 0x0, 0x0, 0x2000000000000012) 06:30:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902240001110080390a04000001030100000921000609012201000905810318518895a29d51a6fd08a476d262a78bb35f5e90856c7373e1a9e7879c2c5953257b01162b08a019b2548987ce063cb8e41baf3937d917a381e27fffa00e95c7ab59b06b0ca6a66dc2d51e778b4c7f867952c4cbeb3c2a9192c2d702341802d120ef6d982389"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) [ 3173.285292][ T5171] usbhid 4-1:17.0: can't add hid device: -71 [ 3173.293128][ T5171] usbhid: probe of 4-1:17.0 failed with error -71 [ 3173.335734][ T5171] usb 4-1: USB disconnect, device number 51 [ 3173.505233][T11105] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 3173.535303][T10656] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 3173.875474][T11105] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3173.915440][T10656] usb 6-1: config 17 has an invalid descriptor of length 33, skipping remainder of the config [ 3173.925884][T11105] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3173.925990][T11105] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3173.926022][T11105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3174.041899][T10656] usb 6-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 06:30:22 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x1fe, 0x0, 0x2000000000000012) 06:30:22 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x20d, 0x0, 0x0, 0x2000000000000012) 06:30:22 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x1c2, 0x0, 0x2000000000000012) [ 3174.174343][T10656] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3174.238737][T10656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3174.327681][T10656] usbhid 6-1:17.0: couldn't find an input interrupt endpoint [ 3174.467453][T19543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3174.485930][T19543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3174.529668][T11105] wacom 0003:056A:0331.00BA: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 3174.729134][T11105] usb 1-1: USB disconnect, device number 42 06:30:23 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x1e0, 0x0, 0x2000000000000012) 06:30:23 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x20d, 0x0, 0x2000000000000012) 06:30:23 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x21c, 0x0, 0x0, 0x2000000000000012) [ 3176.226728][ T5171] usb 6-1: USB disconnect, device number 103 06:30:32 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x4020940d, 0x0) 06:30:32 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x400448dd, 0x0) 06:30:32 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x21c, 0x0, 0x2000000000000012) 06:30:32 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x1fe, 0x0, 0x2000000000000012) 06:30:32 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x23a, 0x0, 0x0, 0x2000000000000012) 06:30:32 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a0531034000000000010902240001110080390a04000001030100000921000609012201000905810318518895a29d51a6fd08a476d262a78bb35f5e90856c7373e1a9e7879c2c5953257b01162b08a019b2548987ce063cb8e41baf3937d917a381e27fffa00e95c7ab59b06b0ca6a66dc2d51e778b4c7f867952c4cbeb3c2a9192c2d702341802d120ef6d982389"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) [ 3184.885367][T12924] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 3184.892988][T10656] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 3185.265377][T12924] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3185.276871][T10656] usb 6-1: config 17 has an invalid descriptor of length 33, skipping remainder of the config [ 3185.300654][T10656] usb 6-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3185.317278][T12924] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3185.338206][T12924] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3185.347933][T10656] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3185.370306][T12924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3185.379022][T10656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3185.429398][T10656] usbhid 6-1:17.0: couldn't find an input interrupt endpoint 06:30:33 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x23a, 0x0, 0x2000000000000012) 06:30:33 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x258, 0x0, 0x0, 0x2000000000000012) 06:30:33 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x20d, 0x0, 0x2000000000000012) [ 3185.837010][T19596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3185.852367][T19596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3185.889535][T12924] wacom 0003:056A:0331.00BB: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 3186.091864][T12924] usb 1-1: USB disconnect, device number 43 06:30:34 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x258, 0x0, 0x2000000000000012) 06:30:34 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x21c, 0x0, 0x2000000000000012) 06:30:34 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x276, 0x0, 0x0, 0x2000000000000012) [ 3187.588299][T11105] usb 6-1: USB disconnect, device number 104 06:30:41 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x80044801, 0x0) 06:30:41 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:30:41 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x276, 0x0, 0x2000000000000012) 06:30:41 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x23a, 0x0, 0x2000000000000012) 06:30:41 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x294, 0x0, 0x0, 0x2000000000000012) 06:30:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000040)=[{r1, 0x222}], 0x1, 0x1) [ 3194.145208][T10656] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 3194.185184][T18716] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 3194.515396][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3194.553648][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3194.615211][T18716] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3194.634368][T10656] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3194.672927][T18716] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 06:30:42 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x258, 0x0, 0x2000000000000012) [ 3194.720971][T10656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3194.736503][T18716] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3194.746060][T18716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:30:42 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x2b2, 0x0, 0x0, 0x2000000000000012) 06:30:42 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x294, 0x0, 0x2000000000000012) [ 3195.216176][T19645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3195.235392][T19645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3195.281954][T18716] wacom 0003:056A:0331.00BC: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 3195.311525][T10656] wacom 0003:056A:0331.00BD: hidraw1: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3195.503145][T18716] usb 1-1: USB disconnect, device number 44 [ 3195.545195][ T5171] usb 6-1: USB disconnect, device number 105 06:30:43 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x276, 0x0, 0x2000000000000012) 06:30:43 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x2d0, 0x0, 0x0, 0x2000000000000012) 06:30:43 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x2b2, 0x0, 0x2000000000000012) [ 3204.565167][T11105] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3204.596281][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.602613][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.925249][T11105] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3204.936759][T11105] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3204.947044][T11105] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3204.957141][T11105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3205.426489][T19679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3205.438241][T19679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3205.469476][T11105] wacom 0003:056A:0331.00BE: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3205.672102][T18058] usb 4-1: USB disconnect, device number 52 06:30:54 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x80084803, 0x0) 06:30:54 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:30:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000040)=[{r1, 0x222}], 0x1, 0x1) 06:30:54 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x294, 0x0, 0x2000000000000012) 06:30:54 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x2ee, 0x0, 0x0, 0x2000000000000012) 06:30:54 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x2d0, 0x0, 0x2000000000000012) [ 3206.465236][T11105] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 3206.465244][T18058] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 3206.825283][T18058] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3206.836976][T18058] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3206.849863][T18058] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3206.872675][T18058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3206.885231][T11105] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3206.958245][T11105] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3207.033969][T11105] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3207.092158][T11105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:30:55 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x2b2, 0x0, 0x2000000000000012) 06:30:55 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x2ee, 0x0, 0x2000000000000012) 06:30:55 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x30c, 0x0, 0x0, 0x2000000000000012) [ 3207.261573][T18058] wacom 0003:056A:0331.00BF: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3207.447950][ T5171] usb 6-1: USB disconnect, device number 106 [ 3207.656320][T19686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3207.691399][T19686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3207.815210][T11105] usbhid 1-1:17.0: can't add hid device: -71 [ 3207.824134][T11105] usbhid: probe of 1-1:17.0 failed with error -71 06:30:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000040)=[{r1, 0x222}], 0x1, 0x1) [ 3207.904444][T11105] usb 1-1: USB disconnect, device number 45 06:30:56 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x30c, 0x0, 0x2000000000000012) 06:30:56 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x2d0, 0x0, 0x2000000000000012) [ 3208.295236][T12924] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 3208.665433][T12924] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3208.700995][T12924] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3208.759250][T12924] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3208.768614][T12924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3209.264520][T12924] wacom 0003:056A:0331.00C0: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3209.457713][T12924] usb 6-1: USB disconnect, device number 107 06:31:03 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x80086301, 0x0) 06:31:03 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x32a, 0x0, 0x0, 0x2000000000000012) 06:31:03 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:31:03 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x32a, 0x0, 0x2000000000000012) 06:31:03 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x2ee, 0x0, 0x2000000000000012) 06:31:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000240)={0x5eeeac83c242c02b, 0x1, 0x96, {0x96, 0x31, "124b65f6ee636be344b9401c350aac22ae30e08330019681c48e3700a9b1f40d71404a81e5baae51b009733ea8d429264ac3d688f0308b20140f8abe63e4b41da6ffc2a8821c766f68f079c2523068502b963f8bcff6ff261a9bad687dec0853a11933d31d0d4ac260540165076a006af33a1073e74cc73640517864cdf4b8f419b26f0f90422071e8d0cecb7ad94ebb3b199fe3"}}, &(0x7f0000000040)={0x0, 0x3, 0x12, @string={0x12, 0x3, "b88f8d7132b253d432f08d9c7d428b5c"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000300)={0x20, 0x2e, 0xe8, "44aa847e2b617588df12ca3a29d1eec9f1d39df31e6b4d3af97803a6fac2de530497836db1df0a679507a46c0ccd78beb478ac5fe7ef8a6d25ce9f252f49f5e668f3c7535ccb1110956c24b146c9596029e53c52f58a917c6819eacdcedaa590112391a3ebcf850671fabd5cd8c6fc8a0b176a65d4b430497a6fa5e224ebaf7668cd896176b3145e5a956f3041f4d0b27356e3391460a0c123712dd065060ea16ed3785a346e049f6c00a6ebc874feaeee79a45a262ce4ac3c14d549178bbb649b98b4cccb5baa3aeee9f62c57870a6a7e78fe23d0053a5eeae156b4dec67d8612011742b54e0072"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000180)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0xc2, {0xc0, "7cd574f43f053a1f3bf7bbb8ff174e6162851d41f25cc9c5480c786a2577495128ead92b21db1c6b765d7b10be6502965658a1425bdf034344797e55f9b9ad4b62ab4c920679b9ee5227e4295139bb865d65dc3da99baec259669d9c134f5fce23bfd8242defaebf45efef75eac022e295d3958f55d5e66c8d804daf520f5562e0411590b24792870974a7104d850fe82a4caafe9cffde4b672b1cdc14acc4f2c560c45083d29b253989f38f8cede6360fd0a2a6a22e66e6ca9cd86f7c294f41"}}, &(0x7f00000001c0)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x4}}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_disconnect(r3) syz_usb_control_io(r3, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x20, 0xe, 0xc, {0xc, 0x4, "fb5425acd1db41c54d8d"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000000640)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x4, 0x3, "5173c404", "1644d67b"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0x1, 0x40, 0x8c, 0x1, 0x66a}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000740)={0x37c61e00fafab45e, 0x5, 0x38, "f6537702ea686b4aec62d68c8b4fd2d8ba83c53304c061e94300fd4a0bdcb5b1aacac51aab5c57cb67e0869f7ac03756b0e2190924564771"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x1, 0x20, [0xf0f0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000900)={0x40, 0xb, 0x2, '\"Q'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000980)={0x40, 0x13, 0x6, @remote}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "2817"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x56de}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x5}}) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) [ 3215.845394][T15505] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 3215.855268][T17901] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 3216.225394][T15505] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3216.271510][T15505] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3216.275356][T17901] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3216.366214][T17901] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3216.377852][T15505] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 06:31:04 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x30c, 0x0, 0x2000000000000012) 06:31:04 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x348, 0x0, 0x2000000000000012) [ 3216.437534][T15505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3216.448768][T17901] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 06:31:04 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x348, 0x0, 0x0, 0x2000000000000012) [ 3216.501820][T17901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3216.946428][T19733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3216.975422][T19733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3217.016541][T17901] wacom 0003:056A:0331.00C1: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3217.165353][T15505] usbhid 1-1:17.0: can't add hid device: -71 [ 3217.175363][T15505] usbhid: probe of 1-1:17.0 failed with error -71 [ 3217.209495][T19735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3217.225562][T19735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3217.250763][T15505] usb 1-1: USB disconnect, device number 46 06:31:05 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x32a, 0x0, 0x2000000000000012) 06:31:05 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x366, 0x0, 0x2000000000000012) 06:31:05 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x366, 0x0, 0x0, 0x2000000000000012) [ 3217.465620][T19735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3217.507453][T19735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3217.745780][T12924] usb 6-1: USB disconnect, device number 108 06:31:12 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x80086601, 0x0) 06:31:12 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:31:12 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000240)={0x5eeeac83c242c02b, 0x1, 0x96, {0x96, 0x31, "124b65f6ee636be344b9401c350aac22ae30e08330019681c48e3700a9b1f40d71404a81e5baae51b009733ea8d429264ac3d688f0308b20140f8abe63e4b41da6ffc2a8821c766f68f079c2523068502b963f8bcff6ff261a9bad687dec0853a11933d31d0d4ac260540165076a006af33a1073e74cc73640517864cdf4b8f419b26f0f90422071e8d0cecb7ad94ebb3b199fe3"}}, &(0x7f0000000040)={0x0, 0x3, 0x12, @string={0x12, 0x3, "b88f8d7132b253d432f08d9c7d428b5c"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000300)={0x20, 0x2e, 0xe8, "44aa847e2b617588df12ca3a29d1eec9f1d39df31e6b4d3af97803a6fac2de530497836db1df0a679507a46c0ccd78beb478ac5fe7ef8a6d25ce9f252f49f5e668f3c7535ccb1110956c24b146c9596029e53c52f58a917c6819eacdcedaa590112391a3ebcf850671fabd5cd8c6fc8a0b176a65d4b430497a6fa5e224ebaf7668cd896176b3145e5a956f3041f4d0b27356e3391460a0c123712dd065060ea16ed3785a346e049f6c00a6ebc874feaeee79a45a262ce4ac3c14d549178bbb649b98b4cccb5baa3aeee9f62c57870a6a7e78fe23d0053a5eeae156b4dec67d8612011742b54e0072"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000180)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0xc2, {0xc0, "7cd574f43f053a1f3bf7bbb8ff174e6162851d41f25cc9c5480c786a2577495128ead92b21db1c6b765d7b10be6502965658a1425bdf034344797e55f9b9ad4b62ab4c920679b9ee5227e4295139bb865d65dc3da99baec259669d9c134f5fce23bfd8242defaebf45efef75eac022e295d3958f55d5e66c8d804daf520f5562e0411590b24792870974a7104d850fe82a4caafe9cffde4b672b1cdc14acc4f2c560c45083d29b253989f38f8cede6360fd0a2a6a22e66e6ca9cd86f7c294f41"}}, &(0x7f00000001c0)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x4}}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_disconnect(r3) syz_usb_control_io(r3, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x20, 0xe, 0xc, {0xc, 0x4, "fb5425acd1db41c54d8d"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000000640)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x4, 0x3, "5173c404", "1644d67b"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0x1, 0x40, 0x8c, 0x1, 0x66a}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000740)={0x37c61e00fafab45e, 0x5, 0x38, "f6537702ea686b4aec62d68c8b4fd2d8ba83c53304c061e94300fd4a0bdcb5b1aacac51aab5c57cb67e0869f7ac03756b0e2190924564771"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x1, 0x20, [0xf0f0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000900)={0x40, 0xb, 0x2, '\"Q'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000980)={0x40, 0x13, 0x6, @remote}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "2817"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x56de}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x5}}) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000240)={0x5eeeac83c242c02b, 0x1, 0x96, {0x96, 0x31, "124b65f6ee636be344b9401c350aac22ae30e08330019681c48e3700a9b1f40d71404a81e5baae51b009733ea8d429264ac3d688f0308b20140f8abe63e4b41da6ffc2a8821c766f68f079c2523068502b963f8bcff6ff261a9bad687dec0853a11933d31d0d4ac260540165076a006af33a1073e74cc73640517864cdf4b8f419b26f0f90422071e8d0cecb7ad94ebb3b199fe3"}}, &(0x7f0000000040)={0x0, 0x3, 0x12, @string={0x12, 0x3, "b88f8d7132b253d432f08d9c7d428b5c"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000300)={0x20, 0x2e, 0xe8, "44aa847e2b617588df12ca3a29d1eec9f1d39df31e6b4d3af97803a6fac2de530497836db1df0a679507a46c0ccd78beb478ac5fe7ef8a6d25ce9f252f49f5e668f3c7535ccb1110956c24b146c9596029e53c52f58a917c6819eacdcedaa590112391a3ebcf850671fabd5cd8c6fc8a0b176a65d4b430497a6fa5e224ebaf7668cd896176b3145e5a956f3041f4d0b27356e3391460a0c123712dd065060ea16ed3785a346e049f6c00a6ebc874feaeee79a45a262ce4ac3c14d549178bbb649b98b4cccb5baa3aeee9f62c57870a6a7e78fe23d0053a5eeae156b4dec67d8612011742b54e0072"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000180)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0xc2, {0xc0, "7cd574f43f053a1f3bf7bbb8ff174e6162851d41f25cc9c5480c786a2577495128ead92b21db1c6b765d7b10be6502965658a1425bdf034344797e55f9b9ad4b62ab4c920679b9ee5227e4295139bb865d65dc3da99baec259669d9c134f5fce23bfd8242defaebf45efef75eac022e295d3958f55d5e66c8d804daf520f5562e0411590b24792870974a7104d850fe82a4caafe9cffde4b672b1cdc14acc4f2c560c45083d29b253989f38f8cede6360fd0a2a6a22e66e6ca9cd86f7c294f41"}}, &(0x7f00000001c0)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x4}}) (async) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) syz_usb_disconnect(r3) (async) syz_usb_control_io(r3, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x20, 0xe, 0xc, {0xc, 0x4, "fb5425acd1db41c54d8d"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000000640)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x4, 0x3, "5173c404", "1644d67b"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0x1, 0x40, 0x8c, 0x1, 0x66a}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000740)={0x37c61e00fafab45e, 0x5, 0x38, "f6537702ea686b4aec62d68c8b4fd2d8ba83c53304c061e94300fd4a0bdcb5b1aacac51aab5c57cb67e0869f7ac03756b0e2190924564771"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x1, 0x20, [0xf0f0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000900)={0x40, 0xb, 0x2, '\"Q'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000980)={0x40, 0x13, 0x6, @remote}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "2817"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x56de}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x5}}) (async) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) (async) 06:31:12 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x348, 0x0, 0x2000000000000012) 06:31:12 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x384, 0x0, 0x2000000000000012) 06:31:12 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x384, 0x0, 0x0, 0x2000000000000012) [ 3225.125226][T12924] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 3225.145174][T18058] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 3225.505965][T12924] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3225.542008][T12924] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3225.565324][T18058] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3225.601250][T18058] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3225.624820][T12924] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3225.691525][T18058] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3225.707395][T12924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:31:13 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x3a2, 0x0, 0x0, 0x2000000000000012) [ 3225.748797][T18058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:31:13 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x3a2, 0x0, 0x2000000000000012) 06:31:13 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x366, 0x0, 0x2000000000000012) [ 3226.266182][T19779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3226.302564][T19779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3226.310938][T18058] wacom 0003:056A:0331.00C2: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3226.497521][T19783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3226.525260][T12924] usbhid 1-1:17.0: can't add hid device: -71 [ 3226.531707][T12924] usbhid: probe of 1-1:17.0 failed with error -71 [ 3226.543160][T19783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3226.596743][T12924] usb 1-1: USB disconnect, device number 47 06:31:14 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x3c0, 0x0, 0x0, 0x2000000000000012) 06:31:14 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x3c0, 0x0, 0x2000000000000012) 06:31:14 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x384, 0x0, 0x2000000000000012) [ 3226.804523][T19783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3226.840444][T19783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3227.100067][T19783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3227.112524][T19783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3227.175909][T12924] usb 6-1: USB disconnect, device number 109 06:31:22 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x801c581f, 0x0) 06:31:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:31:22 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000240)={0x5eeeac83c242c02b, 0x1, 0x96, {0x96, 0x31, "124b65f6ee636be344b9401c350aac22ae30e08330019681c48e3700a9b1f40d71404a81e5baae51b009733ea8d429264ac3d688f0308b20140f8abe63e4b41da6ffc2a8821c766f68f079c2523068502b963f8bcff6ff261a9bad687dec0853a11933d31d0d4ac260540165076a006af33a1073e74cc73640517864cdf4b8f419b26f0f90422071e8d0cecb7ad94ebb3b199fe3"}}, &(0x7f0000000040)={0x0, 0x3, 0x12, @string={0x12, 0x3, "b88f8d7132b253d432f08d9c7d428b5c"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000300)={0x20, 0x2e, 0xe8, "44aa847e2b617588df12ca3a29d1eec9f1d39df31e6b4d3af97803a6fac2de530497836db1df0a679507a46c0ccd78beb478ac5fe7ef8a6d25ce9f252f49f5e668f3c7535ccb1110956c24b146c9596029e53c52f58a917c6819eacdcedaa590112391a3ebcf850671fabd5cd8c6fc8a0b176a65d4b430497a6fa5e224ebaf7668cd896176b3145e5a956f3041f4d0b27356e3391460a0c123712dd065060ea16ed3785a346e049f6c00a6ebc874feaeee79a45a262ce4ac3c14d549178bbb649b98b4cccb5baa3aeee9f62c57870a6a7e78fe23d0053a5eeae156b4dec67d8612011742b54e0072"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000180)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0xc2, {0xc0, "7cd574f43f053a1f3bf7bbb8ff174e6162851d41f25cc9c5480c786a2577495128ead92b21db1c6b765d7b10be6502965658a1425bdf034344797e55f9b9ad4b62ab4c920679b9ee5227e4295139bb865d65dc3da99baec259669d9c134f5fce23bfd8242defaebf45efef75eac022e295d3958f55d5e66c8d804daf520f5562e0411590b24792870974a7104d850fe82a4caafe9cffde4b672b1cdc14acc4f2c560c45083d29b253989f38f8cede6360fd0a2a6a22e66e6ca9cd86f7c294f41"}}, &(0x7f00000001c0)={0x20, 0x1, 0x1, 0x7f}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_disconnect(r3) syz_usb_control_io(r3, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)={0x20, 0xe, 0xc, {0xc, 0x4, "fb5425acd1db41c54d8d"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000000640)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x4, 0x3, "5173c404", "1644d67b"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x8, 0x1, 0x40, 0x8c, 0x1, 0x66a}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000740)={0x37c61e00fafab45e, 0x5, 0x38, "f6537702ea686b4aec62d68c8b4fd2d8ba83c53304c061e94300fd4a0bdcb5b1aacac51aab5c57cb67e0869f7ac03756b0e2190924564771"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0x1, 0x20, [0xf0f0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000900)={0x40, 0xb, 0x2, '\"Q'}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000980)={0x40, 0x13, 0x6, @remote}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, &(0x7f0000000a00)={0x40, 0x19, 0x2, "2817"}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x56de}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x5}}) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) 06:31:22 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x3de, 0x0, 0x0, 0x2000000000000012) 06:31:22 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x3de, 0x0, 0x2000000000000012) 06:31:22 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x3a2, 0x0, 0x2000000000000012) [ 3234.126637][T19830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3234.144770][T19830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3234.236203][T19830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3234.276470][T19840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3234.298685][T19830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3234.367179][T19840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3234.375272][T10656] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 3234.415344][T12924] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 3234.594960][T19830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3234.638047][T19830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3234.755612][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3234.785378][T12924] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3234.812461][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3234.850698][T12924] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 06:31:23 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x3fc, 0x0, 0x2000000000000012) [ 3234.957123][T10656] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3234.985734][T12924] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 06:31:23 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x3c0, 0x0, 0x2000000000000012) 06:31:23 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x3fc, 0x0, 0x0, 0x2000000000000012) [ 3235.023296][T10656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3235.053644][T12924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3235.445282][T10656] usbhid 6-1:17.0: can't add hid device: -71 [ 3235.451870][T10656] usbhid: probe of 6-1:17.0 failed with error -71 [ 3235.540288][T10656] usb 6-1: USB disconnect, device number 110 [ 3235.624212][T12924] wacom 0003:056A:0331.00C3: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 3235.822896][T12924] usb 1-1: USB disconnect, device number 48 06:31:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, &(0x7f0000000580)={0x24, &(0x7f0000001400)={0x0, 0x22, 0xec, {0xec, 0x6, "54fd06e85cbf34d5dd6c5a41ce2049ccc4ea2c71dfd08514ec82e72390bb4392c045f8a88a08c65966654f44a76bad55951ba3425965ac951ac5fb60bace1305d5727d9335ca4d52ee590ee06aaed28aa9df97a157f8df54b8c1fb04d3fa3adc088fe17434979a4efb61285b740cbc02c798439962c28ab5a0bce767586a028de1630768d7d1f1edb20f89580346fe90a10866b77339a382c79c48a08babe2ee8360d34cf894ee82dfc0b50fadd8472600cd4c112e65de0e518aed79f9052cc6b0232aea1a64f24f519df8660fffab6f47abe150a4be79f25d2ec43ebb3b97726c058417611bc2905614"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000280)={0x0, 0x22, 0x7, {[@local=@item_012={0x0, 0x2, 0x5}, @global, @local=@item_4={0x3, 0x2, 0x5, "d9bdcd1f"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xff, 0x1, {0x22, 0x486}}}}, &(0x7f0000001740)={0x2c, &(0x7f0000001500)={0x40, 0x14, 0x5d, "44032e81cbeaf7526824d2408d948bb50d4d559ed061a64eb95f7e062116386125ab3a9d6c45a5d2df486d8d18e3631afb285e79ac6caded8c515b3d12f61e56d0d97f6904109ad6dae4e08feb5738dff8f689a621c4ebd4a479cc42ed"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000001600)={0x20, 0x1, 0xdd, "46c3ede6f9bb6c9a066333c0779565f8e52d7d4d0f013e88f7e8954116d823e3d42107b6938e6a76e9fb4515fff683047e7ea5ae74c449035731cae9bc63ce377dad093ef77206ed266b0314187278b2de5f05b8778629f3f330d917909af1f42007a1fcdfd8101b86b846e25b656f484e3abd9f660d52accc6cdf98032a80447835a49a477fc792d0f38d30e2c37cc64262eaa67fd3b0cd6226e2e01a40dffc0450b507708fa55778cb01e8e77341cbc8d972aa08d5fb5a6d430e0653876f19f2b623b123fa2b7a7baf4ba2ae5c392c2fdfe654d0597df1c1da0e387f"}, &(0x7f0000001700)={0x20, 0x3, 0x1, 0x43}}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000840)={0x40, 0x348d90f529620888, 0xd1, {0xd1, 0x22, "5902e1e3eb1333760141d93c3a28d1b3adb83c3504e7937b7d77270302306e243af5fa9660de9b04b22d7a544bb9469e1ffeb5f7a86c1b986c95b97dc48110d443a9b48f84b601147cb1b837d71d34e96727ae8d4411354e877674502c87d91076722c691e2e0934a893ad4720ee4511937d600540e8870a44e6824b2947e82182a57c10f69931f4567e4e799260b4d154b18fd19e526f13936e5ef4468d73ae02c583308cf4076d8c1ca9d467f229968099d02576ff5eefe86a61b7b25284b32b604b53942a3fb6908888a911f5c9"}}, &(0x7f0000000a40)={0x0, 0x3, 0x89, @string={0x89, 0x3, "38537cfc9a45e99cabb0c5831f6615afcb6f7f7e86957fd9aa29b79261c9942f623115f9d091d0bc85ecc87856055b985ac1fd5605d241ed4571ea9fc04fea78b948cf346b946c015256e13c34eb81e9e87189df8bede931f6b838d58c20ef45349e5c0acd3de35af4acf7b1a19bb2898e65190347edb0fd12be24eae327c92d56c71cdefd40c3"}}, &(0x7f0000000a00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x3f, 0x8, "16841373", "652465b4"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x11, 0x5, 0x3, 0x3f, 0xfffc}}}, &(0x7f0000001040)={0x84, &(0x7f0000000c00)={0x20, 0x11, 0x46, "ee5d2283ed3530ed6f8bffe02830326a39e139c0d4d766742cbce435f5a2ccce1cbe1e22ed3d5a2e41b5919c5a8fdcf2a33aed35bff6a5f3807d72e00dec23a5cfd0a2381054"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d00)={0x20, 0x0, 0x4}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0xfa4e}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000e00)={0x40, 0xb, 0x2, 'oy'}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001100)={0x40, 0x17, 0x6, @random="000600e100"}, &(0x7f0000000f00)={0x40, 0x19, 0x2}, &(0x7f0000001280)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0xad}}) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000012c0)={0x0, 0x8, 0x102, {0x102, 0x7, "2bdbec6f4969d88ceb6613ec601b78f65c3ec86ce61dc7d6df8c2a76f7183346402b38200b3416c6166f25d38edbed138c762749a5efbd485abc2dd86cb7689f1316eaa07d46b5e96de7e12eec8ceaa386d9463409bd5297e03c2ad551a590d20300000000000000a63cff38b2f000000000000000000000000000004000f8f662c45be4f8721422831893adef0fccd01a9efd89434366a9a1f3ad07851c1b54e78b80be9fb0ec053dbb6732b679f7bb2feb6821f2f56a415c2f3e23cbc5133cd15b7ea47d1c125920442b2063dcb9a0918c7768fc7c8ef173a776f3d1f3cbdc497ea727d3de533498c281fc3ba922af6b722c0d3d85f6a643c854d83a94086e"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x7, 0x9, "f3b60867", "4b9e3e7e"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb7, 0x0, 0x57, 0x81, 0x2, 0x9, 0x4}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x9, 0x5f, "2b5647654f3b5c315145feddd98243595802ac35ddbab91feb28fcf90751eea7859ac0045c19f8819dc1cf5853184fd1a8cbb6ba260dd6a06ce6b25b4660394603f7c7034488eb5e93cc2aa837835b6a40c2c850d17ceabc1da310d3417cf6"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0xa0, 0x2, [0xff0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000500)={0x40, 0xb, 0x2, "00f4"}, &(0x7f0000000380)={0x40, 0xf, 0x2, 0x100}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "b5ca"}, &(0x7f0000000680)={0x40, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x30}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xee}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000ec0)={0x14, &(0x7f0000000940)={0x40, 0x23, 0x9e, {0x9e, 0x5, "43bb6fea0b2e0230548e97f42f0c4a5ba8c6e10e09ddc1ed491ec91b731a4f97e87068c5b09057806a9c55c382b309e8363c4026f3e416e6a7ccd6ca772f417eaeb9ff52dbf0e9296b4ad93578bc347d4e2a2e9d70faf0f90c40dc5b9745ffdc06a95913ab60e355bd516fe662706badb0abf3cc9f534678ba88c9d99d5a6b75b5342b3b6ec9117cb419e076dee573c127158f4934b561916bba0170"}}, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001240)={0x1c, &(0x7f0000001140)={0x423e33e6469cae9e, 0x6, 0x51, "a61e8633ff92b3cb05e49b05f4635e7f307ba990bfb791e1b4fec465f823760b35a4a5220a726973e2348da868d1aa6d8858ec1d9cfe86615a55f163d8a1d0da26595ab2a4de02345fa6a4e3d877deb34d"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x77}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x5}}) 06:31:24 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x40b, 0x0, 0x2000000000000012) 06:31:24 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x3de, 0x0, 0x2000000000000012) [ 3236.175266][T10656] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 3236.535416][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3236.577168][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3236.635661][T10656] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3236.688873][T10656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3237.218886][T10656] wacom 0003:056A:0331.00C4: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3237.420693][T19859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3237.431013][T19859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3238.475173][T18058] usb 6-1: reset high-speed USB device number 111 using dummy_hcd [ 3238.665172][T18058] usb 6-1: device descriptor read/64, error 64 [ 3238.935193][T18058] usb 6-1: reset high-speed USB device number 111 using dummy_hcd [ 3239.125180][T18058] usb 6-1: device descriptor read/64, error 64 [ 3240.067456][T12924] usb 6-1: USB disconnect, device number 111 [ 3246.885137][ T5171] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 3247.285303][ T5171] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3247.296548][ T5171] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3247.306893][ T5171] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3247.316305][ T5171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3247.786901][T19871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3247.797154][T19871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3247.832548][ T5171] wacom 0003:056A:0331.00C5: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3248.031295][T18058] usb 4-1: USB disconnect, device number 53 06:31:36 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x90044802, 0x0) 06:31:36 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:31:36 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x40b, 0x0, 0x0, 0x2000000000000012) 06:31:36 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x41a, 0x0, 0x2000000000000012) 06:31:36 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x3fc, 0x0, 0x2000000000000012) 06:31:36 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_disconnect(r1) (async) syz_usb_disconnect(r1) syz_usb_control_io$hid(r1, &(0x7f0000000580)={0x24, &(0x7f0000001400)={0x0, 0x22, 0xec, {0xec, 0x6, "54fd06e85cbf34d5dd6c5a41ce2049ccc4ea2c71dfd08514ec82e72390bb4392c045f8a88a08c65966654f44a76bad55951ba3425965ac951ac5fb60bace1305d5727d9335ca4d52ee590ee06aaed28aa9df97a157f8df54b8c1fb04d3fa3adc088fe17434979a4efb61285b740cbc02c798439962c28ab5a0bce767586a028de1630768d7d1f1edb20f89580346fe90a10866b77339a382c79c48a08babe2ee8360d34cf894ee82dfc0b50fadd8472600cd4c112e65de0e518aed79f9052cc6b0232aea1a64f24f519df8660fffab6f47abe150a4be79f25d2ec43ebb3b97726c058417611bc2905614"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000280)={0x0, 0x22, 0x7, {[@local=@item_012={0x0, 0x2, 0x5}, @global, @local=@item_4={0x3, 0x2, 0x5, "d9bdcd1f"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xff, 0x1, {0x22, 0x486}}}}, &(0x7f0000001740)={0x2c, &(0x7f0000001500)={0x40, 0x14, 0x5d, "44032e81cbeaf7526824d2408d948bb50d4d559ed061a64eb95f7e062116386125ab3a9d6c45a5d2df486d8d18e3631afb285e79ac6caded8c515b3d12f61e56d0d97f6904109ad6dae4e08feb5738dff8f689a621c4ebd4a479cc42ed"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000001600)={0x20, 0x1, 0xdd, "46c3ede6f9bb6c9a066333c0779565f8e52d7d4d0f013e88f7e8954116d823e3d42107b6938e6a76e9fb4515fff683047e7ea5ae74c449035731cae9bc63ce377dad093ef77206ed266b0314187278b2de5f05b8778629f3f330d917909af1f42007a1fcdfd8101b86b846e25b656f484e3abd9f660d52accc6cdf98032a80447835a49a477fc792d0f38d30e2c37cc64262eaa67fd3b0cd6226e2e01a40dffc0450b507708fa55778cb01e8e77341cbc8d972aa08d5fb5a6d430e0653876f19f2b623b123fa2b7a7baf4ba2ae5c392c2fdfe654d0597df1c1da0e387f"}, &(0x7f0000001700)={0x20, 0x3, 0x1, 0x43}}) (async) syz_usb_control_io$hid(r1, &(0x7f0000000580)={0x24, &(0x7f0000001400)={0x0, 0x22, 0xec, {0xec, 0x6, "54fd06e85cbf34d5dd6c5a41ce2049ccc4ea2c71dfd08514ec82e72390bb4392c045f8a88a08c65966654f44a76bad55951ba3425965ac951ac5fb60bace1305d5727d9335ca4d52ee590ee06aaed28aa9df97a157f8df54b8c1fb04d3fa3adc088fe17434979a4efb61285b740cbc02c798439962c28ab5a0bce767586a028de1630768d7d1f1edb20f89580346fe90a10866b77339a382c79c48a08babe2ee8360d34cf894ee82dfc0b50fadd8472600cd4c112e65de0e518aed79f9052cc6b0232aea1a64f24f519df8660fffab6f47abe150a4be79f25d2ec43ebb3b97726c058417611bc2905614"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000280)={0x0, 0x22, 0x7, {[@local=@item_012={0x0, 0x2, 0x5}, @global, @local=@item_4={0x3, 0x2, 0x5, "d9bdcd1f"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xff, 0x1, {0x22, 0x486}}}}, &(0x7f0000001740)={0x2c, &(0x7f0000001500)={0x40, 0x14, 0x5d, "44032e81cbeaf7526824d2408d948bb50d4d559ed061a64eb95f7e062116386125ab3a9d6c45a5d2df486d8d18e3631afb285e79ac6caded8c515b3d12f61e56d0d97f6904109ad6dae4e08feb5738dff8f689a621c4ebd4a479cc42ed"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000001600)={0x20, 0x1, 0xdd, "46c3ede6f9bb6c9a066333c0779565f8e52d7d4d0f013e88f7e8954116d823e3d42107b6938e6a76e9fb4515fff683047e7ea5ae74c449035731cae9bc63ce377dad093ef77206ed266b0314187278b2de5f05b8778629f3f330d917909af1f42007a1fcdfd8101b86b846e25b656f484e3abd9f660d52accc6cdf98032a80447835a49a477fc792d0f38d30e2c37cc64262eaa67fd3b0cd6226e2e01a40dffc0450b507708fa55778cb01e8e77341cbc8d972aa08d5fb5a6d430e0653876f19f2b623b123fa2b7a7baf4ba2ae5c392c2fdfe654d0597df1c1da0e387f"}, &(0x7f0000001700)={0x20, 0x3, 0x1, 0x43}}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000840)={0x40, 0x348d90f529620888, 0xd1, {0xd1, 0x22, "5902e1e3eb1333760141d93c3a28d1b3adb83c3504e7937b7d77270302306e243af5fa9660de9b04b22d7a544bb9469e1ffeb5f7a86c1b986c95b97dc48110d443a9b48f84b601147cb1b837d71d34e96727ae8d4411354e877674502c87d91076722c691e2e0934a893ad4720ee4511937d600540e8870a44e6824b2947e82182a57c10f69931f4567e4e799260b4d154b18fd19e526f13936e5ef4468d73ae02c583308cf4076d8c1ca9d467f229968099d02576ff5eefe86a61b7b25284b32b604b53942a3fb6908888a911f5c9"}}, &(0x7f0000000a40)={0x0, 0x3, 0x89, @string={0x89, 0x3, "38537cfc9a45e99cabb0c5831f6615afcb6f7f7e86957fd9aa29b79261c9942f623115f9d091d0bc85ecc87856055b985ac1fd5605d241ed4571ea9fc04fea78b948cf346b946c015256e13c34eb81e9e87189df8bede931f6b838d58c20ef45349e5c0acd3de35af4acf7b1a19bb2898e65190347edb0fd12be24eae327c92d56c71cdefd40c3"}}, &(0x7f0000000a00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x3f, 0x8, "16841373", "652465b4"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x11, 0x5, 0x3, 0x3f, 0xfffc}}}, &(0x7f0000001040)={0x84, &(0x7f0000000c00)={0x20, 0x11, 0x46, "ee5d2283ed3530ed6f8bffe02830326a39e139c0d4d766742cbce435f5a2ccce1cbe1e22ed3d5a2e41b5919c5a8fdcf2a33aed35bff6a5f3807d72e00dec23a5cfd0a2381054"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d00)={0x20, 0x0, 0x4}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0xfa4e}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000e00)={0x40, 0xb, 0x2, 'oy'}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001100)={0x40, 0x17, 0x6, @random="000600e100"}, &(0x7f0000000f00)={0x40, 0x19, 0x2}, &(0x7f0000001280)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0xad}}) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000012c0)={0x0, 0x8, 0x102, {0x102, 0x7, "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"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x7, 0x9, "f3b60867", "4b9e3e7e"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb7, 0x0, 0x57, 0x81, 0x2, 0x9, 0x4}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x9, 0x5f, "2b5647654f3b5c315145feddd98243595802ac35ddbab91feb28fcf90751eea7859ac0045c19f8819dc1cf5853184fd1a8cbb6ba260dd6a06ce6b25b4660394603f7c7034488eb5e93cc2aa837835b6a40c2c850d17ceabc1da310d3417cf6"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0xa0, 0x2, [0xff0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000500)={0x40, 0xb, 0x2, "00f4"}, &(0x7f0000000380)={0x40, 0xf, 0x2, 0x100}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "b5ca"}, &(0x7f0000000680)={0x40, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x30}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xee}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000ec0)={0x14, &(0x7f0000000940)={0x40, 0x23, 0x9e, {0x9e, 0x5, "43bb6fea0b2e0230548e97f42f0c4a5ba8c6e10e09ddc1ed491ec91b731a4f97e87068c5b09057806a9c55c382b309e8363c4026f3e416e6a7ccd6ca772f417eaeb9ff52dbf0e9296b4ad93578bc347d4e2a2e9d70faf0f90c40dc5b9745ffdc06a95913ab60e355bd516fe662706badb0abf3cc9f534678ba88c9d99d5a6b75b5342b3b6ec9117cb419e076dee573c127158f4934b561916bba0170"}}, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001240)={0x1c, &(0x7f0000001140)={0x423e33e6469cae9e, 0x6, 0x51, "a61e8633ff92b3cb05e49b05f4635e7f307ba990bfb791e1b4fec465f823760b35a4a5220a726973e2348da868d1aa6d8858ec1d9cfe86615a55f163d8a1d0da26595ab2a4de02345fa6a4e3d877deb34d"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x77}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x5}}) [ 3248.835245][T18716] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 3248.843019][ T5171] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 3249.215410][T18716] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3249.226640][ T5171] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3249.245325][ T5171] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3249.245705][T18716] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3249.279636][T18716] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3249.289313][T18716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3249.305551][ T5171] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3249.315974][ T5171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:31:37 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x438, 0x0, 0x2000000000000012) 06:31:37 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x40b, 0x0, 0x2000000000000012) 06:31:37 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x41a, 0x0, 0x0, 0x2000000000000012) [ 3249.808532][T18716] wacom 0003:056A:0331.00C6: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3249.865217][ T5171] usbhid 1-1:17.0: can't add hid device: -71 [ 3249.877290][ T5171] usbhid: probe of 1-1:17.0 failed with error -71 [ 3249.964867][ T5171] usb 1-1: USB disconnect, device number 49 [ 3250.127979][T19881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3250.157933][T19881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:31:38 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:31:38 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x456, 0x0, 0x2000000000000012) 06:31:38 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x438, 0x0, 0x0, 0x2000000000000012) [ 3250.430041][T15505] usb 6-1: USB disconnect, device number 112 [ 3250.665407][T18058] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 3251.075479][T18058] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3251.108057][T18058] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3251.138274][T18058] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3251.164516][T18058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3251.755366][T18058] usbhid 1-1:17.0: can't add hid device: -71 [ 3251.761563][T18058] usbhid: probe of 1-1:17.0 failed with error -71 [ 3251.769922][T18058] usb 1-1: USB disconnect, device number 50 06:31:47 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0xc0045878, 0x0) 06:31:47 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x41a, 0x0, 0x2000000000000012) 06:31:47 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x474, 0x0, 0x2000000000000012) 06:31:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_disconnect(r1) (async) syz_usb_control_io$hid(r1, &(0x7f0000000580)={0x24, &(0x7f0000001400)={0x0, 0x22, 0xec, {0xec, 0x6, "54fd06e85cbf34d5dd6c5a41ce2049ccc4ea2c71dfd08514ec82e72390bb4392c045f8a88a08c65966654f44a76bad55951ba3425965ac951ac5fb60bace1305d5727d9335ca4d52ee590ee06aaed28aa9df97a157f8df54b8c1fb04d3fa3adc088fe17434979a4efb61285b740cbc02c798439962c28ab5a0bce767586a028de1630768d7d1f1edb20f89580346fe90a10866b77339a382c79c48a08babe2ee8360d34cf894ee82dfc0b50fadd8472600cd4c112e65de0e518aed79f9052cc6b0232aea1a64f24f519df8660fffab6f47abe150a4be79f25d2ec43ebb3b97726c058417611bc2905614"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000280)={0x0, 0x22, 0x7, {[@local=@item_012={0x0, 0x2, 0x5}, @global, @local=@item_4={0x3, 0x2, 0x5, "d9bdcd1f"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xff, 0x1, {0x22, 0x486}}}}, &(0x7f0000001740)={0x2c, &(0x7f0000001500)={0x40, 0x14, 0x5d, "44032e81cbeaf7526824d2408d948bb50d4d559ed061a64eb95f7e062116386125ab3a9d6c45a5d2df486d8d18e3631afb285e79ac6caded8c515b3d12f61e56d0d97f6904109ad6dae4e08feb5738dff8f689a621c4ebd4a479cc42ed"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0xe0}, &(0x7f0000001600)={0x20, 0x1, 0xdd, "46c3ede6f9bb6c9a066333c0779565f8e52d7d4d0f013e88f7e8954116d823e3d42107b6938e6a76e9fb4515fff683047e7ea5ae74c449035731cae9bc63ce377dad093ef77206ed266b0314187278b2de5f05b8778629f3f330d917909af1f42007a1fcdfd8101b86b846e25b656f484e3abd9f660d52accc6cdf98032a80447835a49a477fc792d0f38d30e2c37cc64262eaa67fd3b0cd6226e2e01a40dffc0450b507708fa55778cb01e8e77341cbc8d972aa08d5fb5a6d430e0653876f19f2b623b123fa2b7a7baf4ba2ae5c392c2fdfe654d0597df1c1da0e387f"}, &(0x7f0000001700)={0x20, 0x3, 0x1, 0x43}}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000840)={0x40, 0x348d90f529620888, 0xd1, {0xd1, 0x22, "5902e1e3eb1333760141d93c3a28d1b3adb83c3504e7937b7d77270302306e243af5fa9660de9b04b22d7a544bb9469e1ffeb5f7a86c1b986c95b97dc48110d443a9b48f84b601147cb1b837d71d34e96727ae8d4411354e877674502c87d91076722c691e2e0934a893ad4720ee4511937d600540e8870a44e6824b2947e82182a57c10f69931f4567e4e799260b4d154b18fd19e526f13936e5ef4468d73ae02c583308cf4076d8c1ca9d467f229968099d02576ff5eefe86a61b7b25284b32b604b53942a3fb6908888a911f5c9"}}, &(0x7f0000000a40)={0x0, 0x3, 0x89, @string={0x89, 0x3, "38537cfc9a45e99cabb0c5831f6615afcb6f7f7e86957fd9aa29b79261c9942f623115f9d091d0bc85ecc87856055b985ac1fd5605d241ed4571ea9fc04fea78b948cf346b946c015256e13c34eb81e9e87189df8bede931f6b838d58c20ef45349e5c0acd3de35af4acf7b1a19bb2898e65190347edb0fd12be24eae327c92d56c71cdefd40c3"}}, &(0x7f0000000a00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x3f, 0x8, "16841373", "652465b4"}}, &(0x7f0000000b80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x2, 0x11, 0x5, 0x3, 0x3f, 0xfffc}}}, &(0x7f0000001040)={0x84, &(0x7f0000000c00)={0x20, 0x11, 0x46, "ee5d2283ed3530ed6f8bffe02830326a39e139c0d4d766742cbce435f5a2ccce1cbe1e22ed3d5a2e41b5919c5a8fdcf2a33aed35bff6a5f3807d72e00dec23a5cfd0a2381054"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d00)={0x20, 0x0, 0x4}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0xfa4e}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000e00)={0x40, 0xb, 0x2, 'oy'}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001100)={0x40, 0x17, 0x6, @random="000600e100"}, &(0x7f0000000f00)={0x40, 0x19, 0x2}, &(0x7f0000001280)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0xad}}) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) (async) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f00000012c0)={0x0, 0x8, 0x102, {0x102, 0x7, "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"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}, &(0x7f00000000c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x0, 0x7, 0x9, "f3b60867", "4b9e3e7e"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb7, 0x0, 0x57, 0x81, 0x2, 0x9, 0x4}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x9, 0x5f, "2b5647654f3b5c315145feddd98243595802ac35ddbab91feb28fcf90751eea7859ac0045c19f8819dc1cf5853184fd1a8cbb6ba260dd6a06ce6b25b4660394603f7c7034488eb5e93cc2aa837835b6a40c2c850d17ceabc1da310d3417cf6"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0xa0, 0x2, [0xff0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x3ff}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000500)={0x40, 0xb, 0x2, "00f4"}, &(0x7f0000000380)={0x40, 0xf, 0x2, 0x100}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "b5ca"}, &(0x7f0000000680)={0x40, 0x1a, 0x2}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x30}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xee}}) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000ec0)={0x14, &(0x7f0000000940)={0x40, 0x23, 0x9e, {0x9e, 0x5, "43bb6fea0b2e0230548e97f42f0c4a5ba8c6e10e09ddc1ed491ec91b731a4f97e87068c5b09057806a9c55c382b309e8363c4026f3e416e6a7ccd6ca772f417eaeb9ff52dbf0e9296b4ad93578bc347d4e2a2e9d70faf0f90c40dc5b9745ffdc06a95913ab60e355bd516fe662706badb0abf3cc9f534678ba88c9d99d5a6b75b5342b3b6ec9117cb419e076dee573c127158f4934b561916bba0170"}}, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001240)={0x1c, &(0x7f0000001140)={0x423e33e6469cae9e, 0x6, 0x51, "a61e8633ff92b3cb05e49b05f4635e7f307ba990bfb791e1b4fec465f823760b35a4a5220a726973e2348da868d1aa6d8858ec1d9cfe86615a55f163d8a1d0da26595ab2a4de02345fa6a4e3d877deb34d"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0x77}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x5}}) 06:31:47 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x456, 0x0, 0x0, 0x2000000000000012) 06:31:47 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) [ 3260.215177][T15505] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 3260.225221][T10411] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 3260.595339][T10411] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3260.630877][T10411] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3260.655360][T15505] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3260.688855][T15505] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3260.699157][T10411] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3260.708457][T10411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3260.752462][T15505] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 06:31:48 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x492, 0x0, 0x2000000000000012) 06:31:48 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x438, 0x0, 0x2000000000000012) 06:31:48 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x474, 0x0, 0x0, 0x2000000000000012) [ 3260.844508][T15505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3261.238809][T19949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3261.264413][T10411] wacom 0003:056A:0331.00C7: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3261.296561][T19949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:31:49 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r2 = syz_usb_connect$uac1(0x3, 0xd4, &(0x7f0000002040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x2, 0xb0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x2, 0x1f, 0x8, 0xe1, 0x73}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x2, 0x3, [0x1, 0x5, 0x4], 0x2}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x20, 0x7, "6f46894c"}, @extension_unit={0x8, 0x24, 0x8, 0x1, 0xfff8, 0x7, "ba"}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x5, 0x0, "5e5ce7"}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x6, 0x6, [0x6, 0x7, 0x9, 0x8, 0x5, 0x5], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3f, 0x0, 0x7, "a7062841"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x7f, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x50, 0x800, 0x7f, "0d6c1ba0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x23, 0x3, 0x6, {0x7, 0x25, 0x1, 0x0, 0x1f, 0x7}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x110, 0x0, 0x80, 0x92, 0xff, 0x1}, 0x1d4, &(0x7f0000001540)={0x5, 0xf, 0x1d4, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x7f, 0x3, 0x4}, @generic={0xea, 0x10, 0x4, "2e5c108d1fba0985dc208b6f5d9c444ca932936c3c8f3fe3709fa712e983163a0065df6f33ec48495f39d359c207df536f5b614a179d93b23b982579f2197d137ffcf2c24881034fe754d4bf3cf50dcd945b4ad679426a2718673c3f6fa0cdc6f26a2177694db2d77f8e9bed83c80827ee5544ab4abffe89f4bb6a24e3a65db76c9c4a526fa2eba274e950e5f55b9e91c70ca4d6bce086dabf79f1f2de788fde2070e6144be7b7c3138702d407e2b6dc7a460e9eef27b4a1d5be5f50bb8e62242403d26226b26ff6757888e8273a4ab655164bf23fc52aaaa2dbf21b7bf07a6c3f0919403d5191"}, @generic={0xb3, 0x10, 0x1, "4e321087e5fac3571060d98e0dd6833404fd115a17e92b2bbccfba91b119dfc9012b91865e325dcbe3cda2af22d4053ae94b3ff9598c10659073558920003d715fac1fe5ac85a233d1953343f3f6b05b96b1496f47a0d57d7969c41fcfc1ac02c5092539375fcd67f4615e63c5910b3bc4c4e7baa6bd7dae3e63d97e125ea8b5ccba53345c5d4e404dcd8c4a84ac0a4096ca161a0810f3f7cdc0d2531d7b351d01c1063b0ef3b6a1833bc0bb776f32e3"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "5b482b3dfb86867eb81f887d8356b336"}, @ss_container_id={0x14, 0x10, 0x4, 0xc1, "3f326d82c3545900c6144fcc646f7c66"}]}, 0x1, [{0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x449}}]}) syz_usb_control_io(r2, &(0x7f0000001b40)={0x2c, &(0x7f00000017c0)={0x20, 0x8, 0xce, {0xce, 0x8, "0e138dc0d657f4c4c824ccbecc2a24db5bf2570fbf1ad0f6f64894759a593f296f9c7b422ecba87dba43abb758b47469a802c494df3a8cf9bcae66098e3d8d2dcce6d76bc9e93044183e77fb0bc76e76411e2355a8c71fa0606f0467af6a6ed430221ab258f169534315edcdc061d657e5f75853f735fd611ede0aec689574e3b5319ac36749a5989f86a1e50c8b8b5daff22b6131a5a4a63265e54c4537f8489cfeb4c88490f70588d7107ff86d7dff78477899a20a23a000c2856aac9b544c71224100e7d1088bb58fd6a9"}}, &(0x7f00000018c0)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "9215ea7c2c804c49146bebf8f6291cdb19b118782f8a7a9b54732391fd327a3f7339ee76c0fd823d8326924f24a37ded9cb561c01c98a76392fa776b4229c2dc54222cb0fe0b969a87831d7a5a8d48005ec5ba367189c76b6ed17c9dd4a4f57f86e76e82f3f5521f9535c732482fe1a8b11b05d130cb0d9b37307abdd33ddc60dd6ebc658d4041a4f2cc84d28efb737453783a3fd4f3dc701b00b6808e346f00c1a978e5b6bd4c20e6c40fa1c59bbfa324f0b2e0079b8ed474682beca507d38fd4164748097c772dd2ca94dbbde7220ff8617201"}}, &(0x7f00000019c0)={0x0, 0xf, 0xee, {0x5, 0xf, 0xee, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xa3, 0x21, 0x8}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x200, 0xf00, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "88662d132bdde254c00b2fd00db65b10"}, @generic={0xa9, 0x10, 0x1, "02a7efa858cb68c02119d5a35b9c761a39b7745298e31e87b21e753665941b878fae73536596619cd3e9dfc909afc66752580d98f4eaa90a7311864c0b8b9740c8e52a710087c007e1dbd1155ab0f42750e6b580d7053e9a8feda4354cf0ee9d45145a52096571b198aff76a5666cb6337540fcae92404909a0fc0b8a40b7c04d7448e33778fcc9d1cc4162f44c268b9cfec6c01573c3b7ef6687ad3d4ba6740e030784d95b5"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1c, 0x3, 0x4, 0x3d, 0x3f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x0, 0x20, 0x3, 0x84}]}}, &(0x7f0000001ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x4, 0x6, "91aad950", "e4c7db08"}}, &(0x7f0000001b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x3, 0x4, 0x4, 0x9, 0x5, 0xdd3}}}, &(0x7f0000001f80)={0x84, &(0x7f0000001b80)={0x40, 0x14, 0x38, "024c94ca12fba52260dedf82e38733485dcd9c7043008c7ec585b688e3adaf83ae5357067e4e03f76656e76d7f5de46a00b605d1166712a1"}, &(0x7f0000001bc0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001c00)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001c40)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000001c80)={0x20, 0x0, 0x8, {0x200, 0x1, [0xf000]}}, &(0x7f0000001cc0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001d00)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001d40)={0x40, 0xb, 0x2, "b9f2"}, &(0x7f0000001d80)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000001dc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001e00)={0x40, 0x17, 0x6, @random="d0c774000200"}, &(0x7f0000001e40)={0x40, 0x19, 0x2, "c353"}, &(0x7f0000001e80)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000001ec0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001f00)={0x40, 0x1e, 0x1, 0x25}, &(0x7f0000001f40)={0x40, 0x21, 0xfffffd7c, 0x1}}) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, &(0x7f0000000a40)={0x24, &(0x7f0000000880)={0x40, 0x10, 0xeb, {0xeb, 0x24, "6df9be991a2e061de15f91d36554b6fdcda716a2c3937378d04a0cfc0a6d71cb626dfff3f8cf74b969d369db1dcc9e9950c7b1558e3094fe7a06cfaadbf7ab720ce74f9f2cc9362dc02c3470ddf2b471b648ae340f02b9afeb92fe6fee1d9c037ac6584519e5c3061eb2cb371240ec32ae9a7bc41d63b98efdd58e0a49c2134a56f8718ef8d0221e2e46a9c77e749c76e3b68a5cc010a01037ae521ccaf35498700bc0bded48549e75a6c988c3c4094626a91e8d1cd4bc87301b425e4b81e88baa3725703fc9135aeb9e1d56da35ffc8fa073387581f49755e7f761f00bdac015efc1f684400f4326a"}}, &(0x7f0000000980)={0x0, 0x3, 0x38, @string={0x38, 0x3, "77fb349ba600c77acc6d243e9a0e3df5eade57ddee364ed0e65c0da408f059a74c2787c11b3555506d5a4e281cddb87f2036dfac1c40"}}, &(0x7f00000009c0)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x9, "de0e"}, @main=@item_012={0x2, 0x0, 0xa, "f2a0"}]}}, &(0x7f0000000a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xf3, 0x1, {0x22, 0xc15}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000a80)={0x0, 0x14, 0x8a, "87fc6e0f22f04ef5b7ec6fba56b464fbb59229c0b0b68976552d637bd2f4fc131b96708d7c13d2e9aad07452c9d75c6b120562ec5b80d3a613534e336980144ae96e22cd486671a5387b8b99fa86f2da9b1c14a468dd071206908b93483254a124df80fdb9ede271b38cb5cba7acdc229bdd5b269f1cb1c2378ec85d0b0e3ac710e15c54b43959b63068"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000bc0)={0x20, 0x1, 0x95, "8bd5f0d81dded4b3ecfd9403192bed45f94a8e8e2d09bcad8d53728bef5b397f50e072f5a1fa5735934c35ba0ec4f5e849fd1af726cea0706bfbf61319ed4935d38c844c39b57f98a04da5ab716c9f1599e1578cda297557719058a85b937541d75d63afbd2c156e84d8bf05fd4894ee1a8c00722cd4d3932785ca1626c4b3e2692fbdb9c752bfd16d80f497bfa4af59ea0f9637e5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000240)={0x40, 0x22, 0xfb, {0xfb, 0x6, "99a4671e113c012036a4873207bcc258cf5e1b703780a776ac177cde3251064c4d489e6eecd67ad66386b5d2d19423c331da9fd4f745dc4a94b7274ffaf985d6981343d0266991a6a70e572b403759ffa18dea7139ee0ab5f60650231972d7f2bb0b25c3579fa923d4039bcc85c78c16a88c8d765560582154805e493b4daf78d8c07dca57da1184c384e6ba8d551ea10155459681b1d1da475a39194fe326422e03d2fee07a6600b508b2e9b9ab2cd99ce408cda41be8f8aec07234992a810c96377be2fc03b358d6b8cb3c467e542176bb363e533046bc4be51acc80e1de7429deda382effc048fd62bac96d4227c117dddf3176c0421e37"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000000c0)={0x0, 0xf, 0xffffffffffffffa7, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3e, 0x9, 0xff01}, @ptm_cap={0x3}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x4, 0x7, 0x6, "b34231dc", "5bcd7957"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x80, 0x81, 0x81, 0x5d, 0x4000, 0x80}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x20, 0x18, 0x7, "8cb3548ab2001a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1000, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000580)={0x40, 0xb, 0x2, "cb22"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xf718}, &(0x7f0000000600)={0x40, 0x13, 0x6}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "ad9c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1a}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x1) syz_usb_control_io(r1, &(0x7f0000000ec0)={0x2c, &(0x7f0000000d00)={0x40, 0x22, 0x89, {0x89, 0x5, "578e1a787e0b452b428a8b5ab2f69e35e53454972e1481e556bc0f07d38dae6487c412de10f9695640a09c63a10d0ba6182ceb8f1fca8a4d2a4b96a2a5a198bd33243e21a647c102807aaad08b553e9518fdaab0609a0393aacc1013f7d48c345c463ded951d1432be5c9a6d46ce5e1c6c5af2328132492906f6a2f8afe11d0f9c824151723419"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, &(0x7f0000000e00)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x7ffff00, 0xf000, 0x79f, [0x3fcf, 0xc090, 0x3f, 0xff30, 0xe8, 0x3f0f]}]}}, &(0x7f0000000e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x80, 0x3f, 0xe3, "98d290d4", "d5338926"}}, &(0x7f0000000e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x4, 0x8, 0x8, 0xcb, 0x101, 0x5}}}, &(0x7f0000001340)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x71, "57adadf01cf13f9dc76222d1915c08d71f4ebfe46d90b0fa77474c4d7d1fd0e0de86974e1afc3bbbd0747abe1f1adf1481cc63ce1ba39f9b6c3eb82d647095329ee395f5bdb4dbd791d01232269a290c020fe31909f1666d46151be6e2766c01f72f79f84eab727d647c9c1add3358e004"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000001040)={0x20, 0x0, 0x8, {0x200, 0x1, [0xfff]}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0xb3fc}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0xfa}, &(0x7f0000001100)={0x40, 0xb, 0x2, "4516"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001180)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000001200)={0x40, 0x19, 0x2, "08b1"}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0xca}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0xfa}}) [ 3261.382027][T10411] usb 6-1: USB disconnect, device number 113 [ 3261.405250][T15505] usbhid 1-1:17.0: can't add hid device: -71 [ 3261.412256][T15505] usbhid: probe of 1-1:17.0 failed with error -71 [ 3261.503757][T15505] usb 1-1: USB disconnect, device number 51 06:31:49 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x456, 0x0, 0x2000000000000012) 06:31:49 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x4b0, 0x0, 0x2000000000000012) 06:31:49 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x492, 0x0, 0x0, 0x2000000000000012) [ 3261.865205][T10411] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 3262.225445][T10411] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3262.268321][T10411] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3262.324423][T10411] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3262.378775][T10411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3262.907689][T19953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3262.917799][T19953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3262.929452][T19953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3262.938220][T19953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3263.168294][T10411] wacom 0003:056A:0331.00C8: item fetching failed at offset 0/1 [ 3263.176462][T10411] wacom 0003:056A:0331.00C8: parse failed [ 3263.182250][T10411] wacom: probe of 0003:056A:0331.00C8 failed with error -22 [ 3264.731361][T12924] usb 6-1: USB disconnect, device number 114 [ 3266.036614][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.042946][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 [ 3270.625132][T10411] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 3271.015212][T10411] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3271.026247][T10411] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3271.036822][T10411] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3271.046749][T10411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:31:59 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0xc0045878, 0x0) 06:31:59 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x400448dd, 0x0) 06:31:59 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x4ce, 0x0, 0x2000000000000012) 06:31:59 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x474, 0x0, 0x2000000000000012) 06:31:59 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x4b0, 0x0, 0x0, 0x2000000000000012) 06:31:59 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) r2 = syz_usb_connect$uac1(0x3, 0xd4, &(0x7f0000002040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x2, 0xb0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x2, 0x1f, 0x8, 0xe1, 0x73}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x2, 0x3, [0x1, 0x5, 0x4], 0x2}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x20, 0x7, "6f46894c"}, @extension_unit={0x8, 0x24, 0x8, 0x1, 0xfff8, 0x7, "ba"}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x5, 0x0, "5e5ce7"}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x6, 0x6, [0x6, 0x7, 0x9, 0x8, 0x5, 0x5], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3f, 0x0, 0x7, "a7062841"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x7f, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x50, 0x800, 0x7f, "0d6c1ba0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x23, 0x3, 0x6, {0x7, 0x25, 0x1, 0x0, 0x1f, 0x7}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x110, 0x0, 0x80, 0x92, 0xff, 0x1}, 0x1d4, &(0x7f0000001540)={0x5, 0xf, 0x1d4, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x7f, 0x3, 0x4}, @generic={0xea, 0x10, 0x4, "2e5c108d1fba0985dc208b6f5d9c444ca932936c3c8f3fe3709fa712e983163a0065df6f33ec48495f39d359c207df536f5b614a179d93b23b982579f2197d137ffcf2c24881034fe754d4bf3cf50dcd945b4ad679426a2718673c3f6fa0cdc6f26a2177694db2d77f8e9bed83c80827ee5544ab4abffe89f4bb6a24e3a65db76c9c4a526fa2eba274e950e5f55b9e91c70ca4d6bce086dabf79f1f2de788fde2070e6144be7b7c3138702d407e2b6dc7a460e9eef27b4a1d5be5f50bb8e62242403d26226b26ff6757888e8273a4ab655164bf23fc52aaaa2dbf21b7bf07a6c3f0919403d5191"}, @generic={0xb3, 0x10, 0x1, "4e321087e5fac3571060d98e0dd6833404fd115a17e92b2bbccfba91b119dfc9012b91865e325dcbe3cda2af22d4053ae94b3ff9598c10659073558920003d715fac1fe5ac85a233d1953343f3f6b05b96b1496f47a0d57d7969c41fcfc1ac02c5092539375fcd67f4615e63c5910b3bc4c4e7baa6bd7dae3e63d97e125ea8b5ccba53345c5d4e404dcd8c4a84ac0a4096ca161a0810f3f7cdc0d2531d7b351d01c1063b0ef3b6a1833bc0bb776f32e3"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "5b482b3dfb86867eb81f887d8356b336"}, @ss_container_id={0x14, 0x10, 0x4, 0xc1, "3f326d82c3545900c6144fcc646f7c66"}]}, 0x1, [{0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x449}}]}) syz_usb_control_io(r2, &(0x7f0000001b40)={0x2c, &(0x7f00000017c0)={0x20, 0x8, 0xce, {0xce, 0x8, "0e138dc0d657f4c4c824ccbecc2a24db5bf2570fbf1ad0f6f64894759a593f296f9c7b422ecba87dba43abb758b47469a802c494df3a8cf9bcae66098e3d8d2dcce6d76bc9e93044183e77fb0bc76e76411e2355a8c71fa0606f0467af6a6ed430221ab258f169534315edcdc061d657e5f75853f735fd611ede0aec689574e3b5319ac36749a5989f86a1e50c8b8b5daff22b6131a5a4a63265e54c4537f8489cfeb4c88490f70588d7107ff86d7dff78477899a20a23a000c2856aac9b544c71224100e7d1088bb58fd6a9"}}, &(0x7f00000018c0)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "9215ea7c2c804c49146bebf8f6291cdb19b118782f8a7a9b54732391fd327a3f7339ee76c0fd823d8326924f24a37ded9cb561c01c98a76392fa776b4229c2dc54222cb0fe0b969a87831d7a5a8d48005ec5ba367189c76b6ed17c9dd4a4f57f86e76e82f3f5521f9535c732482fe1a8b11b05d130cb0d9b37307abdd33ddc60dd6ebc658d4041a4f2cc84d28efb737453783a3fd4f3dc701b00b6808e346f00c1a978e5b6bd4c20e6c40fa1c59bbfa324f0b2e0079b8ed474682beca507d38fd4164748097c772dd2ca94dbbde7220ff8617201"}}, &(0x7f00000019c0)={0x0, 0xf, 0xee, {0x5, 0xf, 0xee, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xa3, 0x21, 0x8}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x200, 0xf00, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "88662d132bdde254c00b2fd00db65b10"}, @generic={0xa9, 0x10, 0x1, "02a7efa858cb68c02119d5a35b9c761a39b7745298e31e87b21e753665941b878fae73536596619cd3e9dfc909afc66752580d98f4eaa90a7311864c0b8b9740c8e52a710087c007e1dbd1155ab0f42750e6b580d7053e9a8feda4354cf0ee9d45145a52096571b198aff76a5666cb6337540fcae92404909a0fc0b8a40b7c04d7448e33778fcc9d1cc4162f44c268b9cfec6c01573c3b7ef6687ad3d4ba6740e030784d95b5"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1c, 0x3, 0x4, 0x3d, 0x3f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x0, 0x20, 0x3, 0x84}]}}, &(0x7f0000001ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x4, 0x6, "91aad950", "e4c7db08"}}, &(0x7f0000001b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x3, 0x4, 0x4, 0x9, 0x5, 0xdd3}}}, &(0x7f0000001f80)={0x84, &(0x7f0000001b80)={0x40, 0x14, 0x38, "024c94ca12fba52260dedf82e38733485dcd9c7043008c7ec585b688e3adaf83ae5357067e4e03f76656e76d7f5de46a00b605d1166712a1"}, &(0x7f0000001bc0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001c00)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001c40)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000001c80)={0x20, 0x0, 0x8, {0x200, 0x1, [0xf000]}}, &(0x7f0000001cc0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001d00)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001d40)={0x40, 0xb, 0x2, "b9f2"}, &(0x7f0000001d80)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000001dc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001e00)={0x40, 0x17, 0x6, @random="d0c774000200"}, &(0x7f0000001e40)={0x40, 0x19, 0x2, "c353"}, &(0x7f0000001e80)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000001ec0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001f00)={0x40, 0x1e, 0x1, 0x25}, &(0x7f0000001f40)={0x40, 0x21, 0xfffffd7c, 0x1}}) syz_usb_disconnect(r1) syz_usb_control_io$hid(r0, &(0x7f0000000a40)={0x24, &(0x7f0000000880)={0x40, 0x10, 0xeb, {0xeb, 0x24, "6df9be991a2e061de15f91d36554b6fdcda716a2c3937378d04a0cfc0a6d71cb626dfff3f8cf74b969d369db1dcc9e9950c7b1558e3094fe7a06cfaadbf7ab720ce74f9f2cc9362dc02c3470ddf2b471b648ae340f02b9afeb92fe6fee1d9c037ac6584519e5c3061eb2cb371240ec32ae9a7bc41d63b98efdd58e0a49c2134a56f8718ef8d0221e2e46a9c77e749c76e3b68a5cc010a01037ae521ccaf35498700bc0bded48549e75a6c988c3c4094626a91e8d1cd4bc87301b425e4b81e88baa3725703fc9135aeb9e1d56da35ffc8fa073387581f49755e7f761f00bdac015efc1f684400f4326a"}}, &(0x7f0000000980)={0x0, 0x3, 0x38, @string={0x38, 0x3, "77fb349ba600c77acc6d243e9a0e3df5eade57ddee364ed0e65c0da408f059a74c2787c11b3555506d5a4e281cddb87f2036dfac1c40"}}, &(0x7f00000009c0)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x9, "de0e"}, @main=@item_012={0x2, 0x0, 0xa, "f2a0"}]}}, &(0x7f0000000a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xf3, 0x1, {0x22, 0xc15}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000a80)={0x0, 0x14, 0x8a, "87fc6e0f22f04ef5b7ec6fba56b464fbb59229c0b0b68976552d637bd2f4fc131b96708d7c13d2e9aad07452c9d75c6b120562ec5b80d3a613534e336980144ae96e22cd486671a5387b8b99fa86f2da9b1c14a468dd071206908b93483254a124df80fdb9ede271b38cb5cba7acdc229bdd5b269f1cb1c2378ec85d0b0e3ac710e15c54b43959b63068"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000bc0)={0x20, 0x1, 0x95, "8bd5f0d81dded4b3ecfd9403192bed45f94a8e8e2d09bcad8d53728bef5b397f50e072f5a1fa5735934c35ba0ec4f5e849fd1af726cea0706bfbf61319ed4935d38c844c39b57f98a04da5ab716c9f1599e1578cda297557719058a85b937541d75d63afbd2c156e84d8bf05fd4894ee1a8c00722cd4d3932785ca1626c4b3e2692fbdb9c752bfd16d80f497bfa4af59ea0f9637e5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000240)={0x40, 0x22, 0xfb, {0xfb, 0x6, "99a4671e113c012036a4873207bcc258cf5e1b703780a776ac177cde3251064c4d489e6eecd67ad66386b5d2d19423c331da9fd4f745dc4a94b7274ffaf985d6981343d0266991a6a70e572b403759ffa18dea7139ee0ab5f60650231972d7f2bb0b25c3579fa923d4039bcc85c78c16a88c8d765560582154805e493b4daf78d8c07dca57da1184c384e6ba8d551ea10155459681b1d1da475a39194fe326422e03d2fee07a6600b508b2e9b9ab2cd99ce408cda41be8f8aec07234992a810c96377be2fc03b358d6b8cb3c467e542176bb363e533046bc4be51acc80e1de7429deda382effc048fd62bac96d4227c117dddf3176c0421e37"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000000c0)={0x0, 0xf, 0xffffffffffffffa7, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3e, 0x9, 0xff01}, @ptm_cap={0x3}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x4, 0x7, 0x6, "b34231dc", "5bcd7957"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x80, 0x81, 0x81, 0x5d, 0x4000, 0x80}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x20, 0x18, 0x7, "8cb3548ab2001a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1000, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000580)={0x40, 0xb, 0x2, "cb22"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xf718}, &(0x7f0000000600)={0x40, 0x13, 0x6}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "ad9c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1a}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x4}}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x1) syz_usb_control_io(r1, &(0x7f0000000ec0)={0x2c, &(0x7f0000000d00)={0x40, 0x22, 0x89, {0x89, 0x5, "578e1a787e0b452b428a8b5ab2f69e35e53454972e1481e556bc0f07d38dae6487c412de10f9695640a09c63a10d0ba6182ceb8f1fca8a4d2a4b96a2a5a198bd33243e21a647c102807aaad08b553e9518fdaab0609a0393aacc1013f7d48c345c463ded951d1432be5c9a6d46ce5e1c6c5af2328132492906f6a2f8afe11d0f9c824151723419"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, &(0x7f0000000e00)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x7ffff00, 0xf000, 0x79f, [0x3fcf, 0xc090, 0x3f, 0xff30, 0xe8, 0x3f0f]}]}}, &(0x7f0000000e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x80, 0x3f, 0xe3, "98d290d4", "d5338926"}}, &(0x7f0000000e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x4, 0x8, 0x8, 0xcb, 0x101, 0x5}}}, &(0x7f0000001340)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x71, "57adadf01cf13f9dc76222d1915c08d71f4ebfe46d90b0fa77474c4d7d1fd0e0de86974e1afc3bbbd0747abe1f1adf1481cc63ce1ba39f9b6c3eb82d647095329ee395f5bdb4dbd791d01232269a290c020fe31909f1666d46151be6e2766c01f72f79f84eab727d647c9c1add3358e004"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000001040)={0x20, 0x0, 0x8, {0x200, 0x1, [0xfff]}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0xb3fc}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0xfa}, &(0x7f0000001100)={0x40, 0xb, 0x2, "4516"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001180)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000001200)={0x40, 0x19, 0x2, "08b1"}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0xca}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0xfa}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) syz_usb_connect$uac1(0x3, 0xd4, &(0x7f0000002040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x2, 0xb0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x2, 0x1f, 0x8, 0xe1, 0x73}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x2, 0x3, [0x1, 0x5, 0x4], 0x2}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x20, 0x7, "6f46894c"}, @extension_unit={0x8, 0x24, 0x8, 0x1, 0xfff8, 0x7, "ba"}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x5, 0x0, "5e5ce7"}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x6, 0x6, [0x6, 0x7, 0x9, 0x8, 0x5, 0x5], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3f, 0x0, 0x7, "a7062841"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x7f, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x50, 0x800, 0x7f, "0d6c1ba0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x23, 0x3, 0x6, {0x7, 0x25, 0x1, 0x0, 0x1f, 0x7}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x110, 0x0, 0x80, 0x92, 0xff, 0x1}, 0x1d4, &(0x7f0000001540)={0x5, 0xf, 0x1d4, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x7f, 0x3, 0x4}, @generic={0xea, 0x10, 0x4, "2e5c108d1fba0985dc208b6f5d9c444ca932936c3c8f3fe3709fa712e983163a0065df6f33ec48495f39d359c207df536f5b614a179d93b23b982579f2197d137ffcf2c24881034fe754d4bf3cf50dcd945b4ad679426a2718673c3f6fa0cdc6f26a2177694db2d77f8e9bed83c80827ee5544ab4abffe89f4bb6a24e3a65db76c9c4a526fa2eba274e950e5f55b9e91c70ca4d6bce086dabf79f1f2de788fde2070e6144be7b7c3138702d407e2b6dc7a460e9eef27b4a1d5be5f50bb8e62242403d26226b26ff6757888e8273a4ab655164bf23fc52aaaa2dbf21b7bf07a6c3f0919403d5191"}, @generic={0xb3, 0x10, 0x1, "4e321087e5fac3571060d98e0dd6833404fd115a17e92b2bbccfba91b119dfc9012b91865e325dcbe3cda2af22d4053ae94b3ff9598c10659073558920003d715fac1fe5ac85a233d1953343f3f6b05b96b1496f47a0d57d7969c41fcfc1ac02c5092539375fcd67f4615e63c5910b3bc4c4e7baa6bd7dae3e63d97e125ea8b5ccba53345c5d4e404dcd8c4a84ac0a4096ca161a0810f3f7cdc0d2531d7b351d01c1063b0ef3b6a1833bc0bb776f32e3"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "5b482b3dfb86867eb81f887d8356b336"}, @ss_container_id={0x14, 0x10, 0x4, 0xc1, "3f326d82c3545900c6144fcc646f7c66"}]}, 0x1, [{0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x449}}]}) (async) syz_usb_control_io(r2, &(0x7f0000001b40)={0x2c, &(0x7f00000017c0)={0x20, 0x8, 0xce, {0xce, 0x8, "0e138dc0d657f4c4c824ccbecc2a24db5bf2570fbf1ad0f6f64894759a593f296f9c7b422ecba87dba43abb758b47469a802c494df3a8cf9bcae66098e3d8d2dcce6d76bc9e93044183e77fb0bc76e76411e2355a8c71fa0606f0467af6a6ed430221ab258f169534315edcdc061d657e5f75853f735fd611ede0aec689574e3b5319ac36749a5989f86a1e50c8b8b5daff22b6131a5a4a63265e54c4537f8489cfeb4c88490f70588d7107ff86d7dff78477899a20a23a000c2856aac9b544c71224100e7d1088bb58fd6a9"}}, &(0x7f00000018c0)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "9215ea7c2c804c49146bebf8f6291cdb19b118782f8a7a9b54732391fd327a3f7339ee76c0fd823d8326924f24a37ded9cb561c01c98a76392fa776b4229c2dc54222cb0fe0b969a87831d7a5a8d48005ec5ba367189c76b6ed17c9dd4a4f57f86e76e82f3f5521f9535c732482fe1a8b11b05d130cb0d9b37307abdd33ddc60dd6ebc658d4041a4f2cc84d28efb737453783a3fd4f3dc701b00b6808e346f00c1a978e5b6bd4c20e6c40fa1c59bbfa324f0b2e0079b8ed474682beca507d38fd4164748097c772dd2ca94dbbde7220ff8617201"}}, &(0x7f00000019c0)={0x0, 0xf, 0xee, {0x5, 0xf, 0xee, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xa3, 0x21, 0x8}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x200, 0xf00, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "88662d132bdde254c00b2fd00db65b10"}, @generic={0xa9, 0x10, 0x1, "02a7efa858cb68c02119d5a35b9c761a39b7745298e31e87b21e753665941b878fae73536596619cd3e9dfc909afc66752580d98f4eaa90a7311864c0b8b9740c8e52a710087c007e1dbd1155ab0f42750e6b580d7053e9a8feda4354cf0ee9d45145a52096571b198aff76a5666cb6337540fcae92404909a0fc0b8a40b7c04d7448e33778fcc9d1cc4162f44c268b9cfec6c01573c3b7ef6687ad3d4ba6740e030784d95b5"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1c, 0x3, 0x4, 0x3d, 0x3f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x0, 0x20, 0x3, 0x84}]}}, &(0x7f0000001ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x4, 0x6, "91aad950", "e4c7db08"}}, &(0x7f0000001b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x3, 0x4, 0x4, 0x9, 0x5, 0xdd3}}}, &(0x7f0000001f80)={0x84, &(0x7f0000001b80)={0x40, 0x14, 0x38, "024c94ca12fba52260dedf82e38733485dcd9c7043008c7ec585b688e3adaf83ae5357067e4e03f76656e76d7f5de46a00b605d1166712a1"}, &(0x7f0000001bc0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001c00)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001c40)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000001c80)={0x20, 0x0, 0x8, {0x200, 0x1, [0xf000]}}, &(0x7f0000001cc0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001d00)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001d40)={0x40, 0xb, 0x2, "b9f2"}, &(0x7f0000001d80)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000001dc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001e00)={0x40, 0x17, 0x6, @random="d0c774000200"}, &(0x7f0000001e40)={0x40, 0x19, 0x2, "c353"}, &(0x7f0000001e80)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000001ec0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001f00)={0x40, 0x1e, 0x1, 0x25}, &(0x7f0000001f40)={0x40, 0x21, 0xfffffd7c, 0x1}}) (async) syz_usb_disconnect(r1) (async) syz_usb_control_io$hid(r0, &(0x7f0000000a40)={0x24, &(0x7f0000000880)={0x40, 0x10, 0xeb, {0xeb, 0x24, "6df9be991a2e061de15f91d36554b6fdcda716a2c3937378d04a0cfc0a6d71cb626dfff3f8cf74b969d369db1dcc9e9950c7b1558e3094fe7a06cfaadbf7ab720ce74f9f2cc9362dc02c3470ddf2b471b648ae340f02b9afeb92fe6fee1d9c037ac6584519e5c3061eb2cb371240ec32ae9a7bc41d63b98efdd58e0a49c2134a56f8718ef8d0221e2e46a9c77e749c76e3b68a5cc010a01037ae521ccaf35498700bc0bded48549e75a6c988c3c4094626a91e8d1cd4bc87301b425e4b81e88baa3725703fc9135aeb9e1d56da35ffc8fa073387581f49755e7f761f00bdac015efc1f684400f4326a"}}, &(0x7f0000000980)={0x0, 0x3, 0x38, @string={0x38, 0x3, "77fb349ba600c77acc6d243e9a0e3df5eade57ddee364ed0e65c0da408f059a74c2787c11b3555506d5a4e281cddb87f2036dfac1c40"}}, &(0x7f00000009c0)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x9, "de0e"}, @main=@item_012={0x2, 0x0, 0xa, "f2a0"}]}}, &(0x7f0000000a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xf3, 0x1, {0x22, 0xc15}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000a80)={0x0, 0x14, 0x8a, "87fc6e0f22f04ef5b7ec6fba56b464fbb59229c0b0b68976552d637bd2f4fc131b96708d7c13d2e9aad07452c9d75c6b120562ec5b80d3a613534e336980144ae96e22cd486671a5387b8b99fa86f2da9b1c14a468dd071206908b93483254a124df80fdb9ede271b38cb5cba7acdc229bdd5b269f1cb1c2378ec85d0b0e3ac710e15c54b43959b63068"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000bc0)={0x20, 0x1, 0x95, "8bd5f0d81dded4b3ecfd9403192bed45f94a8e8e2d09bcad8d53728bef5b397f50e072f5a1fa5735934c35ba0ec4f5e849fd1af726cea0706bfbf61319ed4935d38c844c39b57f98a04da5ab716c9f1599e1578cda297557719058a85b937541d75d63afbd2c156e84d8bf05fd4894ee1a8c00722cd4d3932785ca1626c4b3e2692fbdb9c752bfd16d80f497bfa4af59ea0f9637e5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x4}}) (async) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000240)={0x40, 0x22, 0xfb, {0xfb, 0x6, "99a4671e113c012036a4873207bcc258cf5e1b703780a776ac177cde3251064c4d489e6eecd67ad66386b5d2d19423c331da9fd4f745dc4a94b7274ffaf985d6981343d0266991a6a70e572b403759ffa18dea7139ee0ab5f60650231972d7f2bb0b25c3579fa923d4039bcc85c78c16a88c8d765560582154805e493b4daf78d8c07dca57da1184c384e6ba8d551ea10155459681b1d1da475a39194fe326422e03d2fee07a6600b508b2e9b9ab2cd99ce408cda41be8f8aec07234992a810c96377be2fc03b358d6b8cb3c467e542176bb363e533046bc4be51acc80e1de7429deda382effc048fd62bac96d4227c117dddf3176c0421e37"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000000c0)={0x0, 0xf, 0xffffffffffffffa7, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3e, 0x9, 0xff01}, @ptm_cap={0x3}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x4, 0x7, 0x6, "b34231dc", "5bcd7957"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x80, 0x81, 0x81, 0x5d, 0x4000, 0x80}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x20, 0x18, 0x7, "8cb3548ab2001a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1000, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000580)={0x40, 0xb, 0x2, "cb22"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xf718}, &(0x7f0000000600)={0x40, 0x13, 0x6}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "ad9c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1a}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x1) (async) syz_usb_control_io(r1, &(0x7f0000000ec0)={0x2c, &(0x7f0000000d00)={0x40, 0x22, 0x89, {0x89, 0x5, "578e1a787e0b452b428a8b5ab2f69e35e53454972e1481e556bc0f07d38dae6487c412de10f9695640a09c63a10d0ba6182ceb8f1fca8a4d2a4b96a2a5a198bd33243e21a647c102807aaad08b553e9518fdaab0609a0393aacc1013f7d48c345c463ded951d1432be5c9a6d46ce5e1c6c5af2328132492906f6a2f8afe11d0f9c824151723419"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, &(0x7f0000000e00)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x7ffff00, 0xf000, 0x79f, [0x3fcf, 0xc090, 0x3f, 0xff30, 0xe8, 0x3f0f]}]}}, &(0x7f0000000e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x80, 0x3f, 0xe3, "98d290d4", "d5338926"}}, &(0x7f0000000e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x4, 0x8, 0x8, 0xcb, 0x101, 0x5}}}, &(0x7f0000001340)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x71, "57adadf01cf13f9dc76222d1915c08d71f4ebfe46d90b0fa77474c4d7d1fd0e0de86974e1afc3bbbd0747abe1f1adf1481cc63ce1ba39f9b6c3eb82d647095329ee395f5bdb4dbd791d01232269a290c020fe31909f1666d46151be6e2766c01f72f79f84eab727d647c9c1add3358e004"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000001040)={0x20, 0x0, 0x8, {0x200, 0x1, [0xfff]}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0xb3fc}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0xfa}, &(0x7f0000001100)={0x40, 0xb, 0x2, "4516"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001180)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000001200)={0x40, 0x19, 0x2, "08b1"}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0xca}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0xfa}}) (async) [ 3271.417859][T10411] usbhid 4-1:17.0: can't add hid device: -71 [ 3271.423984][T10411] usbhid: probe of 4-1:17.0 failed with error -71 [ 3271.490330][T10411] usb 4-1: USB disconnect, device number 54 [ 3271.655318][ T5171] usb 6-1: new high-speed USB device number 115 using dummy_hcd 06:31:59 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x400448dd, 0x0) [ 3272.065589][ T5171] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3272.108996][ T5171] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3272.184251][ T5171] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 06:32:00 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x492, 0x0, 0x2000000000000012) 06:32:00 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x4ec, 0x0, 0x2000000000000012) 06:32:00 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x4ce, 0x0, 0x0, 0x2000000000000012) [ 3272.252022][ T5171] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:32:00 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x400448dd, 0x0) [ 3272.817925][T19978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3272.859491][T19978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:32:01 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) [ 3272.916779][T19978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3273.000162][T19978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3273.267994][ T5171] wacom 0003:056A:0331.00C9: item fetching failed at offset 0/1 [ 3273.281906][ T5171] wacom 0003:056A:0331.00C9: parse failed [ 3273.288421][ T5171] wacom: probe of 0003:056A:0331.00C9 failed with error -22 [ 3273.834070][T20006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3273.848611][T20006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3273.859993][T18058] usb 6-1: USB disconnect, device number 115 [ 3279.925162][T11105] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 3280.315347][T11105] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3280.326405][T11105] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3280.336291][T11105] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3280.345429][T11105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3282.910931][T20015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3282.920026][T20015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3282.940489][T11105] wacom 0003:056A:0331.00CA: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3283.144006][T18058] usb 4-1: USB disconnect, device number 55 06:32:11 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0xc0189436, 0x0) 06:32:11 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x4b0, 0x0, 0x2000000000000012) 06:32:11 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x4ec, 0x0, 0x0, 0x2000000000000012) 06:32:11 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:32:11 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x500, 0x0, 0x2000000000000012) 06:32:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) r2 = syz_usb_connect$uac1(0x3, 0xd4, &(0x7f0000002040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x2, 0xb0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x201, 0x2, 0x1f, 0x8, 0xe1, 0x73}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x2, 0x3, [0x1, 0x5, 0x4], 0x2}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x20, 0x7, "6f46894c"}, @extension_unit={0x8, 0x24, 0x8, 0x1, 0xfff8, 0x7, "ba"}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x5, 0x0, "5e5ce7"}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x6, 0x6, [0x6, 0x7, 0x9, 0x8, 0x5, 0x5], 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x3f, 0x0, 0x7, "a7062841"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x7f, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x50, 0x800, 0x7f, "0d6c1ba0"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x23, 0x3, 0x6, {0x7, 0x25, 0x1, 0x0, 0x1f, 0x7}}}}}}}]}}, &(0x7f0000001780)={0xa, &(0x7f0000001500)={0xa, 0x6, 0x110, 0x0, 0x80, 0x92, 0xff, 0x1}, 0x1d4, &(0x7f0000001540)={0x5, 0xf, 0x1d4, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x7f, 0x3, 0x4}, @generic={0xea, 0x10, 0x4, "2e5c108d1fba0985dc208b6f5d9c444ca932936c3c8f3fe3709fa712e983163a0065df6f33ec48495f39d359c207df536f5b614a179d93b23b982579f2197d137ffcf2c24881034fe754d4bf3cf50dcd945b4ad679426a2718673c3f6fa0cdc6f26a2177694db2d77f8e9bed83c80827ee5544ab4abffe89f4bb6a24e3a65db76c9c4a526fa2eba274e950e5f55b9e91c70ca4d6bce086dabf79f1f2de788fde2070e6144be7b7c3138702d407e2b6dc7a460e9eef27b4a1d5be5f50bb8e62242403d26226b26ff6757888e8273a4ab655164bf23fc52aaaa2dbf21b7bf07a6c3f0919403d5191"}, @generic={0xb3, 0x10, 0x1, "4e321087e5fac3571060d98e0dd6833404fd115a17e92b2bbccfba91b119dfc9012b91865e325dcbe3cda2af22d4053ae94b3ff9598c10659073558920003d715fac1fe5ac85a233d1953343f3f6b05b96b1496f47a0d57d7969c41fcfc1ac02c5092539375fcd67f4615e63c5910b3bc4c4e7baa6bd7dae3e63d97e125ea8b5ccba53345c5d4e404dcd8c4a84ac0a4096ca161a0810f3f7cdc0d2531d7b351d01c1063b0ef3b6a1833bc0bb776f32e3"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "5b482b3dfb86867eb81f887d8356b336"}, @ss_container_id={0x14, 0x10, 0x4, 0xc1, "3f326d82c3545900c6144fcc646f7c66"}]}, 0x1, [{0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x449}}]}) syz_usb_control_io(r2, &(0x7f0000001b40)={0x2c, &(0x7f00000017c0)={0x20, 0x8, 0xce, {0xce, 0x8, "0e138dc0d657f4c4c824ccbecc2a24db5bf2570fbf1ad0f6f64894759a593f296f9c7b422ecba87dba43abb758b47469a802c494df3a8cf9bcae66098e3d8d2dcce6d76bc9e93044183e77fb0bc76e76411e2355a8c71fa0606f0467af6a6ed430221ab258f169534315edcdc061d657e5f75853f735fd611ede0aec689574e3b5319ac36749a5989f86a1e50c8b8b5daff22b6131a5a4a63265e54c4537f8489cfeb4c88490f70588d7107ff86d7dff78477899a20a23a000c2856aac9b544c71224100e7d1088bb58fd6a9"}}, &(0x7f00000018c0)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "9215ea7c2c804c49146bebf8f6291cdb19b118782f8a7a9b54732391fd327a3f7339ee76c0fd823d8326924f24a37ded9cb561c01c98a76392fa776b4229c2dc54222cb0fe0b969a87831d7a5a8d48005ec5ba367189c76b6ed17c9dd4a4f57f86e76e82f3f5521f9535c732482fe1a8b11b05d130cb0d9b37307abdd33ddc60dd6ebc658d4041a4f2cc84d28efb737453783a3fd4f3dc701b00b6808e346f00c1a978e5b6bd4c20e6c40fa1c59bbfa324f0b2e0079b8ed474682beca507d38fd4164748097c772dd2ca94dbbde7220ff8617201"}}, &(0x7f00000019c0)={0x0, 0xf, 0xee, {0x5, 0xf, 0xee, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xa3, 0x21, 0x8}, @ssp_cap={0xc, 0x10, 0xa, 0x7f, 0x0, 0x200, 0xf00, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "88662d132bdde254c00b2fd00db65b10"}, @generic={0xa9, 0x10, 0x1, "02a7efa858cb68c02119d5a35b9c761a39b7745298e31e87b21e753665941b878fae73536596619cd3e9dfc909afc66752580d98f4eaa90a7311864c0b8b9740c8e52a710087c007e1dbd1155ab0f42750e6b580d7053e9a8feda4354cf0ee9d45145a52096571b198aff76a5666cb6337540fcae92404909a0fc0b8a40b7c04d7448e33778fcc9d1cc4162f44c268b9cfec6c01573c3b7ef6687ad3d4ba6740e030784d95b5"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1c, 0x3, 0x4, 0x3d, 0x3f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x0, 0x20, 0x3, 0x84}]}}, &(0x7f0000001ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x4, 0x6, "91aad950", "e4c7db08"}}, &(0x7f0000001b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x3, 0x4, 0x4, 0x9, 0x5, 0xdd3}}}, &(0x7f0000001f80)={0x84, &(0x7f0000001b80)={0x40, 0x14, 0x38, "024c94ca12fba52260dedf82e38733485dcd9c7043008c7ec585b688e3adaf83ae5357067e4e03f76656e76d7f5de46a00b605d1166712a1"}, &(0x7f0000001bc0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001c00)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001c40)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000001c80)={0x20, 0x0, 0x8, {0x200, 0x1, [0xf000]}}, &(0x7f0000001cc0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000001d00)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000001d40)={0x40, 0xb, 0x2, "b9f2"}, &(0x7f0000001d80)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000001dc0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000001e00)={0x40, 0x17, 0x6, @random="d0c774000200"}, &(0x7f0000001e40)={0x40, 0x19, 0x2, "c353"}, &(0x7f0000001e80)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000001ec0)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000001f00)={0x40, 0x1e, 0x1, 0x25}, &(0x7f0000001f40)={0x40, 0x21, 0xfffffd7c, 0x1}}) (async) syz_usb_disconnect(r1) (async) syz_usb_control_io$hid(r0, &(0x7f0000000a40)={0x24, &(0x7f0000000880)={0x40, 0x10, 0xeb, {0xeb, 0x24, "6df9be991a2e061de15f91d36554b6fdcda716a2c3937378d04a0cfc0a6d71cb626dfff3f8cf74b969d369db1dcc9e9950c7b1558e3094fe7a06cfaadbf7ab720ce74f9f2cc9362dc02c3470ddf2b471b648ae340f02b9afeb92fe6fee1d9c037ac6584519e5c3061eb2cb371240ec32ae9a7bc41d63b98efdd58e0a49c2134a56f8718ef8d0221e2e46a9c77e749c76e3b68a5cc010a01037ae521ccaf35498700bc0bded48549e75a6c988c3c4094626a91e8d1cd4bc87301b425e4b81e88baa3725703fc9135aeb9e1d56da35ffc8fa073387581f49755e7f761f00bdac015efc1f684400f4326a"}}, &(0x7f0000000980)={0x0, 0x3, 0x38, @string={0x38, 0x3, "77fb349ba600c77acc6d243e9a0e3df5eade57ddee364ed0e65c0da408f059a74c2787c11b3555506d5a4e281cddb87f2036dfac1c40"}}, &(0x7f00000009c0)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x9, "de0e"}, @main=@item_012={0x2, 0x0, 0xa, "f2a0"}]}}, &(0x7f0000000a00)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xf3, 0x1, {0x22, 0xc15}}}}, &(0x7f0000000cc0)={0x2c, &(0x7f0000000a80)={0x0, 0x14, 0x8a, "87fc6e0f22f04ef5b7ec6fba56b464fbb59229c0b0b68976552d637bd2f4fc131b96708d7c13d2e9aad07452c9d75c6b120562ec5b80d3a613534e336980144ae96e22cd486671a5387b8b99fa86f2da9b1c14a468dd071206908b93483254a124df80fdb9ede271b38cb5cba7acdc229bdd5b269f1cb1c2378ec85d0b0e3ac710e15c54b43959b63068"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000bc0)={0x20, 0x1, 0x95, "8bd5f0d81dded4b3ecfd9403192bed45f94a8e8e2d09bcad8d53728bef5b397f50e072f5a1fa5735934c35ba0ec4f5e849fd1af726cea0706bfbf61319ed4935d38c844c39b57f98a04da5ab716c9f1599e1578cda297557719058a85b937541d75d63afbd2c156e84d8bf05fd4894ee1a8c00722cd4d3932785ca1626c4b3e2692fbdb9c752bfd16d80f497bfa4af59ea0f9637e5"}, &(0x7f0000000c80)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000240)={0x40, 0x22, 0xfb, {0xfb, 0x6, "99a4671e113c012036a4873207bcc258cf5e1b703780a776ac177cde3251064c4d489e6eecd67ad66386b5d2d19423c331da9fd4f745dc4a94b7274ffaf985d6981343d0266991a6a70e572b403759ffa18dea7139ee0ab5f60650231972d7f2bb0b25c3579fa923d4039bcc85c78c16a88c8d765560582154805e493b4daf78d8c07dca57da1184c384e6ba8d551ea10155459681b1d1da475a39194fe326422e03d2fee07a6600b508b2e9b9ab2cd99ce408cda41be8f8aec07234992a810c96377be2fc03b358d6b8cb3c467e542176bb363e533046bc4be51acc80e1de7429deda382effc048fd62bac96d4227c117dddf3176c0421e37"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000000c0)={0x0, 0xf, 0xffffffffffffffa7, {0x5, 0xf, 0x12, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3e, 0x9, 0xff01}, @ptm_cap={0x3}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x4, 0x7, 0x6, "b34231dc", "5bcd7957"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x80, 0x81, 0x81, 0x5d, 0x4000, 0x80}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000380)={0x20, 0x18, 0x7, "8cb3548ab2001a"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1000, 0x20}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000580)={0x40, 0xb, 0x2, "cb22"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xf718}, &(0x7f0000000600)={0x40, 0x13, 0x6}, &(0x7f0000000640)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, &(0x7f0000000680)={0x40, 0x19, 0x2, "ad9c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1a}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x4}}) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r3}], 0x1, 0x1) (async) syz_usb_control_io(r1, &(0x7f0000000ec0)={0x2c, &(0x7f0000000d00)={0x40, 0x22, 0x89, {0x89, 0x5, "578e1a787e0b452b428a8b5ab2f69e35e53454972e1481e556bc0f07d38dae6487c412de10f9695640a09c63a10d0ba6182ceb8f1fca8a4d2a4b96a2a5a198bd33243e21a647c102807aaad08b553e9518fdaab0609a0393aacc1013f7d48c345c463ded951d1432be5c9a6d46ce5e1c6c5af2328132492906f6a2f8afe11d0f9c824151723419"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, &(0x7f0000000e00)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x7ffff00, 0xf000, 0x79f, [0x3fcf, 0xc090, 0x3f, 0xff30, 0xe8, 0x3f0f]}]}}, &(0x7f0000000e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x80, 0x3f, 0xe3, "98d290d4", "d5338926"}}, &(0x7f0000000e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x4, 0x8, 0x8, 0xcb, 0x101, 0x5}}}, &(0x7f0000001340)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x71, "57adadf01cf13f9dc76222d1915c08d71f4ebfe46d90b0fa77474c4d7d1fd0e0de86974e1afc3bbbd0747abe1f1adf1481cc63ce1ba39f9b6c3eb82d647095329ee395f5bdb4dbd791d01232269a290c020fe31909f1666d46151be6e2766c01f72f79f84eab727d647c9c1add3358e004"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000001040)={0x20, 0x0, 0x8, {0x200, 0x1, [0xfff]}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0xb3fc}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0xfa}, &(0x7f0000001100)={0x40, 0xb, 0x2, "4516"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000001180)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000001200)={0x40, 0x19, 0x2, "08b1"}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0xca}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0xfa}}) [ 3283.955242][T18058] usb 6-1: new high-speed USB device number 116 using dummy_hcd 06:32:12 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) [ 3284.355325][T18058] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3284.404516][T18058] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3284.475210][T18058] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3284.545812][T18058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:32:12 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x500, 0x0, 0x0, 0x2000000000000012) 06:32:12 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x50a, 0x0, 0x2000000000000012) 06:32:12 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x4ce, 0x0, 0x2000000000000012) 06:32:12 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) [ 3284.840153][T20050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3284.877127][T20049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3284.936202][T20049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3284.955436][T20050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 06:32:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000540)={0xffffffffffffff0d, &(0x7f0000000080)={0x0, 0xf, 0x4, {0x4, 0x1, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) [ 3285.065174][T15505] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 3285.115300][T18058] usbhid 6-1:17.0: can't add hid device: -71 [ 3285.121616][T18058] usbhid: probe of 6-1:17.0 failed with error -71 [ 3285.192992][T18058] usb 6-1: USB disconnect, device number 116 [ 3285.255377][T15505] usb 1-1: device descriptor read/64, error 18 [ 3285.525239][T15505] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 3285.595384][T18058] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 3285.725153][T15505] usb 1-1: device descriptor read/64, error 18 [ 3285.845418][T15505] usb usb1-port1: attempt power cycle [ 3285.955223][T18058] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3285.972149][T18058] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3285.982127][T18058] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3285.996822][T18058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3286.255338][T15505] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 3286.425284][T15505] usb 1-1: device descriptor read/8, error -61 [ 3286.466196][T20055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3286.474770][T20055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3286.695160][T15505] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 3286.765340][T18058] usbhid 6-1:17.0: can't add hid device: -71 [ 3286.771420][T18058] usbhid: probe of 6-1:17.0 failed with error -71 [ 3286.783466][T18058] usb 6-1: USB disconnect, device number 117 [ 3286.865404][T15505] usb 1-1: device descriptor read/8, error -61 [ 3286.996186][T15505] usb usb1-port1: unable to enumerate USB device [ 3292.315151][ T5171] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 3292.675290][ T5171] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3292.686968][ T5171] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3292.697136][ T5171] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3292.706484][ T5171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:32:21 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0xc020660b, 0x0) 06:32:21 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x528, 0x0, 0x2000000000000012) 06:32:21 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x50a, 0x0, 0x0, 0x2000000000000012) 06:32:21 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x4ec, 0x0, 0x2000000000000012) 06:32:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_disconnect(r1) (async) syz_usb_control_io(r1, &(0x7f0000000540)={0xffffffffffffff0d, &(0x7f0000000080)={0x0, 0xf, 0x4, {0x4, 0x1, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) 06:32:21 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) [ 3293.055473][ T5171] usbhid 4-1:17.0: can't add hid device: -71 [ 3293.061762][ T5171] usbhid: probe of 4-1:17.0 failed with error -71 [ 3293.139829][ T5171] usb 4-1: USB disconnect, device number 56 [ 3293.255306][T15505] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 3293.263018][T18058] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 3293.475348][T18058] usb 1-1: device descriptor read/64, error 18 [ 3293.695566][T15505] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3293.745176][T18058] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 3293.755489][T15505] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3293.795395][T15505] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3293.804561][T15505] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:32:21 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x546, 0x0, 0x2000000000000012) 06:32:21 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x528, 0x0, 0x0, 0x2000000000000012) 06:32:21 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x500, 0x0, 0x2000000000000012) [ 3293.965332][T18058] usb 1-1: device descriptor read/64, error 18 [ 3294.095707][T18058] usb usb1-port1: attempt power cycle [ 3294.336216][T20065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3294.380876][T20065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3294.525356][T18058] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 3294.725340][T15505] usbhid 6-1:17.0: can't add hid device: -71 [ 3294.731549][T18058] usb 1-1: device descriptor read/8, error -61 [ 3294.740837][T15505] usbhid: probe of 6-1:17.0 failed with error -71 06:32:22 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x564, 0x0, 0x2000000000000012) [ 3294.817157][T15505] usb 6-1: USB disconnect, device number 118 06:32:22 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x546, 0x0, 0x0, 0x2000000000000012) 06:32:22 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x50a, 0x0, 0x2000000000000012) [ 3295.045270][T18058] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 3295.235604][T18058] usb 1-1: device descriptor read/8, error -61 [ 3295.355360][T18058] usb usb1-port1: unable to enumerate USB device [ 3303.675159][T18716] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 3304.035354][T18716] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3304.046425][T18716] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3304.056997][T18716] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3304.066125][T18716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3304.537705][T20106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3304.547325][T20106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3304.589692][T18716] wacom 0003:056A:0331.00CB: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3304.792082][T18058] usb 4-1: USB disconnect, device number 57 06:32:33 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) socket$bt_rfcomm(0x1f, 0x0, 0x3) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x1a}]}, 0x20}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x30, 0xb2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x80, 0x3f, 0xfa}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x40, 0x8, 0x0, 0x8, 0x4}, 0x31, &(0x7f0000000180)={0x5, 0xf, 0x31, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x7fff, 0xf000, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x81, 0x0, 0x81, [0xffff00, 0x0, 0xc0, 0xf, 0xff0000]}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0a}}]}) 06:32:33 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:32:33 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x582, 0x0, 0x2000000000000012) 06:32:33 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x564, 0x0, 0x0, 0x2000000000000012) 06:32:33 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000540)={0xffffffffffffff0d, &(0x7f0000000080)={0x0, 0xf, 0x4, {0x4, 0x1, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r2}], 0x1, 0x1) 06:32:33 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x528, 0x0, 0x2000000000000012) [ 3305.615209][T15505] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 3305.622897][T18058] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 3305.815186][T15505] usb 1-1: device descriptor read/64, error 18 [ 3305.985212][T18058] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3306.021737][T18058] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3306.080546][T18058] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3306.095183][T15505] usb 1-1: new high-speed USB device number 61 using dummy_hcd 06:32:34 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x546, 0x0, 0x2000000000000012) [ 3306.150523][T18058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:32:34 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x582, 0x0, 0x0, 0x2000000000000012) 06:32:34 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x5a0, 0x0, 0x2000000000000012) [ 3306.305270][T15505] usb 1-1: device descriptor read/64, error 18 [ 3306.425324][T15505] usb usb1-port1: attempt power cycle [ 3306.686550][T20117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3306.715450][T20117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3306.835403][T15505] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 3307.005284][T18058] usbhid 6-1:17.0: can't add hid device: -71 [ 3307.015264][T15505] usb 1-1: device descriptor read/8, error -61 [ 3307.033739][T18058] usbhid: probe of 6-1:17.0 failed with error -71 [ 3307.104736][T18058] usb 6-1: USB disconnect, device number 119 06:32:35 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x564, 0x0, 0x2000000000000012) 06:32:35 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x5a0, 0x0, 0x0, 0x2000000000000012) 06:32:35 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x5be, 0x0, 0x2000000000000012) [ 3307.305325][T15505] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 3307.485270][T15505] usb 1-1: device descriptor read/8, error -61 [ 3307.605320][T15505] usb usb1-port1: unable to enumerate USB device [ 3311.985295][T18058] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 3312.346619][T18058] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3312.357690][T18058] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3312.367585][T18058] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3312.376738][T18058] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3312.859044][T20151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3312.873738][T20151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3312.899709][T18058] wacom 0003:056A:0331.00CC: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3313.102428][T20151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3313.111579][T20151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3313.120892][T18058] usb 4-1: USB disconnect, device number 58 06:32:41 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x5dc, 0x0, 0x2000000000000012) 06:32:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00001000000004005585"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) 06:32:41 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x582, 0x0, 0x2000000000000012) 06:32:41 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x5be, 0x0, 0x0, 0x2000000000000012) 06:32:41 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:32:41 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async) poll(0x0, 0x0, 0x1) socket$bt_rfcomm(0x1f, 0x0, 0x3) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x1a}]}, 0x20}}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x30, 0xb2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x80, 0x3f, 0xfa}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x40, 0x8, 0x0, 0x8, 0x4}, 0x31, &(0x7f0000000180)={0x5, 0xf, 0x31, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x7fff, 0xf000, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x81, 0x0, 0x81, [0xffff00, 0x0, 0xc0, 0xf, 0xff0000]}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0a}}]}) [ 3313.955330][T18058] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 3313.962977][T10656] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 3314.165324][T18058] usb 1-1: device descriptor read/64, error 18 [ 3314.385495][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3314.420641][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3314.465172][T18058] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 3314.480420][T10656] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 06:32:42 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x5a0, 0x0, 0x2000000000000012) 06:32:42 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x5fa, 0x0, 0x2000000000000012) [ 3314.533189][T10656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:32:42 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x5dc, 0x0, 0x0, 0x2000000000000012) [ 3314.665251][T18058] usb 1-1: device descriptor read/64, error 18 [ 3314.785867][T18058] usb usb1-port1: attempt power cycle [ 3315.054373][T10656] wacom 0003:056A:0331.00CD: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3315.195189][T18058] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 3315.251694][T10656] usb 6-1: USB disconnect, device number 120 [ 3315.375324][T18058] usb 1-1: device descriptor read/8, error -61 06:32:43 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x5be, 0x0, 0x2000000000000012) 06:32:43 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x5fa, 0x0, 0x0, 0x2000000000000012) 06:32:43 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x600, 0x0, 0x2000000000000012) [ 3315.645399][T18058] usb 1-1: new high-speed USB device number 67 using dummy_hcd 06:32:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00001000000004005585"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) [ 3315.825426][T18058] usb 1-1: device descriptor read/8, error -61 [ 3315.955381][T18058] usb usb1-port1: unable to enumerate USB device [ 3316.045247][T10656] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 3316.425377][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 06:32:44 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x600, 0x0, 0x0, 0x2000000000000012) 06:32:44 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x5dc, 0x0, 0x2000000000000012) [ 3316.472168][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 06:32:44 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x609, 0x0, 0x2000000000000012) [ 3316.539565][T10656] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3316.579960][T10656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:32:44 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) [ 3316.951232][T10656] wacom 0003:056A:0331.00CE: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3317.125247][T18058] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 3317.151749][T10656] usb 6-1: USB disconnect, device number 121 [ 3317.325238][T18058] usb 1-1: device descriptor read/64, error 18 [ 3317.595183][T18058] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 3317.785202][T18058] usb 1-1: device descriptor read/64, error 18 [ 3317.905316][T18058] usb usb1-port1: attempt power cycle [ 3318.315201][T18058] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 3318.485245][T18058] usb 1-1: device descriptor read/8, error -61 [ 3318.755247][T18058] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 3318.925227][T18058] usb 1-1: device descriptor read/8, error -61 [ 3319.045282][T18058] usb usb1-port1: unable to enumerate USB device [ 3324.405251][T18716] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 3324.765405][T18716] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3324.776648][T18716] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3324.786938][T18716] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3324.796280][T18716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3325.121313][T18716] wacom 0003:056A:0331.00CF: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 06:32:53 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async) poll(0x0, 0x0, 0x1) socket$bt_rfcomm(0x1f, 0x0, 0x3) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x1a}]}, 0x20}}, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) (async) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x30, 0xb2, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x80, 0x3f, 0xfa}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x40, 0x8, 0x0, 0x8, 0x4}, 0x31, &(0x7f0000000180)={0x5, 0xf, 0x31, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x7fff, 0xf000, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x81, 0x0, 0x81, [0xffff00, 0x0, 0xc0, 0xf, 0xff0000]}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0a}}]}) 06:32:53 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x5fa, 0x0, 0x2000000000000012) 06:32:53 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x618, 0x0, 0x2000000000000012) 06:32:53 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x609, 0x0, 0x0, 0x2000000000000012) 06:32:53 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00001000000004005585"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) 06:32:53 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) [ 3325.323310][T18716] usb 4-1: USB disconnect, device number 59 [ 3325.625207][T18058] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 3325.645385][T17901] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 3325.845137][T17901] usb 1-1: device descriptor read/64, error 18 [ 3325.995322][T18058] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3326.033401][T18058] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3326.110441][T18058] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3326.125233][T17901] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 3326.186263][T18058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:32:54 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x600, 0x0, 0x2000000000000012) 06:32:54 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x636, 0x0, 0x2000000000000012) 06:32:54 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x618, 0x0, 0x0, 0x2000000000000012) [ 3326.335482][T17901] usb 1-1: device descriptor read/64, error 18 [ 3326.455410][T17901] usb usb1-port1: attempt power cycle [ 3326.542040][T18058] wacom 0003:056A:0331.00D0: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3326.738579][ T5171] usb 6-1: USB disconnect, device number 122 [ 3326.895175][T17901] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 3327.075720][T17901] usb 1-1: device descriptor read/8, error -61 06:32:55 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x609, 0x0, 0x2000000000000012) 06:32:55 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x636, 0x0, 0x0, 0x2000000000000012) 06:32:55 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x64c, 0x0, 0x2000000000000012) [ 3327.345160][T17901] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 3327.476627][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.483412][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.535326][T17901] usb 1-1: device descriptor read/8, error -61 [ 3327.655933][T17901] usb usb1-port1: unable to enumerate USB device 06:32:58 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902630002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000007240a0700000009058103ff030100000904010000020d00000000010102020d000009058202cf0500000009050301ffea000000"], 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000540)={0x8, &(0x7f0000000080)={0x40, 0x9, 0x4, {0x4, 0x23, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0xfffffffffffffec4, 0x18cc) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00032800000028301d5dc2f0531cdd22689fc57d97606cf2a1b93dde73dba43b6368425212bc884cc88617319b60"], &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x4, "fd8ff16e"}, @global=@item_012={0x0, 0x1, 0x4}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffe, 0x7, 0x1, {0x22, 0x1cc}}}}, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x20, 0x15, 0x3, "46d481"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0x20, 0x1, 0xc1, "52d23f6b2f0ce79655c7a396c44a7de43f2a914f760817f3a5df50e642f55e1e85f1e4bd08cb3ccf5986bffd5698b49c830135776baf5ddc77c2cf58bf3d3dde74605233fbc7db3b6a90478ef7c9d0cbe28253f82d99c1221aba1abea00c2a24ffd3b257d7d29d1cf7a93ae49a23ec1ce51a991d6a8d733351e01a374d042ae63e8a29900d7a3fd8dfca3121c0e79546582f33d417dc5ac48b9a42ccdaa22e5cb59fdd32efcacd5e2200376be2423acb7f9385934a8186d938773a5b772d033d14"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x41}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) 06:32:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340160000010109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xc8, &(0x7f0000000240)={{0x12, 0x1, 0x141, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x2, 0x1, 0x0, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "cbc912e0"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x65, 0x58}, {0x6, 0x24, 0x1a, 0x8f, 0x8}, [@mdlm_detail={0x47, 0x24, 0x13, 0xe, "a75ce59c4b371b1f512b97d5680b2539be3b190fa696ec50e73c6bda63e3dd5cfc9525e472ad72f12b7d8268a07f6888f3f9b09a8e5fce4a4d29d2fdd1dcf4f7e5d35c"}, @acm={0x4, 0x24, 0x2, 0x1}, @acm={0x4, 0x24, 0x2, 0xa}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x63, 0xde, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x8, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x81, 0x8}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x4, 0x4, 0x6, 0x20, 0x3d}, 0x25, &(0x7f00000000c0)={0x5, 0xf, 0x25, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x6, 0x3, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x42, 0x40, 0x0, 0xa84, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x1, 0x6, 0x1, 0x80}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x240f}}]}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000500)={0x0, 0x1, 0x1f4bd75c8c42ee4, {0x102, 0xd, "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"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) 06:32:58 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x654, 0x0, 0x0, 0x2000000000000012) 06:32:58 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x618, 0x0, 0x2000000000000012) 06:32:58 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x654, 0x0, 0x2000000000000012) 06:32:58 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) [ 3330.855173][ T7542] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 3330.865235][T10656] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 3331.235414][ T7542] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3331.246975][T10656] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 3331.356815][T10656] usb 1-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 3331.387456][ T7542] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 06:32:59 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x636, 0x0, 0x2000000000000012) 06:32:59 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x672, 0x0, 0x2000000000000012) 06:32:59 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x672, 0x0, 0x0, 0x2000000000000012) [ 3331.449016][T10656] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3331.475428][T10656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3331.545623][ T7542] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice=16.40 [ 3331.597559][ T7542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3331.633761][ T7542] usb 6-1: SerialNumber: syz [ 3332.325215][ T7542] usbhid 6-1:17.0: can't add hid device: -71 [ 3332.332770][ T7542] usbhid: probe of 6-1:17.0 failed with error -71 06:33:00 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x690, 0x0, 0x2000000000000012) [ 3332.400023][ T7542] usb 6-1: USB disconnect, device number 123 06:33:00 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x654, 0x0, 0x2000000000000012) 06:33:00 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x690, 0x0, 0x0, 0x2000000000000012) [ 3333.591276][T17901] usb 1-1: USB disconnect, device number 76 06:33:07 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902630002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000007240a0700000009058103ff030100000904010000020d00000000010102020d000009058202cf0500000009050301ffea000000"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000540)={0x8, &(0x7f0000000080)={0x40, 0x9, 0x4, {0x4, 0x23, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async) poll(0x0, 0xfffffffffffffec4, 0x18cc) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00032800000028301d5dc2f0531cdd22689fc57d97606cf2a1b93dde73dba43b6368425212bc884cc88617319b60"], &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x4, "fd8ff16e"}, @global=@item_012={0x0, 0x1, 0x4}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffe, 0x7, 0x1, {0x22, 0x1cc}}}}, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x20, 0x15, 0x3, "46d481"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0x20, 0x1, 0xc1, "52d23f6b2f0ce79655c7a396c44a7de43f2a914f760817f3a5df50e642f55e1e85f1e4bd08cb3ccf5986bffd5698b49c830135776baf5ddc77c2cf58bf3d3dde74605233fbc7db3b6a90478ef7c9d0cbe28253f82d99c1221aba1abea00c2a24ffd3b257d7d29d1cf7a93ae49a23ec1ce51a991d6a8d733351e01a374d042ae63e8a29900d7a3fd8dfca3121c0e79546582f33d417dc5ac48b9a42ccdaa22e5cb59fdd32efcacd5e2200376be2423acb7f9385934a8186d938773a5b772d033d14"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x41}}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) 06:33:07 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340160000010109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xc8, &(0x7f0000000240)={{0x12, 0x1, 0x141, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x2, 0x1, 0x0, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "cbc912e0"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x65, 0x58}, {0x6, 0x24, 0x1a, 0x8f, 0x8}, [@mdlm_detail={0x47, 0x24, 0x13, 0xe, "a75ce59c4b371b1f512b97d5680b2539be3b190fa696ec50e73c6bda63e3dd5cfc9525e472ad72f12b7d8268a07f6888f3f9b09a8e5fce4a4d29d2fdd1dcf4f7e5d35c"}, @acm={0x4, 0x24, 0x2, 0x1}, @acm={0x4, 0x24, 0x2, 0xa}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x63, 0xde, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x8, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x81, 0x8}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x4, 0x4, 0x6, 0x20, 0x3d}, 0x25, &(0x7f00000000c0)={0x5, 0xf, 0x25, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x6, 0x3, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x42, 0x40, 0x0, 0xa84, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x1, 0x6, 0x1, 0x80}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x240f}}]}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000500)={0x0, 0x1, 0x1f4bd75c8c42ee4, {0x102, 0xd, "c2cc7957b94fb0c98aa257e3f5c7f3bf5b9a947f2991666c0a651e45a7fe1225052fa3225aaba7ac053fa6c29486abfb050fbcb8207fc3fcd845bf136b01d326d69f78f490bc5565b21cb79860ba5b471e51b947c77842635fc90931717773dfa493349e4357c477bf23389b8e5b4cddfdcbb2edb373b70e266d4656f492755c475576d8ba6964c98cf7992cab4bae52a2a99b55971f7439bf97a2c15af308e96e90a812f8b86db4cd255d26ddf0e996289677e741d3ef3676b6e9fe98a10422227630e61ed92fafd2d1d8471b7a157a24af5e6fd7d0c9357c7cae2b9330fd2fa53117edf6ceafaf2bc5f2ce2d0e4642e3edfbeac91f0658c427e6808a707238"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) (async) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) 06:33:07 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x6ae, 0x0, 0x2000000000000012) 06:33:07 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x672, 0x0, 0x2000000000000012) 06:33:07 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x6ae, 0x0, 0x0, 0x2000000000000012) 06:33:07 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) [ 3340.155414][T10656] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 3340.165154][T10411] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 3340.535319][T10411] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3340.565158][T10411] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3340.585333][T10656] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 3340.620469][T10656] usb 1-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 3340.640846][T10656] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3340.650709][T10656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3340.655423][T10411] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice=16.40 06:33:08 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x690, 0x0, 0x2000000000000012) [ 3340.730749][T10411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3340.760734][T10411] usb 6-1: SerialNumber: syz 06:33:08 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x6cc, 0x0, 0x0, 0x2000000000000012) 06:33:08 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x6cc, 0x0, 0x2000000000000012) [ 3341.405223][T10411] usbhid 6-1:17.0: can't add hid device: -71 [ 3341.412919][T10411] usbhid: probe of 6-1:17.0 failed with error -71 [ 3341.458848][T10411] usb 6-1: USB disconnect, device number 124 06:33:09 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x6ae, 0x0, 0x2000000000000012) 06:33:09 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x6ea, 0x0, 0x0, 0x2000000000000012) 06:33:09 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340160000010109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0xc8, &(0x7f0000000240)={{0x12, 0x1, 0x141, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x2, 0x1, 0x0, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "cbc912e0"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0x65, 0x58}, {0x6, 0x24, 0x1a, 0x8f, 0x8}, [@mdlm_detail={0x47, 0x24, 0x13, 0xe, "a75ce59c4b371b1f512b97d5680b2539be3b190fa696ec50e73c6bda63e3dd5cfc9525e472ad72f12b7d8268a07f6888f3f9b09a8e5fce4a4d29d2fdd1dcf4f7e5d35c"}, @acm={0x4, 0x24, 0x2, 0x1}, @acm={0x4, 0x24, 0x2, 0xa}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x63, 0xde, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x8, 0x8, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x81, 0x8}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x4, 0x4, 0x6, 0x20, 0x3d}, 0x25, &(0x7f00000000c0)={0x5, 0xf, 0x25, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x6, 0x3, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0x42, 0x40, 0x0, 0xa84, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x1, 0x6, 0x1, 0x80}]}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x240f}}]}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000500)={0x0, 0x1, 0x1f4bd75c8c42ee4, {0x102, 0xd, "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"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) [ 3342.075142][T10411] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 3342.445494][T10411] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3342.484638][T10411] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3342.615349][T10411] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice=16.40 [ 3342.635275][T10411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3342.691825][T10411] usb 6-1: SerialNumber: syz [ 3342.873511][ T7542] usb 1-1: USB disconnect, device number 77 [ 3343.345208][T10411] usbhid 6-1:17.0: can't add hid device: -71 [ 3343.351268][T10411] usbhid: probe of 6-1:17.0 failed with error -71 [ 3343.362900][T10411] usb 6-1: USB disconnect, device number 125 [ 3348.565156][T17901] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 3348.925288][T17901] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3348.936504][T17901] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3348.946634][T17901] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3348.956257][T17901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3349.213347][T20357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3349.224826][T20357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3349.228342][T20356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3349.242854][T20356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3349.498166][T17901] wacom 0003:056A:0331.00D1: item fetching failed at offset 0/1 [ 3349.509101][T17901] wacom 0003:056A:0331.00D1: parse failed [ 3349.514849][T17901] wacom: probe of 0003:056A:0331.00D1 failed with error -22 06:33:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902630002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00000007240a0700000009058103ff030100000904010000020d00000000010102020d000009058202cf0500000009050301ffea000000"], 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_disconnect(r1) (async) syz_usb_control_io(r1, &(0x7f0000000540)={0x8, &(0x7f0000000080)={0x40, 0x9, 0x4, {0x4, 0x23, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0xfffffffffffffec4, 0x18cc) (async) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00032800000028301d5dc2f0531cdd22689fc57d97606cf2a1b93dde73dba43b6368425212bc884cc88617319b60"], &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000000c0)={0x0, 0x22, 0x6, {[@local=@item_4={0x3, 0x2, 0x4, "fd8ff16e"}, @global=@item_012={0x0, 0x1, 0x4}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffe, 0x7, 0x1, {0x22, 0x1cc}}}}, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x20, 0x15, 0x3, "46d481"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000002c0)={0x20, 0x1, 0xc1, "52d23f6b2f0ce79655c7a396c44a7de43f2a914f760817f3a5df50e642f55e1e85f1e4bd08cb3ccf5986bffd5698b49c830135776baf5ddc77c2cf58bf3d3dde74605233fbc7db3b6a90478ef7c9d0cbe28253f82d99c1221aba1abea00c2a24ffd3b257d7d29d1cf7a93ae49a23ec1ce51a991d6a8d733351e01a374d042ae63e8a29900d7a3fd8dfca3121c0e79546582f33d417dc5ac48b9a42ccdaa22e5cb59fdd32efcacd5e2200376be2423acb7f9385934a8186d938773a5b772d033d14"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x41}}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) 06:33:19 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x6ea, 0x0, 0x2000000000000012) 06:33:19 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x6cc, 0x0, 0x2000000000000012) 06:33:19 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x700, 0x0, 0x0, 0x2000000000000012) 06:33:19 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:33:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) [ 3351.292237][ T7542] usb 4-1: USB disconnect, device number 60 [ 3351.595196][T15505] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 3351.615172][T17901] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 3351.985400][T15505] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3352.013095][T15505] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3352.025191][T17901] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 3352.072295][T15505] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3352.102233][T17901] usb 1-1: config 17 has 0 interfaces, different from the descriptor's value: 1 [ 3352.118121][T15505] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:33:20 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x6ea, 0x0, 0x2000000000000012) [ 3352.187558][T17901] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 06:33:20 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x700, 0x0, 0x2000000000000012) 06:33:20 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x708, 0x0, 0x0, 0x2000000000000012) [ 3352.237877][T17901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3352.715258][T15505] usbhid 6-1:17.0: can't add hid device: -71 [ 3352.730126][T15505] usbhid: probe of 6-1:17.0 failed with error -71 [ 3352.893701][T15505] usb 6-1: USB disconnect, device number 126 06:33:21 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) 06:33:21 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x708, 0x0, 0x2000000000000012) 06:33:21 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x700, 0x0, 0x2000000000000012) [ 3353.201411][T20390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3353.224578][T20390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3353.455346][T10656] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 3353.825360][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3353.918299][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3353.974335][T10656] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3354.027883][T10656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3354.312213][T15505] usb 1-1: USB disconnect, device number 78 [ 3354.445237][T10656] usbhid 6-1:17.0: can't add hid device: -71 [ 3354.452061][T10656] usbhid: probe of 6-1:17.0 failed with error -71 [ 3354.460620][T10656] usb 6-1: USB disconnect, device number 127 [ 3359.925216][T15505] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 3360.285293][T15505] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3360.296505][T15505] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3360.306951][T15505] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3360.316519][T15505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:33:28 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x726, 0x0, 0x2000000000000012) 06:33:28 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x726, 0x0, 0x0, 0x2000000000000012) 06:33:28 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x708, 0x0, 0x2000000000000012) 06:33:28 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:33:28 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="0010ee000000ee214dd43637daf780b396b1ef5375fb00d2d88cb0dba7a321e21827d113424d8ff6aff5f68ab4a08e3c1c94423a3ef71b443733dbecd35328f105f67e7ea2e427792772346c2d86dd4650ed97745d6760143a58d05b6b1b4096f2a88f320f0da00519e5776edd2eff7f1eb2b34604d22b3ba98f696fbeb8d4a2fc485bdf6f8dfbc41a39351c804ff51de4a42002049f748e7008898489a0d863b1cdf761c8b252a88d70860ce213566ea14b2164b7b8470218f3e9ed7f1694de75d991286415ff5f60f08eb68a79af47574f54b9b20880cb24464ad13a1438c9f6c34b2e7d9e2270dfcc269aefb37e26aa00025e"], &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2854}}, &(0x7f0000000340)={0x0, 0xf, 0xcc, {0x5, 0xf, 0xcc, 0x5, [@generic={0x7f, 0x10, 0xb, "1cc53140ba13b11795c57be16a7541d23a902641c31189b03569a73235146a147af8a7959ac645e6ade6d9207ff2f0afc77c1948ce2eed5a5f9cac169f76cf21aa4ba6d385ddf879a34084e7ec82fde1109b5a33fe53525fa51e53b0306ee40a0e46b6b71d6e69561f188be5469fff76a0dd93e845fea30cdaae55cb"}, @generic={0x2e, 0x10, 0x1, "ba0d2c0ec1d80eba2c5f1c8111e7fee864736d200b7fc27435d0008bedd884defc69074e291bf190e11604"}, @ss_container_id={0x14, 0x10, 0x4, 0xf9, "ed787fc3f28deda877cd363feb6d1014"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0x70, 0x1f, "40ef9e9a", "06354687"}}, &(0x7f00000000c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc1, 0x8, 0x4, 0x6d, 0x9, 0x81, 0x4}}}, &(0x7f0000000800)={0x84, &(0x7f0000000180)={0x40, 0x17, 0x8, "ab78abf8e50334e2"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x200, 0x2}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0xd1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "8931"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "11f2"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0xac}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xa, 0xfc, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x81, 0x7d, 0x10}}]}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x201, 0x3, 0xff, 0xf9, 0x40, 0x7}, 0x1da, &(0x7f0000000940)={0x5, 0xf, 0x1da, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "2d875bc074b2b87031dab6008347ba22"}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0xc3fe, 0xf, 0xdab, [0x3f00]}, @generic={0xcd, 0x10, 0x2, "73cb801b1c1e25c85618da9c36d33585ff76329c0d0fe9fc4680b15351ba22eb03eb7a9d3db98b363fd23876f3d5d0ea89299b4a62833be89bd686992c7a147b7606c69410ef49aee778cf3d10ebf5462e9ba27117ef23848cc7da9e751ef8977ce21db92b236082698edeb9858ee42ddfc9b92ee5f8cc37723e9f9068cd8e068dbfb04bf49ae96bde2df9f4ec42d939853a1efcdcf74756544535967a60a7581c23d29669766a759d4743d9a1884bafb8becb348544e42c43f84b6d2b737706fa20833c037c60d634c2"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x3, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6c, 0x48, 0x800}, @generic={0xd3, 0x10, 0x4, "d6bbdc3ab2a1d00c7704fdda6cb2a3ea6ec755d12ffa211b42bcc29dd33f12c72b32a65e8c73ffde123f1060e0dc6170c5ae87071f98efebb531f79fb2c73bc161c41a4c8d6caff4fcf04ccaa6cb710a17742e2413f65cf6749d57205c0a878d58acbc3dd810d9759fe62f09847c11630fe05b3a635fd940a829be1be586b1b0253a67ec538ebf9da3965680f20cac5d84bf2e408e8f1e0e50069ad2e09c17a676e22231e246d3e57d6df4c468f70d876c8a324b4d0f4a9a9714ddf8cb4023c04d1c7daa45276c4fea335964cae704f2"}]}, 0x6, [{0xdb, &(0x7f0000000b40)=@string={0xdb, 0x3, "6341b8b8d715b66372cbb2069f30fe6f820a67ff69a5e71cd5d8b9abd3b15a7d0e948c981c12b137741d0bf85ba7a764189ed2f4fe02003b9d2b4bdc4e15056faaa996277a3e462be02a462e3b088a9f2cfbd243400a57f57dc83d5a2e690b5eb08cd7e09d06f965656565e25a8a04d7a09a18aafc1830339bc2ba059331ab2a2de73c6fbccde5c2ea97d26e8d08c049c9927b73148abd691a71899e2c6d9029cafb61a2d2a9a7c2369d994fb294b05734aa2b32535a664709ed99c010ed857f09d4191a9d1c1403fcf60b6b38fd7e9e7b13547fa13c44f88c"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4}}, {0xe9, &(0x7f0000000c80)=@string={0xe9, 0x3, "7cfa50117e941a6d09d5181005d39d2fc777dd9726b039eff8c05b1d3baef5fa5577f30ab0bf82ee5eda2c5f2f23123d7a3ef3f612925bb922064bd5c678d02a6383233b3c50933f4d56f3168afc0559434456e847377c58494ef0a714d2d790a5cd14823f03b8fd027f9e5c62ff2f160b27cf1ea9a7f7b1a95a032e73bb13fdc23bfa397575bb48b0f79b296b9ae9f5783f95ccd7d8cb00fef5f55160e3360a21384b40e4b999727e964046d37b37a4eb3a4a288088ad585e2840bc03e2650c4f3e11e7c9cf3145a430fcb9e09008dd3a7103b2860832fb4c2156d22d9f42eadc22d20622a208"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x3b8, &(0x7f0000000ec0)={[{0x60, 0x4e00, "acaeacfb4b9890abf8e5175c1c06ad8c1bbaef4d3263441510d4922938d29c45372e1b9a5d4e9857488c324ad800c980a24125d4969d6e203d22286af7ca75c7f836cf8022c2c3ff32df6943f6b4fc68bad52dc640e7cfe23c85821b73aab849"}, {0x1, 0x4e00, "9d"}, {0xc6, 0x4e00, "7bfd2be0e2564a4e74f483a8f5a67a2f758d945246044cf5d6f95a9c9cb5788109ff203b4c7b81e4e44fcdac45b57d24cecb6679915460b3f3879a30ca5c2fdd37508f4869dc47976ea0d2990817911cdfbed878fc18ec6e98dea6ab5ba9cd3a5b95d93a023abe65c37046e5b7c9871cb1758133ca06d21de082f9415095bd6d1063c5365c68613d0f831354d1acd8a42fa68556ab97c52d907a00f9c0d3a4893e78ace1f90a26c6fa1f3a4d322eb6cf64b32ec80de813532771e68a99596a6187e2e55255cc"}, {0x64, 0x4e00, "63d5474107878066d948e869c7204db8e1d6e290a814c3035e144cb764d3615af08bd0e534e4c47b783ab609e29eeb32548f28c7eaf93f03bb25c2d84e18ddd596b0031f51796e2129ff21671c33e9899ccbe89a32f2acd472bae47c997e80a53f25ea01"}, {0x6f, 0x4e00, "8d0826d614a27b50337fe764ed290e45e4932ff59a8422394c125d4e8ac8a485702ca0734bc9bede979048653bfc05a30086941f53a44fd4e3ec6d8ed3f80b3ee0d85c93e1191ebbd331e35ab18cb832002c08ebbfaab352b42b7c08c3b64532fac9bc4f74ac002c99a7e23f7fcc35"}, {0xb5, 0x4e00, "b5dfa0a937dcb4c9c079b1d1d22660158f66614ab3049b129179ae2bd8a868a3bb94ca9771b093f627be6101327d74ee5a123382e49a2151034b4a16ca4eb0558419854dbdf85717780647e65e008828095ce4a70fd53c34c08450387f912f305d0c24339c203fbaf2e0e0abe2b6372ca347d036966b7851af72dbe8323bebd6bcb98147ad9a670be9531c6e29c00788494293f707a404754b1a071e20d0329150cb2508f30cbf46e87c4f1fc356d485cc62123220"}, {0x3e, 0x4e00, "adf6caa6d88b669a4beb2acb532d1f082d0c85cb0e31a37fd2761428719aa99ccabae6c72b70ae84c0e9d77ccf2d95a0a0b880b006f6423557cef86f6451"}, {0x14, 0x4e00, "06a8b216398d127410321a4b97de8948c40847b4"}, {0x88, 0x4e00, "e3c77e9573b819a550c822619f205d2c7cf39a70243f9b4dedc200d602bf93e3a22f85543115fd617883b1d7aab7a352c73be1febed76ade4cfc5e61875e9fe8772655852a9edbf954bd85a8f20640a632a512678209c6a119fb032fdfbe9e6aad47fe95103aec40853392e264c66a453c2198b3852d238b628adcb485ba1defb9bb52b005a2eb0e"}]}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) 06:33:28 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) [ 3360.571580][T20403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3360.582319][T20403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3360.585294][T20404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3360.600591][T20404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3360.657492][T20415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3360.685235][T15505] usbhid 4-1:17.0: can't add hid device: -71 [ 3360.691363][T15505] usbhid: probe of 4-1:17.0 failed with error -71 [ 3360.700446][T20415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3360.717572][T15505] usb 4-1: USB disconnect, device number 61 [ 3360.945286][T10656] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 3360.952865][T18058] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 3361.325353][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3361.336517][T18058] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 3361.380169][T18058] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3361.398087][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3361.471099][T10656] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3361.494279][T18058] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 06:33:29 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x726, 0x0, 0x2000000000000012) 06:33:29 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x744, 0x0, 0x0, 0x2000000000000012) [ 3361.518597][T10656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3361.527122][T18058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:33:29 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x744, 0x0, 0x2000000000000012) [ 3361.587613][T18058] usbhid 1-1:17.0: couldn't find an input interrupt endpoint [ 3361.875560][T10656] usbhid 6-1:17.0: can't add hid device: -71 [ 3361.881895][T10656] usbhid: probe of 6-1:17.0 failed with error -71 [ 3361.920068][T10656] usb 6-1: USB disconnect, device number 2 06:33:30 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000), 0x9, 0x7) 06:33:30 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x762, 0x0, 0x2000000000000012) 06:33:30 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x762, 0x0, 0x0, 0x2000000000000012) 06:33:30 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x744, 0x0, 0x2000000000000012) [ 3362.635332][T10656] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 3363.005218][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3363.016310][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3363.026909][T10656] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3363.044539][T10656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:33:31 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x780, 0x0, 0x0, 0x2000000000000012) 06:33:31 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x762, 0x0, 0x2000000000000012) [ 3363.603918][T10656] wacom 0003:056A:0331.00D2: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 06:33:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) [ 3363.647875][T17901] usb 1-1: USB disconnect, device number 79 [ 3363.811359][T10656] usb 6-1: USB disconnect, device number 3 [ 3364.085298][T17901] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 3364.505206][T17901] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 3364.515760][T17901] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3364.528942][T17901] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3364.538198][T17901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3364.587903][T17901] usbhid 1-1:17.0: couldn't find an input interrupt endpoint [ 3366.690996][T10656] usb 1-1: USB disconnect, device number 80 [ 3369.275204][T17901] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 3369.645520][T17901] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3369.656686][T17901] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3369.666619][T17901] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3369.675932][T17901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3370.158361][T20464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3370.170045][T20464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3370.180853][T20464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3370.189615][T20464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3370.440305][T17901] wacom 0003:056A:0331.00D3: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 3370.630774][T20464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3370.640005][T20464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3370.651185][T17901] usb 4-1: USB disconnect, device number 62 06:33:39 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000), 0x9, 0x7) 06:33:39 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x780, 0x0, 0x2000000000000012) 06:33:39 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x79e, 0x0, 0x0, 0x2000000000000012) 06:33:39 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x780, 0x0, 0x2000000000000012) 06:33:39 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009"], 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x400448dd, 0x0) 06:33:39 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) syz_usb_disconnect(r1) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="0010ee000000ee214dd43637daf780b396b1ef5375fb00d2d88cb0dba7a321e21827d113424d8ff6aff5f68ab4a08e3c1c94423a3ef71b443733dbecd35328f105f67e7ea2e427792772346c2d86dd4650ed97745d6760143a58d05b6b1b4096f2a88f320f0da00519e5776edd2eff7f1eb2b34604d22b3ba98f696fbeb8d4a2fc485bdf6f8dfbc41a39351c804ff51de4a42002049f748e7008898489a0d863b1cdf761c8b252a88d70860ce213566ea14b2164b7b8470218f3e9ed7f1694de75d991286415ff5f60f08eb68a79af47574f54b9b20880cb24464ad13a1438c9f6c34b2e7d9e2270dfcc269aefb37e26aa00025e"], &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2854}}, &(0x7f0000000340)={0x0, 0xf, 0xcc, {0x5, 0xf, 0xcc, 0x5, [@generic={0x7f, 0x10, 0xb, "1cc53140ba13b11795c57be16a7541d23a902641c31189b03569a73235146a147af8a7959ac645e6ade6d9207ff2f0afc77c1948ce2eed5a5f9cac169f76cf21aa4ba6d385ddf879a34084e7ec82fde1109b5a33fe53525fa51e53b0306ee40a0e46b6b71d6e69561f188be5469fff76a0dd93e845fea30cdaae55cb"}, @generic={0x2e, 0x10, 0x1, "ba0d2c0ec1d80eba2c5f1c8111e7fee864736d200b7fc27435d0008bedd884defc69074e291bf190e11604"}, @ss_container_id={0x14, 0x10, 0x4, 0xf9, "ed787fc3f28deda877cd363feb6d1014"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0x70, 0x1f, "40ef9e9a", "06354687"}}, &(0x7f00000000c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc1, 0x8, 0x4, 0x6d, 0x9, 0x81, 0x4}}}, &(0x7f0000000800)={0x84, &(0x7f0000000180)={0x40, 0x17, 0x8, "ab78abf8e50334e2"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x200, 0x2}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0xd1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "8931"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "11f2"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0xac}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xa, 0xfc, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x81, 0x7d, 0x10}}]}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x201, 0x3, 0xff, 0xf9, 0x40, 0x7}, 0x1da, &(0x7f0000000940)={0x5, 0xf, 0x1da, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "2d875bc074b2b87031dab6008347ba22"}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0xc3fe, 0xf, 0xdab, [0x3f00]}, @generic={0xcd, 0x10, 0x2, "73cb801b1c1e25c85618da9c36d33585ff76329c0d0fe9fc4680b15351ba22eb03eb7a9d3db98b363fd23876f3d5d0ea89299b4a62833be89bd686992c7a147b7606c69410ef49aee778cf3d10ebf5462e9ba27117ef23848cc7da9e751ef8977ce21db92b236082698edeb9858ee42ddfc9b92ee5f8cc37723e9f9068cd8e068dbfb04bf49ae96bde2df9f4ec42d939853a1efcdcf74756544535967a60a7581c23d29669766a759d4743d9a1884bafb8becb348544e42c43f84b6d2b737706fa20833c037c60d634c2"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x3, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6c, 0x48, 0x800}, @generic={0xd3, 0x10, 0x4, "d6bbdc3ab2a1d00c7704fdda6cb2a3ea6ec755d12ffa211b42bcc29dd33f12c72b32a65e8c73ffde123f1060e0dc6170c5ae87071f98efebb531f79fb2c73bc161c41a4c8d6caff4fcf04ccaa6cb710a17742e2413f65cf6749d57205c0a878d58acbc3dd810d9759fe62f09847c11630fe05b3a635fd940a829be1be586b1b0253a67ec538ebf9da3965680f20cac5d84bf2e408e8f1e0e50069ad2e09c17a676e22231e246d3e57d6df4c468f70d876c8a324b4d0f4a9a9714ddf8cb4023c04d1c7daa45276c4fea335964cae704f2"}]}, 0x6, [{0xdb, &(0x7f0000000b40)=@string={0xdb, 0x3, "6341b8b8d715b66372cbb2069f30fe6f820a67ff69a5e71cd5d8b9abd3b15a7d0e948c981c12b137741d0bf85ba7a764189ed2f4fe02003b9d2b4bdc4e15056faaa996277a3e462be02a462e3b088a9f2cfbd243400a57f57dc83d5a2e690b5eb08cd7e09d06f965656565e25a8a04d7a09a18aafc1830339bc2ba059331ab2a2de73c6fbccde5c2ea97d26e8d08c049c9927b73148abd691a71899e2c6d9029cafb61a2d2a9a7c2369d994fb294b05734aa2b32535a664709ed99c010ed857f09d4191a9d1c1403fcf60b6b38fd7e9e7b13547fa13c44f88c"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4}}, {0xe9, &(0x7f0000000c80)=@string={0xe9, 0x3, "7cfa50117e941a6d09d5181005d39d2fc777dd9726b039eff8c05b1d3baef5fa5577f30ab0bf82ee5eda2c5f2f23123d7a3ef3f612925bb922064bd5c678d02a6383233b3c50933f4d56f3168afc0559434456e847377c58494ef0a714d2d790a5cd14823f03b8fd027f9e5c62ff2f160b27cf1ea9a7f7b1a95a032e73bb13fdc23bfa397575bb48b0f79b296b9ae9f5783f95ccd7d8cb00fef5f55160e3360a21384b40e4b999727e964046d37b37a4eb3a4a288088ad585e2840bc03e2650c4f3e11e7c9cf3145a430fcb9e09008dd3a7103b2860832fb4c2156d22d9f42eadc22d20622a208"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x3b8, &(0x7f0000000ec0)={[{0x60, 0x4e00, "acaeacfb4b9890abf8e5175c1c06ad8c1bbaef4d3263441510d4922938d29c45372e1b9a5d4e9857488c324ad800c980a24125d4969d6e203d22286af7ca75c7f836cf8022c2c3ff32df6943f6b4fc68bad52dc640e7cfe23c85821b73aab849"}, {0x1, 0x4e00, "9d"}, {0xc6, 0x4e00, "7bfd2be0e2564a4e74f483a8f5a67a2f758d945246044cf5d6f95a9c9cb5788109ff203b4c7b81e4e44fcdac45b57d24cecb6679915460b3f3879a30ca5c2fdd37508f4869dc47976ea0d2990817911cdfbed878fc18ec6e98dea6ab5ba9cd3a5b95d93a023abe65c37046e5b7c9871cb1758133ca06d21de082f9415095bd6d1063c5365c68613d0f831354d1acd8a42fa68556ab97c52d907a00f9c0d3a4893e78ace1f90a26c6fa1f3a4d322eb6cf64b32ec80de813532771e68a99596a6187e2e55255cc"}, {0x64, 0x4e00, "63d5474107878066d948e869c7204db8e1d6e290a814c3035e144cb764d3615af08bd0e534e4c47b783ab609e29eeb32548f28c7eaf93f03bb25c2d84e18ddd596b0031f51796e2129ff21671c33e9899ccbe89a32f2acd472bae47c997e80a53f25ea01"}, {0x6f, 0x4e00, "8d0826d614a27b50337fe764ed290e45e4932ff59a8422394c125d4e8ac8a485702ca0734bc9bede979048653bfc05a30086941f53a44fd4e3ec6d8ed3f80b3ee0d85c93e1191ebbd331e35ab18cb832002c08ebbfaab352b42b7c08c3b64532fac9bc4f74ac002c99a7e23f7fcc35"}, {0xb5, 0x4e00, "b5dfa0a937dcb4c9c079b1d1d22660158f66614ab3049b129179ae2bd8a868a3bb94ca9771b093f627be6101327d74ee5a123382e49a2151034b4a16ca4eb0558419854dbdf85717780647e65e008828095ce4a70fd53c34c08450387f912f305d0c24339c203fbaf2e0e0abe2b6372ca347d036966b7851af72dbe8323bebd6bcb98147ad9a670be9531c6e29c00788494293f707a404754b1a071e20d0329150cb2508f30cbf46e87c4f1fc356d485cc62123220"}, {0x3e, 0x4e00, "adf6caa6d88b669a4beb2acb532d1f082d0c85cb0e31a37fd2761428719aa99ccabae6c72b70ae84c0e9d77ccf2d95a0a0b880b006f6423557cef86f6451"}, {0x14, 0x4e00, "06a8b216398d127410321a4b97de8948c40847b4"}, {0x88, 0x4e00, "e3c77e9573b819a550c822619f205d2c7cf39a70243f9b4dedc200d602bf93e3a22f85543115fd617883b1d7aab7a352c73be1febed76ade4cfc5e61875e9fe8772655852a9edbf954bd85a8f20640a632a512678209c6a119fb032fdfbe9e6aad47fe95103aec40853392e264c66a453c2198b3852d238b628adcb485ba1defb9bb52b005a2eb0e"}]}) r2 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(0x0, 0x0, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x75, &(0x7f0000002e00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x5cf}}}}}}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109021b0001000000000904000001c6cbe8000905870301"], 0x0) (async) syz_usb_disconnect(r1) (async) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="0010ee000000ee214dd43637daf780b396b1ef5375fb00d2d88cb0dba7a321e21827d113424d8ff6aff5f68ab4a08e3c1c94423a3ef71b443733dbecd35328f105f67e7ea2e427792772346c2d86dd4650ed97745d6760143a58d05b6b1b4096f2a88f320f0da00519e5776edd2eff7f1eb2b34604d22b3ba98f696fbeb8d4a2fc485bdf6f8dfbc41a39351c804ff51de4a42002049f748e7008898489a0d863b1cdf761c8b252a88d70860ce213566ea14b2164b7b8470218f3e9ed7f1694de75d991286415ff5f60f08eb68a79af47574f54b9b20880cb24464ad13a1438c9f6c34b2e7d9e2270dfcc269aefb37e26aa00025e"], &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2854}}, &(0x7f0000000340)={0x0, 0xf, 0xcc, {0x5, 0xf, 0xcc, 0x5, [@generic={0x7f, 0x10, 0xb, "1cc53140ba13b11795c57be16a7541d23a902641c31189b03569a73235146a147af8a7959ac645e6ade6d9207ff2f0afc77c1948ce2eed5a5f9cac169f76cf21aa4ba6d385ddf879a34084e7ec82fde1109b5a33fe53525fa51e53b0306ee40a0e46b6b71d6e69561f188be5469fff76a0dd93e845fea30cdaae55cb"}, @generic={0x2e, 0x10, 0x1, "ba0d2c0ec1d80eba2c5f1c8111e7fee864736d200b7fc27435d0008bedd884defc69074e291bf190e11604"}, @ss_container_id={0x14, 0x10, 0x4, 0xf9, "ed787fc3f28deda877cd363feb6d1014"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x2, 0x70, 0x1f, "40ef9e9a", "06354687"}}, &(0x7f00000000c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xc1, 0x8, 0x4, 0x6d, 0x9, 0x81, 0x4}}}, &(0x7f0000000800)={0x84, &(0x7f0000000180)={0x40, 0x17, 0x8, "ab78abf8e50334e2"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x200, 0x2}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0xd1}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "8931"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "11f2"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0xac}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xff}}) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xa, 0xfc, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x81, 0x7d, 0x10}}]}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x201, 0x3, 0xff, 0xf9, 0x40, 0x7}, 0x1da, &(0x7f0000000940)={0x5, 0xf, 0x1da, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "2d875bc074b2b87031dab6008347ba22"}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0xc3fe, 0xf, 0xdab, [0x3f00]}, @generic={0xcd, 0x10, 0x2, "73cb801b1c1e25c85618da9c36d33585ff76329c0d0fe9fc4680b15351ba22eb03eb7a9d3db98b363fd23876f3d5d0ea89299b4a62833be89bd686992c7a147b7606c69410ef49aee778cf3d10ebf5462e9ba27117ef23848cc7da9e751ef8977ce21db92b236082698edeb9858ee42ddfc9b92ee5f8cc37723e9f9068cd8e068dbfb04bf49ae96bde2df9f4ec42d939853a1efcdcf74756544535967a60a7581c23d29669766a759d4743d9a1884bafb8becb348544e42c43f84b6d2b737706fa20833c037c60d634c2"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x3, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6c, 0x48, 0x800}, @generic={0xd3, 0x10, 0x4, "d6bbdc3ab2a1d00c7704fdda6cb2a3ea6ec755d12ffa211b42bcc29dd33f12c72b32a65e8c73ffde123f1060e0dc6170c5ae87071f98efebb531f79fb2c73bc161c41a4c8d6caff4fcf04ccaa6cb710a17742e2413f65cf6749d57205c0a878d58acbc3dd810d9759fe62f09847c11630fe05b3a635fd940a829be1be586b1b0253a67ec538ebf9da3965680f20cac5d84bf2e408e8f1e0e50069ad2e09c17a676e22231e246d3e57d6df4c468f70d876c8a324b4d0f4a9a9714ddf8cb4023c04d1c7daa45276c4fea335964cae704f2"}]}, 0x6, [{0xdb, &(0x7f0000000b40)=@string={0xdb, 0x3, "6341b8b8d715b66372cbb2069f30fe6f820a67ff69a5e71cd5d8b9abd3b15a7d0e948c981c12b137741d0bf85ba7a764189ed2f4fe02003b9d2b4bdc4e15056faaa996277a3e462be02a462e3b088a9f2cfbd243400a57f57dc83d5a2e690b5eb08cd7e09d06f965656565e25a8a04d7a09a18aafc1830339bc2ba059331ab2a2de73c6fbccde5c2ea97d26e8d08c049c9927b73148abd691a71899e2c6d9029cafb61a2d2a9a7c2369d994fb294b05734aa2b32535a664709ed99c010ed857f09d4191a9d1c1403fcf60b6b38fd7e9e7b13547fa13c44f88c"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4}}, {0xe9, &(0x7f0000000c80)=@string={0xe9, 0x3, "7cfa50117e941a6d09d5181005d39d2fc777dd9726b039eff8c05b1d3baef5fa5577f30ab0bf82ee5eda2c5f2f23123d7a3ef3f612925bb922064bd5c678d02a6383233b3c50933f4d56f3168afc0559434456e847377c58494ef0a714d2d790a5cd14823f03b8fd027f9e5c62ff2f160b27cf1ea9a7f7b1a95a032e73bb13fdc23bfa397575bb48b0f79b296b9ae9f5783f95ccd7d8cb00fef5f55160e3360a21384b40e4b999727e964046d37b37a4eb3a4a288088ad585e2840bc03e2650c4f3e11e7c9cf3145a430fcb9e09008dd3a7103b2860832fb4c2156d22d9f42eadc22d20622a208"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x408}}]}) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x3b8, &(0x7f0000000ec0)={[{0x60, 0x4e00, "acaeacfb4b9890abf8e5175c1c06ad8c1bbaef4d3263441510d4922938d29c45372e1b9a5d4e9857488c324ad800c980a24125d4969d6e203d22286af7ca75c7f836cf8022c2c3ff32df6943f6b4fc68bad52dc640e7cfe23c85821b73aab849"}, {0x1, 0x4e00, "9d"}, {0xc6, 0x4e00, "7bfd2be0e2564a4e74f483a8f5a67a2f758d945246044cf5d6f95a9c9cb5788109ff203b4c7b81e4e44fcdac45b57d24cecb6679915460b3f3879a30ca5c2fdd37508f4869dc47976ea0d2990817911cdfbed878fc18ec6e98dea6ab5ba9cd3a5b95d93a023abe65c37046e5b7c9871cb1758133ca06d21de082f9415095bd6d1063c5365c68613d0f831354d1acd8a42fa68556ab97c52d907a00f9c0d3a4893e78ace1f90a26c6fa1f3a4d322eb6cf64b32ec80de813532771e68a99596a6187e2e55255cc"}, {0x64, 0x4e00, "63d5474107878066d948e869c7204db8e1d6e290a814c3035e144cb764d3615af08bd0e534e4c47b783ab609e29eeb32548f28c7eaf93f03bb25c2d84e18ddd596b0031f51796e2129ff21671c33e9899ccbe89a32f2acd472bae47c997e80a53f25ea01"}, {0x6f, 0x4e00, "8d0826d614a27b50337fe764ed290e45e4932ff59a8422394c125d4e8ac8a485702ca0734bc9bede979048653bfc05a30086941f53a44fd4e3ec6d8ed3f80b3ee0d85c93e1191ebbd331e35ab18cb832002c08ebbfaab352b42b7c08c3b64532fac9bc4f74ac002c99a7e23f7fcc35"}, {0xb5, 0x4e00, "b5dfa0a937dcb4c9c079b1d1d22660158f66614ab3049b129179ae2bd8a868a3bb94ca9771b093f627be6101327d74ee5a123382e49a2151034b4a16ca4eb0558419854dbdf85717780647e65e008828095ce4a70fd53c34c08450387f912f305d0c24339c203fbaf2e0e0abe2b6372ca347d036966b7851af72dbe8323bebd6bcb98147ad9a670be9531c6e29c00788494293f707a404754b1a071e20d0329150cb2508f30cbf46e87c4f1fc356d485cc62123220"}, {0x3e, 0x4e00, "adf6caa6d88b669a4beb2acb532d1f082d0c85cb0e31a37fd2761428719aa99ccabae6c72b70ae84c0e9d77ccf2d95a0a0b880b006f6423557cef86f6451"}, {0x14, 0x4e00, "06a8b216398d127410321a4b97de8948c40847b4"}, {0x88, 0x4e00, "e3c77e9573b819a550c822619f205d2c7cf39a70243f9b4dedc200d602bf93e3a22f85543115fd617883b1d7aab7a352c73be1febed76ade4cfc5e61875e9fe8772655852a9edbf954bd85a8f20640a632a512678209c6a119fb032fdfbe9e6aad47fe95103aec40853392e264c66a453c2198b3852d238b628adcb485ba1defb9bb52b005a2eb0e"}]}) (async) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async) poll(0x0, 0x0, 0x1) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, 0x0) (async) [ 3371.485205][T17901] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 3371.492774][T10411] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 3371.875425][T17901] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3371.886690][T10411] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 3371.920662][T10411] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3371.940140][T17901] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3371.976130][T17901] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3371.985799][T10411] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 3371.995407][T17901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3372.003698][T10411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:33:40 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x79e, 0x0, 0x2000000000000012) [ 3372.057993][T10411] usbhid 1-1:17.0: couldn't find an input interrupt endpoint 06:33:40 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x79e, 0x0, 0x2000000000000012) 06:33:40 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x7bc, 0x0, 0x0, 0x2000000000000012) [ 3372.506712][T17901] wacom 0003:056A:0331.00D4: hidraw0: USB HID v6.00 Device [HID 056a:0331] on usb-dummy_hcd.5-1/input0 [ 3372.695054][T15505] usb 6-1: USB disconnect, device number 4 06:33:41 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x7bc, 0x0, 0x2000000000000012) 06:33:41 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x7bc, 0x0, 0x2000000000000012) 06:33:41 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x7da, 0x0, 0x0, 0x2000000000000012) 06:33:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) poll(&(0x7f0000000000), 0x9, 0x7) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400011100000009040000010301000009210006010122010009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "5585"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) (async) poll(&(0x7f0000000000), 0x9, 0x7) (async) [ 3373.525197][T10656] usb 6-1: new high-speed USB device number 5 using dummy_hcd 06:33:41 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xfffffe8a) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x7da, 0x0, 0x2000000000000012) [ 3373.925488][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3373.953181][T10656] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3373.986836][T10656] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 06:33:42 executing program 4: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1b3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe8a) getuid() setreuid(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0x7f8, 0x0, 0x0, 0x2000000000000012) [ 3374.051568][T10656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 06:33:42 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00') shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000a80)={{0x2, 0xee00}, 0xc5b, 0x0, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_io_uring_setup(0x2d07, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000fea000/0x13000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000480), 0x9f1c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r6 = getgid() syz_io_uring_submit(0x0, 0x0, &(0x7f0000000800)=@IORING_OP_SENDMSG={0x9, 0x6a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0}}, 0x7f) sendto$inet(r5, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000003c0)=ANY=[@ANYRES32=r6], 0xfffffe8a) newfstatat(0xffffffffffffff9c, &(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40), 0x6000) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000140)=""/30, 0x1e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r0, 0x2ff, 0xa005, 0x7da, 0x0, 0x2000000000000012) [ 3374.190450][T20469] general protection fault, probably for non-canonical address 0xdffffc0000000011: 0000 [#1] PREEMPT SMP KASAN [ 3374.202211][T20469] KASAN: null-ptr-deref in range [0x0000000000000088-0x000000000000008f] [ 3374.210606][T20469] CPU: 1 PID: 20469 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller #0 [ 3374.219284][T20469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/30/2023 [ 3374.229937][T20469] RIP: 0010:__lock_acquire+0xd80/0x5d40 [ 3374.235492][T20469] Code: 55 0f 41 be 01 00 00 00 0f 86 8e 00 00 00 89 05 86 5c 55 0f e9 83 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 c5 32 00 00 48 81 3b a0 a6 10 90 0f 84 52 f3 ff [ 3374.255143][T20469] RSP: 0018:ffffc9000b26f810 EFLAGS: 00010006 [ 3374.261198][T20469] RAX: dffffc0000000000 RBX: 0000000000000088 RCX: 0000000000000000 [ 3374.269158][T20469] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000001 [ 3374.277118][T20469] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 3374.285173][T20469] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3374.293131][T20469] R13: ffff888018c83a80 R14: 0000000000000000 R15: 0000000000000001 [ 3374.301095][T20469] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 3374.310016][T20469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3374.316605][T20469] CR2: 0000000020001000 CR3: 0000000075235000 CR4: 00000000003506e0 [ 3374.324573][T20469] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3374.332552][T20469] DR3: 000000000000003b DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3374.340517][T20469] Call Trace: [ 3374.343794][T20469] [ 3374.346722][T20469] ? kmem_cache_free+0xe9/0x480 [ 3374.351626][T20469] ? stack_trace_save+0x90/0xc0 [ 3374.356475][T20469] ? print_usage_bug.part.0+0x660/0x660 [ 3374.362019][T20469] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3374.367997][T20469] lock_acquire+0x1af/0x520 [ 3374.372497][T20469] ? hidraw_release+0xcd/0x4c0 [ 3374.377317][T20469] ? lock_release+0x670/0x670 [ 3374.381988][T20469] ? down_write+0x14f/0x200 [ 3374.386490][T20469] ? _raw_spin_lock_irqsave+0x52/0x60 [ 3374.391872][T20469] _raw_spin_lock_irqsave+0x3d/0x60 [ 3374.397155][T20469] ? hidraw_release+0xcd/0x4c0 [ 3374.401950][T20469] hidraw_release+0xcd/0x4c0 [ 3374.406539][T20469] ? ima_file_free+0xba/0x420 [ 3374.411258][T20469] __fput+0x27c/0xa90 [ 3374.415243][T20469] ? hidraw_disconnect+0x70/0x70 [ 3374.420196][T20469] task_work_run+0x16f/0x270 [ 3374.424784][T20469] ? task_work_cancel+0x30/0x30 [ 3374.429631][T20469] ? do_raw_spin_unlock+0x175/0x230 [ 3374.434824][T20469] do_exit+0xad3/0x2960 [ 3374.438980][T20469] ? lockdep_hardirqs_on+0x7d/0x100 [ 3374.444191][T20469] ? mm_update_next_owner+0x7b0/0x7b0 [ 3374.449570][T20469] ? preempt_schedule_common+0x45/0xb0 [ 3374.455078][T20469] do_group_exit+0xd4/0x2a0 [ 3374.459592][T20469] get_signal+0x2315/0x25b0 [ 3374.464107][T20469] ? hrtimer_nanosleep+0x1cd/0x430 [ 3374.469221][T20469] ? exit_signals+0x910/0x910 [ 3374.473894][T20469] ? hrtimer_init_sleeper_on_stack+0x90/0x90 [ 3374.479872][T20469] arch_do_signal_or_restart+0x79/0x5c0 [ 3374.485439][T20469] ? get_sigframe_size+0x10/0x10 [ 3374.490400][T20469] ? __x64_sys_clock_nanosleep+0x33f/0x480 [ 3374.496269][T20469] exit_to_user_mode_prepare+0x11f/0x240 [ 3374.501908][T20469] syscall_exit_to_user_mode+0x1d/0x50 [ 3374.507389][T20469] do_syscall_64+0x46/0xb0 [ 3374.511807][T20469] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3374.517694][T20469] RIP: 0033:0x7f7773cb0e91 [ 3374.522099][T20469] Code: Unable to access opcode bytes at 0x7f7773cb0e67. [ 3374.529098][T20469] RSP: 002b:00007f7773ecfb30 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 3374.537499][T20469] RAX: fffffffffffffdfc RBX: 00007f7773dabf80 RCX: 00007f7773cb0e91 [ 3374.545462][T20469] RDX: 00007f7773ecfb70 RSI: 0000000000000000 RDI: 0000000000000000 [ 3374.553430][T20469] RBP: 00007f7773dad980 R08: 0000000000000000 R09: 00007ffe960d7080 [ 3374.561390][T20469] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000337bf9 [ 3374.569377][T20469] R13: 00007f7773ecfc80 R14: 00007f7773dac050 R15: 0000000000000032 [ 3374.577346][T20469] [ 3374.580354][T20469] Modules linked in: [ 3374.584248][T20469] ---[ end trace 0000000000000000 ]--- [ 3374.589703][T20469] RIP: 0010:__lock_acquire+0xd80/0x5d40 [ 3374.595260][T20469] Code: 55 0f 41 be 01 00 00 00 0f 86 8e 00 00 00 89 05 86 5c 55 0f e9 83 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 <80> 3c 02 00 0f 85 c5 32 00 00 48 81 3b a0 a6 10 90 0f 84 52 f3 ff [ 3374.614872][T20469] RSP: 0018:ffffc9000b26f810 EFLAGS: 00010006 [ 3374.620930][T20469] RAX: dffffc0000000000 RBX: 0000000000000088 RCX: 0000000000000000 [ 3374.628890][T20469] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000001 [ 3374.636864][T20469] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 3374.644848][T20469] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 3374.652806][T20469] R13: ffff888018c83a80 R14: 0000000000000000 R15: 0000000000000001 [ 3374.660764][T20469] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 3374.669689][T20469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3374.676279][T20469] CR2: 0000000020001000 CR3: 0000000075235000 CR4: 00000000003506e0 [ 3374.684240][T20469] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3374.692206][T20469] DR3: 000000000000003b DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3374.700168][T20469] Kernel panic - not syncing: Fatal exception [ 3374.706396][T20469] Kernel Offset: disabled [ 3374.710718][T20469] Rebooting in 86400 seconds..