[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 74.000354][ T31] audit: type=1800 audit(1570556871.048:25): pid=10951 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 74.031882][ T31] audit: type=1800 audit(1570556871.078:26): pid=10951 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 74.052068][ T31] audit: type=1800 audit(1570556871.078:27): pid=10951 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.38' (ECDSA) to the list of known hosts. 2019/10/08 17:48:04 fuzzer started 2019/10/08 17:48:09 dialing manager at 10.128.0.26:43589 2019/10/08 17:48:09 syscalls: 2412 2019/10/08 17:48:09 code coverage: enabled 2019/10/08 17:48:09 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/08 17:48:09 extra coverage: enabled 2019/10/08 17:48:09 setuid sandbox: enabled 2019/10/08 17:48:09 namespace sandbox: enabled 2019/10/08 17:48:09 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/08 17:48:09 fault injection: enabled 2019/10/08 17:48:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/08 17:48:09 net packet injection: enabled 2019/10/08 17:48:09 net device setup: enabled 2019/10/08 17:48:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 17:51:36 executing program 0: syzkaller login: [ 300.001132][T11116] IPVS: ftp: loaded support on port[0] = 21 [ 300.143877][T11116] chnl_net:caif_netlink_parms(): no params data found [ 300.197775][T11116] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.206552][T11116] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.215275][T11116] device bridge_slave_0 entered promiscuous mode [ 300.224998][T11116] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.232315][T11116] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.240961][T11116] device bridge_slave_1 entered promiscuous mode [ 300.271781][T11116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.284359][T11116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.317675][T11116] team0: Port device team_slave_0 added [ 300.326725][T11116] team0: Port device team_slave_1 added [ 300.416645][T11116] device hsr_slave_0 entered promiscuous mode [ 300.692887][T11116] device hsr_slave_1 entered promiscuous mode [ 300.851789][T11116] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.862119][T11116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.869834][T11116] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.877078][T11116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.953724][T11116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.973849][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.985613][ T4893] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.994860][ T4893] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.008508][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 301.031113][T11116] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.047894][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.057170][ T4893] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.064410][ T4893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.117813][T11116] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.128287][T11116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.147345][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.156716][ T4893] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.163947][ T4893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.174845][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.184981][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.194493][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.203974][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.215724][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.224649][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.261785][T11116] 8021q: adding VLAN 0 to HW filter on device batadv0 17:51:38 executing program 0: 17:51:38 executing program 0: 17:51:38 executing program 0: 17:51:38 executing program 0: 17:51:38 executing program 0: 17:51:38 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x400000000000005, 0xe, 0x807, 0x8}, 0x3c) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'osx.', '@\x00'}, &(0x7f00000000c0)='\x00', 0x1, 0x3) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x20) 17:51:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) read(r0, &(0x7f0000000240)=""/204, 0xffffff83) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x1001) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x3, r2}) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000140)={0x9, @output={0x1000, 0x0, {0x3, 0x40000}, 0x1, 0xfffeffff}}) 17:51:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000080)=0x3, 0x4) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xa94) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x44, 0x2f, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe8b, 0x0, 0xe80, 0x0, 0x543], [], @multicast2}, @mcast2, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x8, 0x6558, 0x20000}}}}}}}, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000140)=0x7) sendfile(r1, r2, &(0x7f0000000100), 0x3f) 17:51:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8}]}}}}}]}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000000)="7118cf3b955f6db20f5899cfcfb674cbd5c590a0885281d96d77c8a2952157c60b90fdc9ec754f8a6f540752bc2f1c663c934f5c2b39c575400bab15d8f119e084ccde14ae20cfb85c2ae9f8", &(0x7f0000000180)="7d6ea24a97f46571852d0d07cbb13e5a5ad984ff42bf9a8c1654db72a4252de0dc3700c3d604da018f61c9eae6a57a935aed8a4520c3039295ed4a21f6176760a202a4a888f85dedb52fa4e76636167f58f40b8bc601e9d235cdf0f6a0cf87d0f3c683be37056d0f19b3bc1762f6f1205e9ee05e8cb55ac3840c471e106dc414ce1cc024c4c8f0bb2c10952d5d415f08a217b24ee47c04f0f9cacd35d4e93c80cd74cdcd0cc5316484ddd7d852abfcf1ac8a87d4305e8e40bcb101b6e4c838d59b89e9cd04", 0x8}, 0x20) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) sendmsg$netlink(r5, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x14}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r10, @ANYBLOB="000000000000ffff0000000008000100736662002c0d0200280001000000000000000000000000000000000000000600"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xc, 0x1, 'pfifo\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x90008740}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=@deltfilter={0x504, 0x2d, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, r10, {0x9, 0x9}, {0x174bbe08e5c8dd0d, 0xc}, {0x10, 0xffe0}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}, @TCA_RATE={0x8, 0x5, {0x8f, 0x90}}, @filter_kind_options=@f_fw={{0x8, 0x1, 'fw\x00'}, {0x4c0, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0x2}}, @TCA_FW_POLICE={0x408, 0x2, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x3, 0x5, 0x21d4, 0x3, 0x3, 0x3, 0x3, 0x1, 0x1f8cf6da, 0x8, 0x8, 0x8e06, 0x200, 0xfffffffa, 0xff, 0x1, 0x3, 0x1, 0x4, 0x0, 0x0, 0xd6, 0x6, 0x0, 0x2, 0x3f, 0x1, 0x1000, 0x7, 0x401, 0x4, 0x800, 0xffff7fff, 0x1, 0xfc0000, 0xea, 0x1, 0x0, 0x2, 0x3, 0x91, 0x7, 0x400, 0x3f, 0x3, 0x6, 0x7, 0xffff, 0x1, 0x7fff, 0x4, 0x7fff, 0x3f, 0x64, 0x7f, 0x800, 0x5, 0xfae, 0x9, 0x80000001, 0x10000, 0xf7f7, 0x80000001, 0x4, 0x4, 0x4, 0x0, 0x4, 0x4, 0x9, 0x10000, 0x6, 0x6, 0x10001, 0x6, 0xfffffffc, 0x8, 0x8, 0xfffffff7, 0x5, 0x8001, 0x2, 0x3f, 0x9, 0x1, 0x8, 0x313d5c36, 0xfff, 0x5, 0x9, 0x7, 0xfffffff9, 0x4a55, 0x9f, 0x3, 0x1, 0x6, 0x10000, 0x13a, 0x2, 0xcf8, 0x1f, 0x0, 0x100, 0x3ff, 0x4, 0x800, 0x1, 0x3f, 0x9, 0x0, 0x7, 0x1, 0x0, 0x1000, 0x1, 0xff, 0x6, 0x3, 0x2, 0x8, 0x2, 0xffff, 0x7fff, 0x4d4, 0x9, 0x7, 0x8, 0x9, 0x2, 0xff, 0x1, 0x8001, 0x5, 0x2818, 0x5, 0x8000, 0x3ff, 0x4, 0xfffffff8, 0x5, 0x9, 0x36, 0x3f, 0x9, 0x20, 0xffffffb8, 0x9, 0x3f, 0x5, 0x200, 0x800, 0x5, 0xfffffffe, 0x101, 0x4, 0xcd, 0x7f, 0x3ff, 0x9, 0x1000, 0x6, 0x35, 0x6cd, 0x45a3b208, 0x6, 0x0, 0x1, 0x1fffe00, 0x200, 0x4, 0x1, 0x8000, 0xb9d, 0x9, 0x8, 0xdc9b, 0x101, 0xb6a, 0x200, 0x5, 0x2, 0x0, 0x3f, 0x5, 0x2, 0x4, 0x20a69a7b, 0x3, 0x9, 0x8001, 0x2, 0x4, 0x10000000, 0x3, 0x1f, 0x0, 0x2, 0x3, 0xa, 0xc5, 0xc4a, 0x3, 0x9, 0x2, 0x0, 0xffff, 0x0, 0x756e, 0x7fff, 0x9, 0x2, 0x200, 0x5, 0x0, 0x1, 0xf16, 0x6, 0x5f, 0x9, 0xe6ca, 0x5ac, 0xe93, 0x8001, 0xffffffff, 0x6, 0x2, 0x0, 0x4, 0x20000000, 0x44b, 0x583, 0x8, 0x4c, 0x8, 0x10001, 0x4, 0x6, 0x3, 0x7, 0x60, 0x3, 0xffff0001, 0x8000, 0x8, 0x1f, 0x1ff, 0x1f, 0x40, 0x5, 0x4a, 0x81, 0x6, 0xe0000000]}}, @TCA_FW_CLASSID={0x8, 0x1, {0x8}}, @TCA_FW_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x602c6f73685fc657, 0x7, 0x2, 0xff, {0x4, 0x0, 0x81, 0x8, 0x2, 0xc0}, {0xfe, 0x0, 0x9e4, 0x9, 0xfc01, 0x4}, 0x7fffffff, 0x39a350e7, 0x80000001}}}, @TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gre0\x00'}, @TCA_FW_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x9, 0x4, 0x3, {0x3, 0x0, 0xf930, 0x2, 0x1ff, 0xfff}, {0x1, 0x3, 0x1, 0x3e9d, 0x7fff, 0x7ff}, 0x6, 0x0, 0x3ff}}}]}}]}, 0x504}, 0x1, 0x0, 0x0, 0x8000}, 0x14) 17:51:40 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x55fe, 0x80) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x81) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x24) ioctl$TCFLSH(r3, 0x540b, 0x6) r4 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000180)={0x7, 0x8001, 0x7f}) r5 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x1f, 0x28200) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x20000, 0x0) fcntl$setflags(r6, 0x2, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000440)='/dev/cec#\x00', 0x3, 0x2) linkat(r2, &(0x7f0000000400)='./file0\x00', r7, &(0x7f0000000480)='./file0\x00', 0x800) r8 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$IP_VS_SO_GET_INFO(r8, 0x0, 0x481, &(0x7f00000004c0), &(0x7f0000000500)=0xc) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000540)) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x40, 0x0) ioctl$IMCTRLREQ(r9, 0x80044945, &(0x7f00000005c0)={0x80, 0x80000000, 0x100, 0xfffffc12}) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000600)='/dev/nullb0\x00', 0x800, 0x0) fcntl$addseals(r10, 0x409, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000940)={0x0, 0x4}, &(0x7f0000000980)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000e40)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x6, 0xffff}, &(0x7f0000000f00)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000f40)={0x0, 0xe4, "176455929f30825ec6e66eeee010082064f44e7eb243f2e3ee788ab16962d1d4dfcafba8c3e0f8f00ae85d9e89d974a710b38fac12c4ddf1dc9edc8bccdcd7d6dcdc4b0dd84d38a2f60c0d503a9092cae3a14166a15ffb3f5da515140d43d897a19014d203fcb1fcd5f1f813ba3bafa248626fbb3c2776ec3350bd0ae7538ffff1f73b05ab8415468d38bbb0884b66d2bba770c1023661ce4c458a1e6e6f2f4c91d9d1f4bfb8e3662de29d2f8885cfd11de1e35ca9b6de57333bf9d171bbb4e379402dbebd66a4c5f89522101fd93cfcf8ccdbd189b6735a8cb698df4b9d67e964edf01f"}, &(0x7f0000001040)=0xec) sendmmsg$inet_sctp(r5, &(0x7f0000001300)=[{&(0x7f0000000640)=@in6={0xa, 0x4e21, 0x48, @remote, 0x81}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000680)="e808bf9568521b57baadf7e0964e4c49736133297337e7e08ce46f07029df9bc7e61bef822aa269eee903a68c955a56802c6dd11dd302f5c8061e5987db4", 0x3e}, {&(0x7f00000006c0)="c13f604984825f70f6a4068397ea4c4114b1aba21b2375a3be9cda6b550d507e35575322d9fd3871f2a7661840a69a779fc5c7626af48217e58c752d3c4741d30622f74f302c778f4ee0392ad146634a37bbab4e540f61e2e34ac6511e39aab3ec088eb091922f06", 0x68}, {&(0x7f0000000740)="4ee7eddb04f6679f168dae79e887c062c9f65fbdf43de2d39b2290d360aef2f831b91e634fb140a7a3fc229d610ac3fcb868c4ad83f6643b294502f043344197ce98470385879e909089d9ba62f6e761759c16316d4a15d78ffffd57f6e50e6f95c432cefd0fc12e019e0e1879ee6d2866f6ae436e0021807333b26c747150ddd287bbdd", 0x84}, {&(0x7f0000000800)="743b38e31b4cb03b24f31552206a171380cb6b88ed223174e9eeddd3e43a923eea0948ba1d9492ce6c79abe903401ce847046b5a5045398e3c4b5ad174d34026edd8f25c629db1bd7fe152eefe71e3a853bb0d3e298e6e5a1490aa3a5108025a132161bbd182663364609d5d4ce4cf64f66e01d13061eb270023f1bdb71685161ebf13fff8c4c767536f78cc0774dd80bdbb7210d127a34a77eba948ecee895a8c969b34171dbe06653acd9b5334424f961d02023717375676f7d3da216449ace99644a30216bf92bab0c4a38229f2d580942dbe697434527e7e2cafedead2ed9cf8f0f6eb3b78fa6cb7a938cec487c8ecd8", 0xf2}], 0x4, &(0x7f00000009c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x6, 0x7, 0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8000, 0x9, 0x50, r11}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x58, 0x10}, {&(0x7f0000000a40)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000a80)="451650d591384897ff904af2d71a86d487baf0c44ff58584ea69bf8b7406d7c97a80a3124863a498a4c02cc8266cb6fc4be99e60967b0611927774eefdc5935531423cec6dd939f8bc4c71ea6b2d8093151344a73aa5e227b0f428b6b41978b332ea1bf31081a9bdc212c466fdf731378130e58befed9eeb2d63e51a62fda794317e8e0e6cd75c7b2874a9575a43e0a29e9fa8799091ec0d42a6a7f134961b74dee9a42acda588bf89c3569a2e712b26d50d887f042f6ce8fa387c6ba0a015599b9c59415ad0af8b485005705a8073625bb439c8a7a45c3f5f", 0xd9}, {&(0x7f0000000b80)="d3ec590c9baafdeefc433c587f722ce3e1a9d6c0282519caaf2829454b3d196339b4d95b6909645c86f5b98f3259c058859113199522debec80573807b1bddfb2efc0d9c27a72508d8cfc1f10cd78bf1ff5df5b59d5fba3550326ded53c154be9793e662e54e2abb49de80726be2bdad7d3911ed27a5157c", 0x78}, {&(0x7f0000000c00)="2b551fe923a8eb0ed282148428508d60f066d9839611c9a923ee83f31e4e24a20b7994942a996258ce94cd15b5efe55ca0bc5dc5d04262219951e89413258b97707b203870bfaeb3596fa61485f94e4d5e1e14ce4b3cab82c5bdcbd72d85593b24f3a1e115a193abf9c12941cacf9b4d6eeb324fb3c11697e834bd00a3ed4466f42e4a67c50215313805ddde2c9d27398afec95beccb526b85bb8894cfdb983c2d4e6bada4dd4e6180f9f7e9a1939b01c460", 0xb2}, {&(0x7f0000000cc0)="c12a8bc930b4fef8e3cb3b19526e72a9fd4ea5c4cdd62bf28a7e8ba0d5fc0767de9e80862bcb8e90b53151dc270babc532fc534bd1584db45cf76f918dc88de031fc4eac5742b29f01a55d6cbe521671ee0e125604787ba6b55cf2b1bba012c13d2ec0958d72d9d31dd6124a592665f79de99323a391953b81f2bd46cca55dba97505ea3b8332eab31f6f6ee17314cc296d5b852db8ed502ec5e8454bded0ba49e4042c86cb34e4e2adc76fd5246ca8264b45fb4afd8bee8ae2e17fd", 0xbc}, {&(0x7f0000000d80)="df0dd2cb2d29a7", 0x7}], 0x5, &(0x7f0000001080)=[@authinfo={0x18, 0x84, 0x6, {0x3}}, @init={0x18, 0x84, 0x0, {0x380, 0x2, 0xfff7, 0x7fff}}, @sndrcv={0x30, 0x84, 0x1, {0x100, 0x5, 0x2, 0x1, 0xfffffffa, 0xffffffff, 0x3ff, 0x72d6e683, r12}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x10000}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x9, 0x0, 0x200, 0x3, 0x1, 0x2, 0x0, r13}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="d0d486fe3828a7eaa8c7f57da4d5c1c2"}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}], 0x130, 0xc000}, {&(0x7f00000011c0)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001200)="f09c2a0a85a482f01de71d27b4e746ced90efec7587397c044504f457986684de24f42a036b6c5f975eed626023ccd79c6df317cdecede78ffca960636ef857af19f0a5a9229eb8e9b0c03257524593765cd24de8a86fec14f7c677728ba47e6a2b284a9dbc53a5e2d33083a995a8255ab9aba5b5dd42e3b67d3aebe036eb2c97a3bee2cdd16ff04b3119940407cfe42437cbd267aaf", 0x96}], 0x1, 0x0, 0x0, 0x8000}], 0x3, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000013c0)={r7}) r14 = fcntl$getown(r9, 0x9) pidfd_open(r14, 0x0) [ 303.341907][ T4893] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 303.535976][T11153] IPVS: ftp: loaded support on port[0] = 21 [ 303.622603][ T4893] usb 1-1: Using ep0 maxpacket: 16 [ 303.680760][T11153] chnl_net:caif_netlink_parms(): no params data found [ 303.735795][T11153] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.743267][T11153] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.752081][T11153] device bridge_slave_0 entered promiscuous mode [ 303.760950][ T4893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.772330][ T4893] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 303.782210][ T4893] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 303.793470][T11153] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.800653][T11153] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.809403][T11153] device bridge_slave_1 entered promiscuous mode [ 303.841431][T11153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.854993][T11153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.887859][T11153] team0: Port device team_slave_0 added [ 303.897015][T11153] team0: Port device team_slave_1 added [ 303.958907][ T4893] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.968189][ T4893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.976366][ T4893] usb 1-1: Product: syz [ 303.980579][ T4893] usb 1-1: Manufacturer: syz [ 303.985288][ T4893] usb 1-1: SerialNumber: syz [ 303.995362][T11153] device hsr_slave_0 entered promiscuous mode [ 304.052559][T11153] device hsr_slave_1 entered promiscuous mode [ 304.091839][T11153] debugfs: Directory 'hsr0' with parent '/' already present! [ 304.121222][T11153] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.128468][T11153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.136233][T11153] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.143466][T11153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.226600][T11153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.247273][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.263012][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.275417][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.287975][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 304.312676][T11153] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.321169][T11151] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 304.358811][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.369189][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.376449][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.384897][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.393887][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.401034][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.431632][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.443806][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.463615][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.483543][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.485216][ T4893] cdc_ncm 1-1:1.0: bind() failure [ 304.492519][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.501703][ T4893] cdc_ncm 1-1:1.1: bind() failure [ 304.508854][T11153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.551421][T11153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.591951][ T4893] usb 1-1: USB disconnect, device number 2 [ 304.702556][T11162] Unknown ioctl 19269 [ 304.742821][T11162] Unknown ioctl 19269 17:51:41 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$isdn(0x22, 0x3, 0x54) fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/self/net/pfkey\x00', 0xa0002, 0x0) bind$inet(r4, &(0x7f0000003b40)={0x2, 0x4e23, @broadcast}, 0x10) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f0000000540)=',e%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo-\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\">\x85FRG\x87\xa4f1\xc8l\xfa1\xf9\xcc\x13\xce\x88\xd7\x10\x87~\xa5\xff\x1bP\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xecZ\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xcf\x01\\\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4-Q[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\x99\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\x01\x00\x00\x80a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xecV2\b\xf1\xd3\xed\xb7\xc1J-\x00\x00\x00\x00\x00') [ 304.869776][T11166] tmpfs: Bad mount option e%/}iR @Z 懓a6ZAO%$Qw.HOo-_$Z@]t;(|C6ۉ })DC?">FRGf1l1Έ~PqHm34Ih!(.x㝟}'s $O,3ZW5> [ 305.232710][ T12] usb 1-1: new high-speed USB device number 3 using dummy_hcd 17:51:42 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000002c0012000c00010062726964676500001c00020008002b004a910027000000008000"/52], 0x4c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) r5 = gettid() tkill(r5, 0x1000000000016) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r7, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r6, r7, &(0x7f0000000000), 0xffff) fcntl$addseals(r7, 0x409, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0x7) fsetxattr$system_posix_acl(r7, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x10}, [{0x2, 0x0, r8}], {}, [], {0x8}}, 0x2c, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dlm_plock\x00', 0x2000, 0x0) r11 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r12, r11) r13 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r14, r13) r15 = fcntl$getown(r14, 0x9) r16 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r16, &(0x7f00000000c0)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43", 0x29}, {&(0x7f00000001c0)="53000000c90dca800337f40817707b26f12389c65477dd41d60f082ff53e3987a8c251dbe83721bd01d3be55092ab9c97d912a33048c7c616c88b23af97f1746f358cfb266d7eeef18f60f51937a55da6e68", 0x52}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setresgid(0x0, r17, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r16, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x8}, [{0x2, 0x2}], {0x4, 0xcc706817c56c9907}, [{0x8, 0xa}, {0x8, 0x2}, {0x8, 0x0, r17}, {0x8, 0x0, r18}], {0x10, 0x2}}, 0x4c, 0x0) r19 = getpgid(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r21, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r20, r21, &(0x7f0000000000), 0xffff) fcntl$addseals(r21, 0x409, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0x7) fsetxattr$system_posix_acl(r21, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x10}, [{0x2, 0x0, r22}], {}, [], {0x8}}, 0x2c, 0x0) r23 = getegid() r24 = socket$inet6_tcp(0xa, 0x1, 0x0) r25 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r27 = dup2(r26, r25) sendmsg$netlink(r27, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r25], 0x14}, 0x0) ioctl$TIOCGPGRP(r27, 0x540f, &(0x7f0000000600)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r30 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r30, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r29, r30, &(0x7f0000000000), 0xffff) fcntl$addseals(r30, 0x409, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0x7) fsetxattr$system_posix_acl(r30, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x10}, [{0x2, 0x0, r31}], {}, [], {0x8}}, 0x2c, 0x0) r32 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r32, &(0x7f00000000c0)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43", 0x29}, {&(0x7f00000001c0)="53000000c90dca800337f40817707b26f12389c65477dd41d60f082ff53e3987a8c251dbe83721bd01d3be55092ab9c97d912a33048c7c616c88b23af97f1746f358cfb266d7eeef18f60f51937a55da6e68", 0x52}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setresgid(0x0, r33, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r32, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x8}, [{0x2, 0x2}], {0x4, 0xcc706817c56c9907}, [{0x8, 0xa}, {0x8, 0x2}, {0x8, 0x0, r33}, {0x8, 0x0, r34}], {0x10, 0x2}}, 0x4c, 0x0) r35 = gettid() tkill(r35, 0x1000000000016) r36 = getuid() r37 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = dup2(r38, r37) sendmsg$netlink(r39, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r37], 0x14}, 0x0) r40 = socket$bt_cmtp(0x1f, 0x3, 0x5) r41 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r43 = dup2(r42, r41) sendmsg$netlink(r43, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r41], 0x14}, 0x0) r44 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r46 = dup2(r45, r44) sendmsg$netlink(r46, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r44], 0x14}, 0x0) r47 = clone3(&(0x7f0000000c40)={0xef2c5942acd12053, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40), 0x14, 0x0, &(0x7f0000000b80)=""/127, 0x7f, &(0x7f0000000c00)=""/33}, 0x40) getresuid(&(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=0x0) r49 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r49, &(0x7f00000000c0)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43", 0x29}, {&(0x7f00000001c0)="53000000c90dca800337f40817707b26f12389c65477dd41d60f082ff53e3987a8c251dbe83721bd01d3be55092ab9c97d912a33048c7c616c88b23af97f1746f358cfb266d7eeef18f60f51937a55da6e68", 0x52}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setresgid(0x0, r50, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r49, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x8}, [{0x2, 0x2}], {0x4, 0xcc706817c56c9907}, [{0x8, 0xa}, {0x8, 0x2}, {0x8, 0x0, r50}, {0x8, 0x0, r51}], {0x10, 0x2}}, 0x4c, 0x0) r52 = gettid() tkill(r52, 0x1000000000016) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r54 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r54, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r53, r54, &(0x7f0000000000), 0xffff) fcntl$addseals(r54, 0x409, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0x7) fsetxattr$system_posix_acl(r54, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x10}, [{0x2, 0x0, r55}], {}, [], {0x8}}, 0x2c, 0x0) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r57 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/self/net/pfkey\x00', 0x400001, 0x0) r58 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r60 = dup2(r59, r58) sendmsg$netlink(r60, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r58], 0x14}, 0x0) r61 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r62, r61) r63 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r65 = dup2(r64, r63) sendmsg$netlink(r65, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r63], 0x14}, 0x0) r66 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r68 = dup2(r67, r66) sendmsg$netlink(r68, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r66], 0x14}, 0x0) r69 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r70, r69) r71 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r73 = dup2(r72, r71) sendmsg$netlink(r73, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r71], 0x14}, 0x0) r74 = syz_open_dev$sndctrl(&(0x7f0000000e40)='/dev/snd/controlC#\x00', 0x3f, 0x80080) r75 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r77 = dup2(r76, r75) sendmsg$netlink(r77, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r75], 0x14}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r75, 0x29, 0x23, &(0x7f0000000ec0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000fc0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, 0x0, r79) r80 = fcntl$getown(0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r82 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r82, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r81, r82, &(0x7f0000000000), 0xffff) fcntl$addseals(r82, 0x409, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0x7) fsetxattr$system_posix_acl(r82, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x10}, [{0x2, 0x0, r83}], {}, [], {0x8}}, 0x2c, 0x0) r84 = getgid() r85 = syz_open_dev$mice(&(0x7f0000003580)='/dev/input/mice\x00', 0x0, 0x1705e591a0b54a2b) r86 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r87, r86) r88 = fcntl$getown(r87, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r90 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r90, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r89, r90, &(0x7f0000000000), 0xffff) fcntl$addseals(r90, 0x409, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0x7) fsetxattr$system_posix_acl(r90, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x10}, [{0x2, 0x0, r91}], {}, [], {0x8}}, 0x2c, 0x0) r92 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r94 = dup2(r93, r92) sendmsg$netlink(r94, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r92], 0x14}, 0x0) r95 = dup2(r92, 0xffffffffffffffff) r96 = getpgrp(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r98 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r98, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r97, r98, &(0x7f0000000000), 0xffff) fcntl$addseals(r98, 0x409, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0x7) fsetxattr$system_posix_acl(r98, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x10}, [{0x2, 0x0, r99}], {}, [], {0x8}}, 0x2c, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, 0x0, r100) r101 = gettid() tkill(r101, 0x1000000000016) r102 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setresgid(0x0, 0x0, r103) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000037c0)=0x0) r105 = geteuid() r106 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r106, &(0x7f00000000c0)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43", 0x29}, {&(0x7f00000001c0)="53000000c90dca800337f40817707b26f12389c65477dd41d60f082ff53e3987a8c251dbe83721bd01d3be55092ab9c97d912a33048c7c616c88b23af97f1746f358cfb266d7eeef18f60f51937a55da6e68", 0x52}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setresgid(0x0, r107, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r106, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x8}, [{0x2, 0x2}], {0x4, 0xcc706817c56c9907}, [{0x8, 0xa}, {0x8, 0x2}, {0x8, 0x0, r107}, {0x8, 0x0, r108}], {0x10, 0x2}}, 0x4c, 0x0) r109 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r110, r109) r111 = fsopen(&(0x7f0000003a40)='gfs2meta\x00', 0x1) r112 = openat$uhid(0xffffffffffffff9c, &(0x7f0000003a80)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r113, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r114 = gettid() tkill(r114, 0x1000000000016) r115 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r117 = dup2(r116, r115) sendmsg$netlink(r117, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r115], 0x14}, 0x0) fstat(r117, &(0x7f0000004080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r119 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r121 = dup2(r120, r119) sendmsg$netlink(r121, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r119], 0x14}, 0x0) r122 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r124 = dup2(r123, r122) sendmsg$netlink(r124, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r122], 0x14}, 0x0) getsockopt$sock_cred(r124, 0x1, 0x11, &(0x7f0000004100)={0x0}, &(0x7f0000004140)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r127 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r127, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r126, r127, &(0x7f0000000000), 0xffff) fcntl$addseals(r127, 0x409, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0x7) fsetxattr$system_posix_acl(r127, &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {0x10}, [{0x2, 0x0, r128}], {}, [], {0x8}}, 0x2c, 0x0) r129 = getegid() r130 = gettid() tkill(r130, 0x1000000000016) r131 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r133 = dup2(r132, r131) sendmsg$netlink(r133, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r131], 0x14}, 0x0) fstat(r131, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000004200), &(0x7f0000004240), &(0x7f0000004280)=0x0) sendmmsg$unix(r4, &(0x7f0000004380)=[{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000240)="89c47999e78d02bdaa137d42b8558f17df01be75360e71bae2fe1d23e505a7eab694f5da77d0553fa79d5bd8d5becb4530af686617301d4a1e04cf6e95a0a897a4c223ea03338f321eac14b2d8bfddfb", 0x50}, {&(0x7f0000000040)="05681472cdd21286d34afd23e723d2e92aaefb5d53726e9b6fea688f", 0x1c}, {&(0x7f00000002c0)="1b2b9b0a1cd07262198abb09136d671ee5b2da5ed571940e24e7cd3f39f8a15d3d20243c186efb0d78ada5eab2c83d2053ed61b6ea6936af5cdb6d2fb5895fee7c453e253ad089e08e8dd73b6bc45001f5a694f0b8faf2e860c10aed22e2cda463f3196da6b62e679e23bf5e709c16971225451a045e8b5d112717652f59fa091502524105bc30f1b239df1c6ee908406a07f0d80df2ca7f01b14492ad89f34ee4e4351bd03de7b4cfb1d7b32fd6fbf226170edb3c21189e9f78a4a19d0908a50ac49402b186cec6a8aec0b01af4b3216d46746027477183e2a1efad8cb3fb6a97b4744321ac5225c11cb01a9c3188c1a0f89f", 0xf3}, {&(0x7f00000003c0)="d20eab2ef4e5ae3a30b0a33b19", 0xd}, {&(0x7f0000000400)="e2876e572e4961efda561c5259758678ff8aa616072d3fe8caaf30d5539fb34f5949b56c46bc1ac724d5261b0314eb30ef42bb473448f290b7ddff8d81c56c18858f62e3d16f8f5fbfba0927e3", 0x4d}], 0x5, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r5, r8, r9}}}, @rights={{0x18, 0x1, 0x1, [r10, r12]}}, @cred={{0x1c, 0x1, 0x2, {r15, 0x0, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r22, r23}}}, @rights={{0x14, 0x1, 0x1, [r24]}}, @cred={{0x1c, 0x1, 0x2, {r28, r31, r33}}}, @cred={{0x1c, 0x1, 0x2, {r35, r36, 0xffffffffffffffff}}}], 0xd0, 0x2400ccc1}, {&(0x7f0000000740)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000007c0)="aed1da3399f78f367ada1804aa1b040e9008f57e9f925915ac016666a620d87461a03248ca9e9f3d67203f2ccd7072028887674f9a242c0347e0cd785a45d85e43f9f63f75e66a6d80237b70a522682cf7dd424536a046605458564fd56a3d762ec782582a11cb415082f03586aa45e35265a30e8e370716fe5c4efe041f8a22730c91efe9996596968b1d6f98ceec164a3ce94f962ac1e2b8b74c1564f2c77902731464684b367312d35a6e8fc9c2db5adc16db5e0be656d35be8d9457d59e46859d6dcc77a6198ed1209a5cad0ad697692616ed4565c71e9", 0xd9}, {&(0x7f00000008c0)="08e7ddba04b3688be84a313359f0a5e71228a5fa3c17741551d7e998bcf090b42c838d2ecaee4a7f3f787260ed4dd1029b12e40a9f362115935e339755bd6acf3deff8ef9e06dd57f551ea59d52fdbc182a04c6112956614e12258fa9dad9bb03811a1175cf230dc0a99598597f1316c92ed3e78ecd4a7248ad07d8cb064bc9cd155084965e0e30a9fa72d69f1dc917a22cacdfc0931084142e7d6deec5601d00c6e443a07bae4fe818614c7a62413dff8d9617823b7452aabd5514bbb96816cfe7d7fb7d506346a5331", 0xca}, {&(0x7f00000009c0)="eda8868939747d7dafbad4aabda9559a339a49e1507170ab7e58da06d95db28969a15dd67539809ad4adc3d1d494fe6e90a825be05cd59ac0e9c3d4c58c12c7c91c3ce2cb53307103516203a44252ea235300fe8adc392f4e63b60b08bc68efef40e0471d6534f10a025fc3f7250", 0x6e}, {&(0x7f0000000a40)="20d32fce577f2ebe6b3a3c2b63af1ab01924a1f49e3d963520bc818294", 0x1d}], 0x4, &(0x7f0000001000)=[@rights={{0x2c, 0x1, 0x1, [r37, r2, r40, r2, r1, r0, r43]}}, @rights={{0x1c, 0x1, 0x1, [r46, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r47, r48, r51}}}, @cred={{0x1c, 0x1, 0x2, {r52, r55, r56}}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [r1, r57, r60, r62, r65, r68, r70, r73, r74]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r78, r79}}}, @cred={{0x1c, 0x1, 0x2, {r80, r83, r84}}}], 0x118, 0x4000}, {&(0x7f0000001140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003500)=[{&(0x7f00000011c0)="bfdaa6ed13278e060e69bf288bfbedfdb01a1ae9267463bc7c80e38cdc7838831c3fd8cd55426e201e5879faecc3274df3e2f4b401815f66e02e75b33c8b30a9cc517470d6b4ff07940eadb34e662637f140cb33bcd7f256cd2c465095269f28bc0f2b831fc5eaf04d6039bb6485b870b91c0d79a94bbe8ee3a56de85ed3cbde571d28df1de3c764d67f1b45631a5838472ecc232aaffa1a7531c34ee4eeb1554133e5e20bf4", 0xa6}, {&(0x7f0000001280)="4a3636075d5ba4db94ebf4606780a3215ca21fdbdc6c79563684e519d393355373f0bf5b69b310df9b97cd", 0x2b}, {&(0x7f00000012c0)="39ff7f0a890edaddb1eeb1a2f445cb3aeb2ed62dbb99debb967d5cd9d0d82910aa84704603f22be0993035829e7010c066b3196baf38280b45561e330a359aba300a5d2069b66ac3dab869cd3e59d76306b024be366b5146ee651887af21ece7546e8a", 0x63}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="564081122b746ea39ee1bd0de20693e546cd51ada24c4240cbba4db05de4ece74311ab75b605db971afe795a81dfd2b6a11f127e2354afa03acb00e72e71cf0a67dd37f3e78f536900638ee728454ef949b8b4b7512d1e4146db85502459c8cbd497a3302f036139ac6dd5b0a8c9d9468538449a05ec63b3c869aa052d9c91ce896ccb9de35394735fbdcc78027f568f7f99349a0411a4874b05de3b1e1f5a4ec29ba1251a883739048d3d84a2a06d6c11d8ad1855550ac9485107bf6e0060525fde7cba0b48b33704e010572e1a17146ccba40e5af02e34e0ac3cb3cfcd6f21d2183275a760e4", 0xe7}, {&(0x7f0000003440)="0acb52948a0b6b059d10fdac2ed4f1f11d52fa41d385b8158146a3e1430e75dff732868b72a24fd3e2ff98751025b7ee432c1869db594c5f9881b835283ab61b306d96a315860bbf214beb38533bf95f7a8850cfb32cd53dad567faf5ea45914cc7adeaaa844a712334c261b1bfe8ab564c68ab3b7cbb1ee0f7c32c3f96f2fa63d2ae10ee467870397fb4ac115d5490614effae60934d846169c23c5d458c4558d93df0c", 0xa4}], 0x7, &(0x7f00000035c0)=[@rights={{0x1c, 0x1, 0x1, [r2, r1, r85]}}], 0x20, 0x40000}, {&(0x7f0000003600)=@file={0xee58b83eb12a361, './file0\x00'}, 0x6e, &(0x7f0000003780)=[{&(0x7f0000003680)="adb0831473239de1e12b627f6da79bb038bb9faf4dca699d114cad1075a32c3d18782f61c276bc7eb07720c11e70630fa8c712aaf3d45f6f95949d915a2d734af3cd45261dcf13c8deba1a8ba5c955efec5cb1ae12d0dd3a908089d071c62c4c18a21cc360792b166f0e856bbc9488d79519b300a435b26c1ccf6d7e3874d60e0a853ab624fefcefbdb48eebcb1799ab065c332a28e3e5e1e77fa3537e7033c06d89b44892ff8429245fc194beb9e047c247cd1e98fd99029cb2c97403c42a7d569b0fcef6277833794d01255930d3c26196cfcc9dab53eac53af1d3650e24c43cbc", 0xe2}], 0x1, &(0x7f0000003800)=[@cred={{0x1c, 0x1, 0x2, {r88, r91, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r95]}}, @cred={{0x1c, 0x1, 0x2, {r96, r99, r100}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r101, r102, r103}}}, @cred={{0x1c, 0x1, 0x2, {r104, r105, r108}}}], 0xb0, 0x2000081}, {&(0x7f00000038c0)=@file={0x3, './file0\x00'}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003940)="82093ec31a62978c41447d15adb155c8e5a10e7f74aaf90e168ce0c6833b673451fc29bb64f1db632bde40074bf2dfc89bcd36ab6c90717d715fc17e6d5f1fae9a60419082390770613a97e9327a241ea161f0b2d2814fece2ba76acf1e0dcc533e1f23b65114864f8cc9c4ce291d2e1dc4df7642b8da138b5ee057f5a1c40788c0b76f0c339810b6b9ed93bb27a3212695e738dbb34847a100740003f8a98c298726f45d424169ff6acd1ac9282502c2a759e0db0ee29dc1c10a6532ce352", 0xbf}], 0x1, &(0x7f0000003ac0)=[@rights={{0x2c, 0x1, 0x1, [r1, r110, r111, r2, r112, r113, r2]}}], 0x30, 0x4000}, {&(0x7f0000003b00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000003b80)="c8c44a8beb50d4bd3bc1c1ca8d4e5820014eafd77c19e9086dbdfbf014f11833a45cffe492d0a8afce03fbb81a3f6e51ce6c9facf4b7bab55ce1b0c03d0160b9d8ea38f6a403e7615331c32f68169326ee", 0x51}, {&(0x7f0000003c00)="ec760457d7ab0e87636d54913a2e321833f90b7ce71414d4991e1f3f49693250d39b076d4383654016631f8743ca0926a136be072c7c2d97fc63be1335a5edc6565a57efb1812110e7698bea7a5a73c25ee265d3bf2c836697b2594e980569cf33a64c10014556353f4272a6804a40308456ab7407ad5442c0fa86a4bd49fdbc8cc9ec789fd0228c50cf2a4bb0d8150a912e870fda109d7ef6054df84f2c7d12137c385f5d7666b13b52a425b7064d043471feeb720d78d0399171ef7200af0393099d92406ee2983863cd6e911710462d27432635211fb997006d7b73", 0xdd}, {&(0x7f0000003d00)="aca3b0b31da05312606ae13c938e1f05aaf4fc2221b9821b296eaf7a41a5f2fac8ba1e26aefcf2744ddd3d507c03d99355a1d9b4ba6aa8b15a98897294131f032ff1000573adbc303c87278f6f428834bed3d74d2e72ba545065156e24203ed317497d8a4a1281cb3c3c1a5e594bc920ff3831f4c650223505", 0x79}, {&(0x7f0000003d80)="c1c287a0cdce61cdb07a9e0cd36b2fcda6d227962fad3cefda92fa372fb1d59a00b5a3513f02a2e839d1de24dc45cb2c75e348ea3a0022933d0395ade1a11f91a108837460d1c7650d29f43ee78e4dad4704bbef7b3f30ef74bfe931a420a7de8e7c9d10254c79662cfaee100fc251f9926cb4be2a25a38d3047f79e3d833a8380b9ba6d012cb2c66c379070bd7bac93c60add8fdee50f8e0cfca505ee1cb0469793b00877e9e36d98288e587bf5c0773f8b31dd4b9d775ae86fc67fc3a5fd3f9e2cda56ad3ea94672b65bbda273cc2dcf94f8b1d3d7a0ce096e66d66fabd8f5fc0eee7ceb7889342fdf", 0xea}, {&(0x7f0000003e80)="b01eee585d16e3d7feaad1bc0d42eae1d063082ed728b597049009a0d5d786a259ee8b18f4dabb9ad94a48e2c54e372af3ab7837d823fb31361b7f723fd3119b4e3818650adb4588fe09ce656769da879a5901d163", 0x55}, {&(0x7f0000003f00)="92f0d4145e137d166c8b9aec14cbe257c6a58691918f8cf040dce5b2b1d4ee96c7503234cbf4297316c72828cead2166d1c18113803daf0a95670f438f284087169e435d53", 0x45}, {&(0x7f0000003f80)="68cfea5b96c34b9c883c8dd709b687760a74fcc0431cf00c16456d0473ade0579342684de497e47a75d5557b10f9c7eaede53278ee8fc4e7e82fb8c8ca08fee390148f57af72087df064de689270f2be0fee3f31400ea455848abe6f5c81c74151e76c831b139870e79baaedb1", 0x6d}], 0x7, &(0x7f00000042c0)=[@cred={{0x1c, 0x1, 0x2, {r114, 0xee00, r118}}}, @rights={{0x14, 0x1, 0x1, [r121]}}, @cred={{0x1c, 0x1, 0x2, {r125, r128, r129}}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r130, r134, r135}}}], 0x98, 0x8000}], 0x6, 0x60000080) r136 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r136, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 305.472881][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 305.592278][ T12] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.603369][ T12] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 305.613291][ T12] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 305.782191][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.791590][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.799728][ T12] usb 1-1: Product: syz [ 305.804007][ T12] usb 1-1: Manufacturer: syz [ 305.808637][ T12] usb 1-1: SerialNumber: syz 17:51:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8}]}}}}}]}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000000)="7118cf3b955f6db20f5899cfcfb674cbd5c590a0885281d96d77c8a2952157c60b90fdc9ec754f8a6f540752bc2f1c663c934f5c2b39c575400bab15d8f119e084ccde14ae20cfb85c2ae9f8", &(0x7f0000000180)="7d6ea24a97f46571852d0d07cbb13e5a5ad984ff42bf9a8c1654db72a4252de0dc3700c3d604da018f61c9eae6a57a935aed8a4520c3039295ed4a21f6176760a202a4a888f85dedb52fa4e76636167f58f40b8bc601e9d235cdf0f6a0cf87d0f3c683be37056d0f19b3bc1762f6f1205e9ee05e8cb55ac3840c471e106dc414ce1cc024c4c8f0bb2c10952d5d415f08a217b24ee47c04f0f9cacd35d4e93c80cd74cdcd0cc5316484ddd7d852abfcf1ac8a87d4305e8e40bcb101b6e4c838d59b89e9cd04", 0x8}, 0x20) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) sendmsg$netlink(r5, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x14}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r10, @ANYBLOB="000000000000ffff0000000008000100736662002c0d0200280001000000000000000000000000000000000000000600"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000009200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r10, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xc, 0x1, 'pfifo\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x90008740}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=@deltfilter={0x504, 0x2d, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, r10, {0x9, 0x9}, {0x174bbe08e5c8dd0d, 0xc}, {0x10, 0xffe0}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}, @TCA_RATE={0x8, 0x5, {0x8f, 0x90}}, @filter_kind_options=@f_fw={{0x8, 0x1, 'fw\x00'}, {0x4c0, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffff, 0x2}}, @TCA_FW_POLICE={0x408, 0x2, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x3, 0x5, 0x21d4, 0x3, 0x3, 0x3, 0x3, 0x1, 0x1f8cf6da, 0x8, 0x8, 0x8e06, 0x200, 0xfffffffa, 0xff, 0x1, 0x3, 0x1, 0x4, 0x0, 0x0, 0xd6, 0x6, 0x0, 0x2, 0x3f, 0x1, 0x1000, 0x7, 0x401, 0x4, 0x800, 0xffff7fff, 0x1, 0xfc0000, 0xea, 0x1, 0x0, 0x2, 0x3, 0x91, 0x7, 0x400, 0x3f, 0x3, 0x6, 0x7, 0xffff, 0x1, 0x7fff, 0x4, 0x7fff, 0x3f, 0x64, 0x7f, 0x800, 0x5, 0xfae, 0x9, 0x80000001, 0x10000, 0xf7f7, 0x80000001, 0x4, 0x4, 0x4, 0x0, 0x4, 0x4, 0x9, 0x10000, 0x6, 0x6, 0x10001, 0x6, 0xfffffffc, 0x8, 0x8, 0xfffffff7, 0x5, 0x8001, 0x2, 0x3f, 0x9, 0x1, 0x8, 0x313d5c36, 0xfff, 0x5, 0x9, 0x7, 0xfffffff9, 0x4a55, 0x9f, 0x3, 0x1, 0x6, 0x10000, 0x13a, 0x2, 0xcf8, 0x1f, 0x0, 0x100, 0x3ff, 0x4, 0x800, 0x1, 0x3f, 0x9, 0x0, 0x7, 0x1, 0x0, 0x1000, 0x1, 0xff, 0x6, 0x3, 0x2, 0x8, 0x2, 0xffff, 0x7fff, 0x4d4, 0x9, 0x7, 0x8, 0x9, 0x2, 0xff, 0x1, 0x8001, 0x5, 0x2818, 0x5, 0x8000, 0x3ff, 0x4, 0xfffffff8, 0x5, 0x9, 0x36, 0x3f, 0x9, 0x20, 0xffffffb8, 0x9, 0x3f, 0x5, 0x200, 0x800, 0x5, 0xfffffffe, 0x101, 0x4, 0xcd, 0x7f, 0x3ff, 0x9, 0x1000, 0x6, 0x35, 0x6cd, 0x45a3b208, 0x6, 0x0, 0x1, 0x1fffe00, 0x200, 0x4, 0x1, 0x8000, 0xb9d, 0x9, 0x8, 0xdc9b, 0x101, 0xb6a, 0x200, 0x5, 0x2, 0x0, 0x3f, 0x5, 0x2, 0x4, 0x20a69a7b, 0x3, 0x9, 0x8001, 0x2, 0x4, 0x10000000, 0x3, 0x1f, 0x0, 0x2, 0x3, 0xa, 0xc5, 0xc4a, 0x3, 0x9, 0x2, 0x0, 0xffff, 0x0, 0x756e, 0x7fff, 0x9, 0x2, 0x200, 0x5, 0x0, 0x1, 0xf16, 0x6, 0x5f, 0x9, 0xe6ca, 0x5ac, 0xe93, 0x8001, 0xffffffff, 0x6, 0x2, 0x0, 0x4, 0x20000000, 0x44b, 0x583, 0x8, 0x4c, 0x8, 0x10001, 0x4, 0x6, 0x3, 0x7, 0x60, 0x3, 0xffff0001, 0x8000, 0x8, 0x1f, 0x1ff, 0x1f, 0x40, 0x5, 0x4a, 0x81, 0x6, 0xe0000000]}}, @TCA_FW_CLASSID={0x8, 0x1, {0x8}}, @TCA_FW_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x602c6f73685fc657, 0x7, 0x2, 0xff, {0x4, 0x0, 0x81, 0x8, 0x2, 0xc0}, {0xfe, 0x0, 0x9e4, 0x9, 0xfc01, 0x4}, 0x7fffffff, 0x39a350e7, 0x80000001}}}, @TCA_FW_MASK={0x8, 0x5, 0x7}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gre0\x00'}, @TCA_FW_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x9, 0x4, 0x3, {0x3, 0x0, 0xf930, 0x2, 0x1ff, 0xfff}, {0x1, 0x3, 0x1, 0x3e9d, 0x7fff, 0x7ff}, 0x6, 0x0, 0x3ff}}}]}}]}, 0x504}, 0x1, 0x0, 0x0, 0x8000}, 0x14) [ 306.092213][ T12] cdc_ncm 1-1:1.0: bind() failure [ 306.103191][ T12] cdc_ncm 1-1:1.1: bind() failure [ 306.123148][ T12] usb 1-1: USB disconnect, device number 3 [ 306.562168][ T12] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 306.802204][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 306.922576][ T12] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.933670][ T12] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 306.943588][ T12] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 307.112295][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.121858][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.129896][ T12] usb 1-1: Product: syz [ 307.134181][ T12] usb 1-1: Manufacturer: syz [ 307.138809][ T12] usb 1-1: SerialNumber: syz 17:51:44 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x1, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0xf4240) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x20202) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[0x3, 0x6, 0x6, 0x800]}) r2 = syz_open_pts(r1, 0x400400) close(r2) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x4, 0x2) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000180)=""/4096) r4 = syz_open_dev$hidraw(&(0x7f0000001180)='/dev/hidraw#\x00', 0x9, 0x282000) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000011c0)='trusted.overlay.nlink\x00', &(0x7f0000001200)={'U-', 0x200}, 0x28, 0x1) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000001240)) pwritev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001280)="b68687fb86a6390fecb7caf9136662b50f8d7f5380ce64b84c37f737ef44c7220a3cd04f3d4aa14ad6402155596f", 0x2e}], 0x1, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001300)='/dev/vsock\x00', 0x440, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000001340)=0x81) r6 = getpgrp(0xffffffffffffffff) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000001380)={0x28, 0x0, 0x4, {{0x1000, 0x81, 0x3, r6}}}, 0x28) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f00000013c0)={0x0, 0x7}) r7 = syz_usb_connect$cdc_ecm(0x0, 0x72, &(0x7f0000001400)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x8, 0x130, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x80, {{0xa, 0x24, 0x6, 0x0, 0x0, "fa079e7bbb"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x4840, 0x7ff, 0x7f}, [@ncm={0x6, 0x24, 0x1a, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x7fff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x1d6, 0x40, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x71, 0x7f, 0x9, 0x7}}}}}]}}]}}, &(0x7f0000001680)={0xa, &(0x7f0000001480)={0xa, 0x6, 0x300, 0x1f, 0x3, 0x6, 0x8, 0x20}, 0xb2, &(0x7f00000014c0)={0x5, 0xf, 0xb2, 0x2, [@generic={0x42, 0x10, 0x2, "ddf92f45d3b9bad8c05fd88e72871e6a9deb93c50e0ff3dcf99c14090cd246091f0b133bfba695731575aba24366476b0b3bc1cf6dc6797b656fdc3e6f86ff"}, @generic={0x6b, 0x10, 0x2, "86028805b52dece28ce0ca763cf256abed6337a6e2c3586ddce8a17934b1d5d63d53ed02aff7b0a4eeed0fba1af6e8653c62645ec8a4b9e033fcd2f5f64e476ab5e1422c0a39c530a6860d53b4a07a42ffc014a833e4344398d172311324f5d959257f3b5659f916"}]}, 0x2, [{0x1c, &(0x7f0000001580)=@string={0x1c, 0x3, "79c715eaaa3e6ac1abf94b429725469dd501d3dd86afedc9e687"}}, {0x87, &(0x7f00000015c0)=@string={0x87, 0x3, "c8a193e6555a2324ae0ef0b6e24e02bb2d7363ce72e99b321760682642e9ee338b06f86026fafeebfe0d212cbc67ab1f5a69d960565e1d18ecc029c2c223baa27d2fd0327b824c025c699a4e0c6884878fc6831cf4b2ba39bae33ba0acd444874938904aac4a8884b1c66dbe40da4dc4d5658bb0ee24df4870ca808fce4f4c02f60db36805"}}]}) syz_usb_control_io$cdc_ecm(r7, &(0x7f00000017c0)={0x14, &(0x7f00000016c0)={0x0, 0x5, 0x90, {0x90, 0x23, "4ede8dbe776f38ed6675c06d0610c1c571c102d2da79843a93f9262a03bc6d7580fd109ba663864315f22890c7fb89f04e1456eaa4a804814c01c88404283123bfbb1c97b32c72da5d58e82fe16085e1f03a5233f41d9bd47727127767edb12a5b930e52c1754afbc55a2bd7ebb8071261ea453ccdeb7f8522fe66077d1da2c7da90c41ce57e5dcd156ec30dea7f"}}, &(0x7f0000001780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000018c0)={0x1c, &(0x7f0000001800)={0x20, 0x16, 0x5, "7b2703e09b"}, &(0x7f0000001840)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001880)={0x0, 0x8, 0x1, 0x6}}) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000001900)={0x6, 0x3, 0x8, 0x1}) capset(&(0x7f0000001940)={0x500537d9, r6}, &(0x7f0000001980)={0x80, 0x9, 0x0, 0x4, 0x0, 0x9}) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f00000019c0)=""/160) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000001ac0)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x50, r8, 0x9d216ca47f310153, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, [], 0x26}}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x480d5}, 0x40) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001c00)=0x0) tgkill(r9, r6, 0xb) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/dlm-monitor\x00', 0x119500, 0x0) write$binfmt_misc(r10, &(0x7f0000001c80)={'syz1', "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"}, 0x1004) r11 = syz_open_dev$mouse(&(0x7f0000002cc0)='/dev/input/mouse#\x00', 0x2, 0x80a03) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000002d00)=0x4, 0x4) [ 307.392477][T11175] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 307.502482][ T12] cdc_ncm 1-1:1.0: bind() failure [ 307.513540][ T12] cdc_ncm 1-1:1.1: bind() failure [ 307.566583][ T12] usb 1-1: USB disconnect, device number 4 [ 307.607097][T11181] IPVS: ftp: loaded support on port[0] = 21 [ 307.755755][T11181] chnl_net:caif_netlink_parms(): no params data found [ 307.811556][T11181] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.818841][T11181] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.827785][T11181] device bridge_slave_0 entered promiscuous mode [ 307.838745][T11181] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.846034][T11181] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.854692][T11181] device bridge_slave_1 entered promiscuous mode [ 307.887061][T11181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.899747][T11181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.933378][T11181] team0: Port device team_slave_0 added [ 307.942659][T11181] team0: Port device team_slave_1 added 17:51:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x20000000006) sendmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="2ca6c155de3d47af7740c0763b4775364fbee1869e43510f8b83470556719ac4e02cf7f2f6f1c86c6dee7730f2a3dd60036e6a029c42199e8b73f966bc92e2f9b6d20bf887bb5a982b38f59dec284a342cd1b781f815b0b54ed0e0517cd1861fc73c06fdb80bc509112c1b436bee5f048d585af533a378d9d99f1ac662550bc65b6f5d4c1993811a42b05d2d8b3b51a24c5a0ba8a232f34456bc563bbdb8ac5730d7b5f0e14451b4691cbaceb3386dfc1a"}, {&(0x7f0000000140)="1e42eac261e666a4dea85fa4e4be92a59bf77d66bdbf15a83f809c7cfbcfab18172394512c91f3177734ed7acf4068acbc06da896824fa617d65a16b519375d4693e94949a1f7b0e400a5a93a7d191d00123de5ef04bf831a5fbe268104f1daddc8e39d20b34ab77749b963106b64543b407c60f4ec449d162d55af6d61325c6ed4474592a7dcfea57f24b"}, {&(0x7f0000000200)="5bc7862699e61cdc9625a642ea3443e3ea2521cddc0664876b5732c92ca8d950dd41f03f7c3b58a5c06c7676fb64d6bf7c6ee90678f950501bf4f14fceeca1703efe4c5f3a3a590f069776fa75a9ec8ea8570e2021c00e6edbef2e47a2f752cd4ef182071086acd66fac106f87f3ec071908aea85decc3593f378bee720abbc2e83db62ba3742ee022cf032e7cbfc82892d6181ca531278907556c734af6198bb2c0fa45437790d71e"}, {&(0x7f00000002c0)="65303fb646cea0426357db98caf173"}, {&(0x7f0000000940)="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"}, {&(0x7f0000000380)="2e36d15bad2f47f8ddd88028900cc406051098e0f663d243a042d10e9e7a2c24bd7da4785ceac9ab5e07d7beaccf6c27b3e4cd1e5dc091ea62ea816f2e64beceaacafcad4b29904556a8fff5a240e9d8f9f77c433ce0bd75b724e79feab695be5d845f3ee1fbd01fef74788b7bc0965186b88b96acd149cea0fe0c14221ddd17d6b3238b0fe59ea2279eb9533c909f8514666d6338e995292fbfdf236b864898c1cf4a7f97aa231956fb06d677d1be345feec6422131177502d99a4d3d6ae2ef02f5a90e93f34b968f6cbdd161003b65e4acfb5d1cee1ce512b0e82c93af09aa354ebc0c2ac447a7f370bbf98d7af368d5ea9d79fb9cdd"}], 0x1}, 0x4000000) [ 308.027423][T11181] device hsr_slave_0 entered promiscuous mode [ 308.066954][T11181] device hsr_slave_1 entered promiscuous mode [ 308.204228][T11181] debugfs: Directory 'hsr0' with parent '/' already present! 17:51:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000002c0)={{}, {0x0, 0x0, 0x0, 0x8, 0x64a}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 308.250111][T11181] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.257379][T11181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.265173][T11181] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.272386][T11181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.340614][T11189] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 308.393234][T11181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.415024][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.425068][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.425592][T11189] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 308.451578][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.468117][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 308.487127][T11190] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 308.487791][T11181] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.513278][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.522375][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.529530][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state 17:51:45 executing program 1: syz_open_dev$sg(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xda, 0x9, 0x6a, 0x8, 0x4e6, 0x3, 0x74ec, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf2, 0x0, 0x2, 0x39, 0x6b, 0x34, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x8a, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) [ 308.599077][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.608452][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.615699][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.625928][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.636013][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 17:51:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@local, @local, [{[{0x9100, 0x6}], {0x8100, 0x1, 0x1, 0x4}}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x8, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000100)={0x3ee0}) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000000)=0x100, &(0x7f0000000040)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 308.645441][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.654506][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.695195][T11181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.703721][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 308.783607][T11181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.820446][T11200] kvm: emulating exchange as write 17:51:46 executing program 0: syz_emit_ethernet(0x76, &(0x7f0000000000)={@random="c5d32df662eb", @local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x40, 0x3a, 0x0, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@time_exceed={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, "b66cb8", 0x0, 0xffffff88, 0x0, @empty, @local, [@dstopts={0x0, 0x0, [], [@padn={0x1, 0x1, [0x0]}, @padn]}]}}}}}}}, 0x0) [ 308.977017][T11205] Unknown ioctl 1074024961 [ 308.982213][ T2938] usb 2-1: new full-speed USB device number 2 using dummy_hcd 17:51:46 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x50, r2, 0x4c860820d4ea9069, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x7}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffff7a}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfffffffd}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x7b45bb769fb62b84}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01220000000000ffff000000000001e0000001000000000000000000000000000000ddffffffff0900000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="400000000000000000000000000000000000000000000000cc1e00000000000000cde0a28581f6de3b8200000000000000000000000000000040000300"/121], 0xb8}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2c, &(0x7f0000000000), 0x4) 17:51:46 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() tkill(r4, 0x1000000000016) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x40, 0x3, r4}}}, 0x28) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r5 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000001c0)="0fcfa3d0dde984c3521a8802a0b457c960db32be702c49db9fdd5a3541ad6a098119fd931810d235b2217c5e9185985b407f7292d0f7fa21b925b2669bcfaad2b8610792715bb3b81c558d8afedb550535ac2e9d02769a4749da578d9d00d5200d4fb0426f06ecc2e9478117d366c52a8dd423cac34b750483f81bdc8c788ccef1d2d49e8270d38ee3d738ec51afb0a32dd374a693d8", 0x96, 0xfffffffffffffffc) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000480)={r6, r7/1000+30000}, 0x10) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r5, 0x8e, 0x68}, &(0x7f0000000280)={'enc=', 'oaep', ' hash=', {'sha1\x00'}}, &(0x7f0000000300)="ce86e2e5ae18819e156e051e9506699a8fec863e00770415646381e9c49d6c66bebddb414123e93580c0621bafa515e974c383be0ee0708bbe5d5959799c2cf4123950b0d875685cab812616d6cea87103c9f5929f7f57bc167fe0b95c12cbb7ce4a496c7ce4c62b82d4a74b7ebfcec15263199b1e3231b53114ebd069994b857198137f5a5c2b316f7b828c298d", &(0x7f00000003c0)=""/104) [ 309.312130][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 309.342174][ T2938] usb 2-1: config 1 has an invalid interface number: 242 but max is 0 [ 309.350565][ T2938] usb 2-1: config 1 has no interface number 0 [ 309.357032][ T2938] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice=74.ec [ 309.366586][ T2938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.415501][ T2938] ums-sddr09 2-1:1.242: USB Mass Storage device detected [ 309.571936][ T5] usb 3-1: Using ep0 maxpacket: 32 [ 309.624052][ T2938] scsi host1: usb-storage 2-1:1.242 [ 309.692862][ T5] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 470 [ 309.703034][ T5] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 113 [ 309.713074][ T5] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.883662][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.893041][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.901129][ T5] usb 3-1: Product: syz [ 309.905541][ T5] usb 3-1: Manufacturer: ꇈ婕␣ຮ뛰仢묂猭칣㊛怗♨㏮ڋ惸都෾Ⱑ枼ᾫ楚惙幖᠝샬숩⏂ꊺ⽽㋐艻Ɍ楜亚栌螄욏ᲃ담㦺ꀻ풬蝄㡉䪐䪬蒈욱빭쑍旕낋⓮䣟쩰辀俎Ɍ෶梳 [ 309.926751][ T5] usb 3-1: SerialNumber: syz [ 310.393773][T11205] Unknown ioctl 19264 [ 310.452511][ T5] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 310.481506][ T5] usb 3-1: USB disconnect, device number 2 [ 310.656905][ T821] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 74>< PQ: 0 ANSI: 0 [ 310.677335][ T821] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 310.919167][ T5] usb 2-1: USB disconnect, device number 2 [ 310.933017][T11219] sddr09: could not read card info [ 310.939628][ T197] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 310.944594][T11223] Unknown ioctl 1074024961 [ 310.946772][ T197] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 310.973264][ T197] sd 1:0:0:0: [sdb] Write Protect is off [ 310.979696][ T197] sd 1:0:0:0: [sdb] Asking for cache data failed [ 310.986304][ T197] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 311.014402][ T197] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 311.221962][ T2938] usb 3-1: new high-speed USB device number 3 using dummy_hcd 17:51:48 executing program 1: syz_open_dev$sg(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xda, 0x9, 0x6a, 0x8, 0x4e6, 0x3, 0x74ec, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf2, 0x0, 0x2, 0x39, 0x6b, 0x34, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x8a, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) [ 311.462246][ T2938] usb 3-1: Using ep0 maxpacket: 32 17:51:48 executing program 3: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4002a082}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x2, 0x100, 0x7, 0x3}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x480d0}, 0x28000000) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000001c0)={0x6c, @local, 0x4e22, 0x0, 'dh\x00', 0x0, 0x8ad, 0x68}, 0x2c) r2 = dup(r0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e20, 0x7fff, @empty, 0x6}}}, &(0x7f0000000340)=0x84) r4 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0xb85, 0x40000) write$cgroup_type(r4, &(0x7f00000003c0)='threaded\x00', 0x9) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x40a000, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000440)={0x1, 0x1}, 0x8) r6 = accept(0xffffffffffffffff, &(0x7f0000000480)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000500)=0x80) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000600)={'nat\x00', 0x0, 0x3, 0x7, [], 0x7, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000005c0)=""/7}, &(0x7f0000000680)=0x78) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f00000006c0)={0x9, 0x4, 0x8}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000740)=0x4, 0x4) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vga_arbiter\x00', 0x181000, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f00000007c0)='!vboxnet1\x00', 0xa) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000800)={'ifb0\x00', {0x2, 0x4e20, @rand_addr=0xc4ff}}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000840)={0x0, 0x4, 0x5, 0x2, 'syz1\x00', 0x2}) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000880)='/dev/full\x00', 0x8000, 0x0) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f00000008c0)={@rand_addr=0x100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000900)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$SG_GET_NUM_WAITING(r10, 0x227d, &(0x7f0000000940)) r11 = syz_open_dev$amidi(&(0x7f0000000980)='/dev/amidi#\x00', 0x3, 0x47ad04) getsockopt$ARPT_SO_GET_INFO(r11, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00'}, &(0x7f0000000a40)=0x44) fsetxattr$security_smack_entry(r6, &(0x7f0000000a80)='security.SMACK64MMAP\x00', &(0x7f0000000ac0)='/dev/full\x00', 0xa, 0x1) r12 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$KDSETMODE(r12, 0x4b3a, 0xfffffffeffffffff) [ 311.582856][ T2938] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 470 [ 311.593324][ T2938] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 113 [ 311.603718][ T2938] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.773586][ T2938] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.782869][ T2938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.790946][ T2938] usb 3-1: Product: syz [ 311.795318][ T2938] usb 3-1: Manufacturer: ꇈ婕␣ຮ뛰仢묂猭칣㊛怗♨㏮ڋ惸都෾Ⱑ枼ᾫ楚惙幖᠝샬숩⏂ꊺ⽽㋐艻Ɍ楜亚栌螄욏ᲃ담㦺ꀻ풬蝄㡉䪐䪬蒈욱빭쑍旕낋⓮䣟쩰辀俎Ɍ෶梳 [ 311.816511][ T2938] usb 3-1: SerialNumber: syz [ 311.817970][ T30] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 311.904557][T11231] IPVS: ftp: loaded support on port[0] = 21 17:51:49 executing program 2: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x1, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0xf4240) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x20202) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[0x3, 0x6, 0x6, 0x800]}) r2 = syz_open_pts(r1, 0x400400) close(r2) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x4, 0x2) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000180)=""/4096) r4 = syz_open_dev$hidraw(&(0x7f0000001180)='/dev/hidraw#\x00', 0x9, 0x282000) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000011c0)='trusted.overlay.nlink\x00', &(0x7f0000001200)={'U-', 0x200}, 0x28, 0x1) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000001240)) pwritev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001280)="b68687fb86a6390fecb7caf9136662b50f8d7f5380ce64b84c37f737ef44c7220a3cd04f3d4aa14ad6402155596f", 0x2e}], 0x1, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001300)='/dev/vsock\x00', 0x440, 0x0) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000001340)=0x81) r6 = getpgrp(0xffffffffffffffff) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000001380)={0x28, 0x0, 0x4, {{0x1000, 0x81, 0x3, r6}}}, 0x28) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f00000013c0)={0x0, 0x7}) r7 = syz_usb_connect$cdc_ecm(0x0, 0x72, &(0x7f0000001400)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x1, 0x1, 0x8, 0x130, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x80, {{0xa, 0x24, 0x6, 0x0, 0x0, "fa079e7bbb"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x4840, 0x7ff, 0x7f}, [@ncm={0x6, 0x24, 0x1a, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x7fff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x1d6, 0x40, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x71, 0x7f, 0x9, 0x7}}}}}]}}]}}, &(0x7f0000001680)={0xa, &(0x7f0000001480)={0xa, 0x6, 0x300, 0x1f, 0x3, 0x6, 0x8, 0x20}, 0xb2, &(0x7f00000014c0)={0x5, 0xf, 0xb2, 0x2, [@generic={0x42, 0x10, 0x2, "ddf92f45d3b9bad8c05fd88e72871e6a9deb93c50e0ff3dcf99c14090cd246091f0b133bfba695731575aba24366476b0b3bc1cf6dc6797b656fdc3e6f86ff"}, @generic={0x6b, 0x10, 0x2, "86028805b52dece28ce0ca763cf256abed6337a6e2c3586ddce8a17934b1d5d63d53ed02aff7b0a4eeed0fba1af6e8653c62645ec8a4b9e033fcd2f5f64e476ab5e1422c0a39c530a6860d53b4a07a42ffc014a833e4344398d172311324f5d959257f3b5659f916"}]}, 0x2, [{0x1c, &(0x7f0000001580)=@string={0x1c, 0x3, "79c715eaaa3e6ac1abf94b429725469dd501d3dd86afedc9e687"}}, {0x87, &(0x7f00000015c0)=@string={0x87, 0x3, "c8a193e6555a2324ae0ef0b6e24e02bb2d7363ce72e99b321760682642e9ee338b06f86026fafeebfe0d212cbc67ab1f5a69d960565e1d18ecc029c2c223baa27d2fd0327b824c025c699a4e0c6884878fc6831cf4b2ba39bae33ba0acd444874938904aac4a8884b1c66dbe40da4dc4d5658bb0ee24df4870ca808fce4f4c02f60db36805"}}]}) syz_usb_control_io$cdc_ecm(r7, &(0x7f00000017c0)={0x14, &(0x7f00000016c0)={0x0, 0x5, 0x90, {0x90, 0x23, "4ede8dbe776f38ed6675c06d0610c1c571c102d2da79843a93f9262a03bc6d7580fd109ba663864315f22890c7fb89f04e1456eaa4a804814c01c88404283123bfbb1c97b32c72da5d58e82fe16085e1f03a5233f41d9bd47727127767edb12a5b930e52c1754afbc55a2bd7ebb8071261ea453ccdeb7f8522fe66077d1da2c7da90c41ce57e5dcd156ec30dea7f"}}, &(0x7f0000001780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000018c0)={0x1c, &(0x7f0000001800)={0x20, 0x16, 0x5, "7b2703e09b"}, &(0x7f0000001840)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001880)={0x0, 0x8, 0x1, 0x6}}) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000001900)={0x6, 0x3, 0x8, 0x1}) capset(&(0x7f0000001940)={0x500537d9, r6}, &(0x7f0000001980)={0x80, 0x9, 0x0, 0x4, 0x0, 0x9}) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f00000019c0)=""/160) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000001ac0)='fou\x00') sendmsg$FOU_CMD_DEL(r5, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x50, r8, 0x9d216ca47f310153, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, [], 0x26}}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x480d5}, 0x40) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001c00)=0x0) tgkill(r9, r6, 0xb) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/dlm-monitor\x00', 0x119500, 0x0) write$binfmt_misc(r10, &(0x7f0000001c80)={'syz1', "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"}, 0x1004) r11 = syz_open_dev$mouse(&(0x7f0000002cc0)='/dev/input/mouse#\x00', 0x2, 0x80a03) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000002d00)=0x4, 0x4) [ 312.073005][T11231] chnl_net:caif_netlink_parms(): no params data found [ 312.092236][ T2938] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 312.113472][T11235] Unknown ioctl 1074024961 [ 312.118827][ T2938] usb 3-1: USB disconnect, device number 3 [ 312.163338][T11231] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.170655][T11231] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.180126][T11231] device bridge_slave_0 entered promiscuous mode [ 312.192533][T11231] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.199834][T11231] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.208596][T11231] device bridge_slave_1 entered promiscuous mode 17:51:49 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) sendmsg$netlink(r5, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x14}, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = dup2(r2, r2) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000040)={'\x00', 0xffffdefd}) [ 312.243483][T11231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.252231][ T30] usb 2-1: config 1 has an invalid interface number: 242 but max is 0 [ 312.258705][T11231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.260840][ T30] usb 2-1: config 1 has no interface number 0 [ 312.276081][ T30] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice=74.ec [ 312.285279][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.305916][T11231] team0: Port device team_slave_0 added [ 312.325108][T11231] team0: Port device team_slave_1 added [ 312.405730][ T30] ums-sddr09 2-1:1.242: USB Mass Storage device detected [ 312.438079][T11231] device hsr_slave_0 entered promiscuous mode [ 312.482382][ T2938] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 312.490461][T11231] device hsr_slave_1 entered promiscuous mode [ 312.542058][T11231] debugfs: Directory 'hsr0' with parent '/' already present! [ 312.606701][T11231] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.614007][T11231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.621773][T11231] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.628954][T11231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.629702][ T30] scsi host1: usb-storage 2-1:1.242 17:51:49 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) fcntl$setpipe(r0, 0x407, 0x200) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0xfffffff8, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") r4 = socket$l2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ac0)='TIPC\x00') r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x42802, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280)={0x0, 0xad}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0x2, 0x4e21, @empty}}, 0x92e, 0x6}, 0x90) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, r6, 0x89afe58883d0d55, 0x0, 0x0, {{}, 0x0, 0x4, 0x0, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x47ab797cf31adf2b}, 0x4) r9 = socket$l2tp(0x18, 0x1, 0x1) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) sendmsg$netlink(r12, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r10], 0x14}, 0x0) connect$l2tp(r9, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x2, @empty}, 0x4}}, 0x2e) connect$l2tp(r4, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e) getpgrp(0x0) r13 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup2(r15, r14) sendmsg$netlink(r16, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r14], 0x14}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r16, 0x84, 0x1b, &(0x7f00000003c0)={r8, 0xb0, "b749fb22e8d88c9a507e8fb81dd348025b7098c1871a8eef0b6f2df0007d2533c74f8d63f99ca617295f13a1e1d5943231baa27d18d9ca39e25f91a4f9fc33208113bf7bb415f1ff7ee74a25ed3d579653bbb8a1624829802a3b3acf85062014853a8f39d6134a58925ff4ddb45a9ad5efb80c07cd824a0e8caba49703d982b641f816b73caac24bcfd7a32309dbdc2ba0256c52f2e20209cc497aa64837d51e83ff692007036eaa2c29aa636b8d844a"}, &(0x7f0000000480)=0xb8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xfffffffe, 0x10}, 0xc) ftruncate(r13, 0x200004) sendfile(r0, r13, 0x0, 0x80001d00c0d0) [ 312.724233][ T2938] usb 3-1: Using ep0 maxpacket: 32 [ 312.780328][T11231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.803804][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.817099][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.827569][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.845080][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 312.856130][ T2938] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 470 [ 312.861752][ C1] hrtimer: interrupt took 55809 ns [ 312.866266][ T2938] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 113 [ 312.881436][ T2938] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.946977][T11231] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.986617][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.996118][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.003352][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state 17:51:50 executing program 0: r0 = syz_usb_connect$hid(0x0, 0xb7, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0x1e5e, 0x313, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x14}, 0x0) getdents64(r3, &(0x7f0000000100)=""/186, 0xba) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="0900740000007400bedc2a54436408789bdd5545b86415f523b546d3b92ca2240969fe2b"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 313.074587][ T2938] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.084130][ T2938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.092287][ T2938] usb 3-1: Product: syz [ 313.096543][ T2938] usb 3-1: Manufacturer: ꇈ婕␣ຮ뛰仢묂猭칣㊛怗♨㏮ڋ惸都෾Ⱑ枼ᾫ楚惙幖᠝샬숩⏂ꊺ⽽㋐艻Ɍ楜亚栌螄욏ᲃ담㦺ꀻ풬蝄㡉䪐䪬蒈욱빭쑍旕낋⓮䣟쩰辀俎Ɍ෶梳 [ 313.117709][ T2938] usb 3-1: SerialNumber: syz [ 313.137054][T11231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.147679][T11231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.173222][T11191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.182971][T11191] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.190226][T11191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.200780][T11191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.210821][T11191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.220259][T11191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.229666][T11191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.253496][T11191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.262322][T11191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.291467][T11231] 8021q: adding VLAN 0 to HW filter on device batadv0 17:51:50 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) r10 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) sendmsg$netlink(r9, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x14}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) [ 313.562688][T11191] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 313.704856][ T367] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 74>< PQ: 0 ANSI: 0 [ 313.714603][T11235] Unknown ioctl 19264 [ 313.730386][ T367] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 313.786093][ T2938] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 313.807858][T11191] usb 1-1: Using ep0 maxpacket: 8 [ 313.822593][ T30] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 313.822872][ T2938] usb 3-1: USB disconnect, device number 4 [ 313.932211][T11191] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.943394][T11191] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 313.956371][T11191] usb 1-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 313.965524][T11191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.006776][ T5] usb 2-1: USB disconnect, device number 3 [ 314.018551][T11191] usb 1-1: config 0 descriptor?? [ 314.023683][T11246] sddr09: could not read card info [ 314.031665][ T519] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 314.038943][ T519] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 314.048318][ T519] sd 1:0:0:0: [sdb] Write Protect is off [ 314.055463][ T519] sd 1:0:0:0: [sdb] Asking for cache data failed [ 314.062187][ T519] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 314.075454][ T519] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 314.105884][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 314.233935][ T30] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 314.242734][ T30] usb 4-1: config 0 has no interface number 0 [ 314.248937][ T30] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 314.260209][ T30] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 314.271562][ T30] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 17:51:51 executing program 2: syz_usb_connect(0x0, 0xfffffffffffffe7e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa5, 0x57, 0x77, 0x8, 0x9710, 0x7810, 0xe38f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfe, 0x0, 0x3, 0xdf, 0x4a, 0x15, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2d552b3f4576f05f}}, {{0x9, 0x5, 0xf, 0x2}}, {{0x9, 0x5, 0x81, 0x12}}]}}]}}]}}, 0x0) [ 314.283097][ T30] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 314.294371][ T30] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 314.307885][ T30] usb 4-1: config 0 interface 164 has no altsetting 0 [ 314.472446][ T30] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 314.481627][ T30] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 314.490023][ T30] usb 4-1: Product: syz 17:51:51 executing program 1: syz_open_dev$sg(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xda, 0x9, 0x6a, 0x8, 0x4e6, 0x3, 0x74ec, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf2, 0x0, 0x2, 0x39, 0x6b, 0x34, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0x8a, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) [ 314.512776][ T30] usb 4-1: config 0 descriptor?? [ 314.546272][T11191] hid-generic 0003:1E5E:0313.0001: unknown main item tag 0x0 [ 314.553986][T11191] hid-generic 0003:1E5E:0313.0001: unknown main item tag 0x4 [ 314.561589][T11191] hid-generic 0003:1E5E:0313.0001: unknown main item tag 0x2 [ 314.569309][T11191] hid-generic 0003:1E5E:0313.0001: unbalanced collection at end of report description [ 314.580310][T11191] hid-generic: probe of 0003:1E5E:0313.0001 failed with error -22 [ 314.672107][ T2938] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 314.672126][ T30] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 314.695941][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 314.725441][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 314.753820][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 314.772922][ T4893] usb 1-1: USB disconnect, device number 5 [ 314.788100][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 314.827531][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 314.922181][ T2938] usb 3-1: Using ep0 maxpacket: 8 [ 314.982106][T11191] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 315.012042][ T30] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 315.032863][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 315.052441][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 315.082317][ T2938] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 315.082362][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 315.090322][ T2938] usb 3-1: can't read configurations, error -22 [ 315.123936][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 315.152281][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 315.172261][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 315.192937][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 315.201065][ T30] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input5 [ 315.252359][ T2938] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 315.342557][T11191] usb 2-1: config 1 has an invalid interface number: 242 but max is 0 [ 315.350898][T11191] usb 2-1: config 1 has no interface number 0 [ 315.357310][T11191] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice=74.ec [ 315.366944][T11191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.418260][ T5] usb 4-1: USB disconnect, device number 2 [ 315.454447][T11191] ums-sddr09 2-1:1.242: USB Mass Storage device detected [ 315.492286][ T2938] usb 3-1: Using ep0 maxpacket: 8 [ 315.561963][ T30] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 315.652514][ T2938] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 315.661106][ T2938] usb 3-1: can't read configurations, error -22 [ 315.684093][ T2938] usb usb3-port1: attempt power cycle [ 315.689954][T11191] scsi host1: usb-storage 2-1:1.242 [ 315.832442][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 315.962304][ T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.974280][ T30] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 315.987224][ T30] usb 1-1: New USB device found, idVendor=1e5e, idProduct=0313, bcdDevice= 0.00 [ 315.987275][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.005888][ T30] usb 1-1: config 0 descriptor?? 17:51:53 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x1, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2179, 0x53, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x6, {[@global=@item_012={0x2, 0x1, 0x0, "b060"}, @global=@item_012={0x2, 0x1, 0x0, "08c9"}]}}, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 316.282274][T11191] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 316.352423][ T30] usbhid 1-1:0.0: can't add hid device: -71 [ 316.358889][ T30] usbhid: probe of 1-1:0.0 failed with error -71 [ 316.385249][ T30] usb 1-1: USB disconnect, device number 6 [ 316.433397][ T2938] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 316.521897][T11191] usb 4-1: Using ep0 maxpacket: 8 [ 316.643138][T11191] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 316.651465][T11191] usb 4-1: config 0 has no interface number 0 [ 316.658242][T11191] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 316.669496][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 316.680894][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 316.692439][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 316.703785][T11191] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 316.717225][T11191] usb 4-1: config 0 interface 164 has no altsetting 0 [ 316.725683][ T2938] usb 3-1: Using ep0 maxpacket: 8 [ 316.735518][ T197] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 74>< PQ: 0 ANSI: 0 [ 316.766548][ T197] scsi 1:0:0:0: Attached scsi generic sg1 type 0 [ 316.803244][T11191] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 316.812759][T11191] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 316.821010][T11191] usb 4-1: Product: syz [ 316.856587][T11191] usb 4-1: config 0 descriptor?? [ 316.883620][ T2938] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 316.891645][ T2938] usb 3-1: can't read configurations, error -22 17:51:54 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r9, 0x0, 0x7, 0xcce}) r10 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r11, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x6768cf33c3b7992e, 0x0) ioctl$LOOP_GET_STATUS(r12, 0x4c03, &(0x7f0000000800)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000940)={0x10, 0x30, 0xfa00, {&(0x7f0000000900)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0xe3b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r13}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000009c0)={'team0\x00', r8}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000a00)=0x0) r15 = getpid() r16 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/snapshot\x00', 0xa400, 0x0) r17 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x1040, 0x0) kcmp$KCMP_EPOLL_TFD(r14, r15, 0x7, r6, &(0x7f0000000ac0)={r16, r17, 0x4}) [ 317.030685][ T5] usb 2-1: USB disconnect, device number 4 [ 317.042208][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 317.049443][T11281] sddr09: could not read card info [ 317.056313][ T367] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 317.063904][ T367] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 317.071982][ T2938] usb 3-1: new high-speed USB device number 8 using dummy_hcd 17:51:54 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000ddbfe908f8060400016200ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c14779f4775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a6bf4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d13"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) r10 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) sendmsg$netlink(r9, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x14}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) [ 317.085927][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 317.094745][ T367] sd 1:0:0:0: [sdb] Write Protect is off [ 317.109347][ T367] sd 1:0:0:0: [sdb] Asking for cache data failed [ 317.116249][ T367] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 317.126268][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.153002][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.184286][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.192991][ T367] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 317.221600][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.245482][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.274306][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.308935][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.335321][ T2938] usb 3-1: Using ep0 maxpacket: 8 [ 317.341004][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.373582][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.397967][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.422069][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.442872][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 17:51:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffff7, 0x4000) r1 = semget(0x2, 0x4, 0x208) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000080)=0x7fff) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4ca32, 0xffffffffffffffff, 0x0) [ 317.477521][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.514602][ T2938] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 317.522601][ T2938] usb 3-1: can't read configurations, error -71 [ 317.559438][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 17:51:54 executing program 1: syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0) [ 317.601039][ T2938] usb usb3-port1: unable to enumerate USB device [ 317.619320][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 17:51:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x14, 0x809, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_LABEL={0x14, 0x3, 'ipddp0\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x3c}}, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r3) sendmsg$netlink(r6, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x14}, 0x0) ioctl$PPPIOCGDEBUG(r6, 0x80047441, &(0x7f0000000040)) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') r7 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x4, 0x200000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4, @in6=@ipv4={[], [], @loopback}}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ac0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r8, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, r9, 0x89afe58883d0d55, 0x0, 0x0, {{}, 0x0, 0x4, 0x0, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100188}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r9, 0x300, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1000) prctl$PR_GET_SECCOMP(0x15) [ 317.646037][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.687578][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.720722][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 317.724700][T11302] IPVS: ftp: loaded support on port[0] = 21 [ 317.727167][T11191] input input6: Timeout waiting for response from device. [ 317.830862][T11191] usb 4-1: USB disconnect, device number 3 17:51:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000400)="0a5c1f023c126285719070") r1 = socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) rseq(&(0x7f0000000000), 0x20, 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="348a21d3", @ANYRES16=r2, @ANYBLOB="210200000000000000000c00000020000500080001007164702014000200080004000000000008000300f7080000"], 0x34}}, 0x0) [ 318.052130][T11302] chnl_net:caif_netlink_parms(): no params data found 17:51:55 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000525d6f404f17316a70300000000109021200010000000009041c0000f026c30051f7bf13deb7e7e3591a73808a78a9b66534a87c9cf3462a457a3e7c5857932af3fbca1730a27c2a799088e3dca88d19b2c74e34b62f724b3964626a0f89aa5eb4eea1165ce25450e9ab126dcb1c50b83a1572e9119a054ac7a0d3d70d92de73dc590cee32e7352b7a72919e67c07f87fb24134bb85ee956cbb4995dc0ddad1c93f09bd59ff823b88b34640abbe943f807b6421c0a1d3686dbea5aa1bdf81ca72e6454393b334e"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x22, {0x22, 0x0, "7e07806b2fef929de3f2f6839c2670121f485dd7d1b330d5a36b831934db0197"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x22, {0x22, 0x0, "7e07806b2fef929de3f2f6839c2670121f485dd7d1b330d5a36b831934db0197"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$cdc_ecm(0x1, 0x57, &(0x7f0000000100)={{0x12, 0x1, 0x731, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x9, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x20, 0x2, 0x2, 0x6, 0x0, 0xff, {{0x325, 0x24, 0x6, 0x0, 0x0, 'n'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x3, 0x7fff, 0xf8}}, {[{{0x9, 0x5, 0x81, 0x3, 0x21e, 0x7, 0x6, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x3b, 0x9, 0xc0, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x3bb, 0x1f, 0x0, 0x8}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x5b, 0x2, 0x7f, 0x40, 0x8d}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x5, [{0x1b, &(0x7f0000000200)=@string={0x1b, 0x3, "be5711fe1821a1a081f690845c6e1ca31e6a9b4d9e5c57db91"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x420}}, {0x69, &(0x7f0000000300)=@string={0x69, 0x3, "a4b73670f51aed6bf3c92d00c1396f3faa62166714d8360f8ecdedf702c844d16ffd29bc41f9b431f17efc93b61ef3b1592aeb344b826af686ff8559848333f30036b88e284bcb0154955d96c2332319872d3803c42f13435a08bce88e42ff88bd84b12b9d2331"}}]}) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r4 = creat(&(0x7f0000000500)='./file0\x00', 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f0000000540)={{0x81, 0x7f}, 'port0\x00', 0x40, 0x100002, 0x7, 0x81, 0x1ff, 0xa9b8, 0x2, 0x0, 0x0, 0x2}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r6 = syz_open_dev$midi(&(0x7f0000000480)='/dev/midi#\x00', 0x9, 0x400000) ioctl$TIOCGSOFTCAR(r6, 0x5419, &(0x7f00000004c0)) ftruncate(r5, 0x3) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000400)={0x3, 0x3000000, "842f9981befbad51a27e797240841b17bc1f9595497f9918", {0x80000000, 0xffffff01}, 0x200}) [ 318.168906][T11302] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.176198][T11302] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.185181][T11302] device bridge_slave_0 entered promiscuous mode [ 318.199003][T11302] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.206323][T11302] bridge0: port 2(bridge_slave_1) entered disabled state 17:51:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70000000000001bad6deab476a39100620100006138cba29500000000000020ba4227f86b4679c21ecb6279240f92c94c58cf6b431b6eff34e1589468c5112cb281c4c6351e3a731289cccf55a55471d00b62956da2ef5b1999f4af71cdf90376271c19314976"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 318.215305][T11302] device bridge_slave_1 entered promiscuous mode [ 318.222543][T11191] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 318.288630][T11302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.323349][T11302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 17:51:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000100)={0x44}, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000000c0)={0xe56f, 0x7}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="734d5d85e5bd840497455a000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080020000f000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) sendmsg$netlink(r6, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x14}, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000000800)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r3) sendfile(r7, r0, &(0x7f00000007c0), 0xffff) r8 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000580)='/dev/sg#\x00', 0x4, 0x222300) r11 = dup2(r10, r8) sendmsg$netlink(r11, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="145bfc00000000000100000001000000", @ANYRES32=r8], 0x14}, 0x0) statx(r2, &(0x7f00000005c0)='./file0\x00', 0x3400, 0x200, &(0x7f0000000600)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r2, &(0x7f0000000380)="f7b190f0c80e7415e28bd5264366c1b2d0d5227f3703366f091be274a8be101cc593f70192a55897d8388435838fb0982e8f36d5d0614e7db1f70d768255bc8d115b7eb22d6858b3be95bd00ba20e0ff1668a5e9765b449e505585dbc9f8f348c13f654a6017951165db43c97cd75ad41a52da00f1a165d29cd07c484ad2268e19d83f7080075f11f34a152f777ab3daab26384c19"}, 0x20) writev(r9, &(0x7f0000000540)=[{&(0x7f0000000480)="5c272832b8e2204901833eaa07b9602a472e1d4e984ff60ec4aecd4df303f0acc59a95300a37d4a141ffd2573b63fcb76ddacedb11a53f7757e9f1981843fff364f7b694a8ccf6fd41ee7399a4d26ed000db498c0564aa3956b765fed3a6afdc255c4b125f202b43cfc0e34fe98340b8fd789e688ff946949cdaaf0b11b2e524204e7b982ef6871438a37deea2292b547b916d225145269e8f76a295adcf0bb3a473479e0630f2e77213", 0xaa}], 0x1) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r11, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r12, 0x800, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x1, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x80) r13 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ashmem\x00', 0x682300, 0x0) splice(r10, &(0x7f0000000700), r13, &(0x7f0000000780), 0x107, 0x2) [ 318.396437][T11302] team0: Port device team_slave_0 added [ 318.406554][T11302] team0: Port device team_slave_1 added [ 318.462067][T11191] usb 4-1: Using ep0 maxpacket: 8 [ 318.502418][ T2938] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 318.529483][T11302] device hsr_slave_0 entered promiscuous mode [ 318.564534][T11302] device hsr_slave_1 entered promiscuous mode [ 318.582783][T11191] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 318.591156][T11191] usb 4-1: config 0 has no interface number 0 [ 318.597405][T11191] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 318.608587][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 318.619929][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 318.631440][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 318.642702][T11191] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 318.656116][T11191] usb 4-1: config 0 interface 164 has no altsetting 0 [ 318.672721][T11302] debugfs: Directory 'hsr0' with parent '/' already present! [ 318.710182][T11302] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.717979][T11302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.725812][T11302] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.733069][T11302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.892344][T11191] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 318.901518][T11191] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 318.910106][T11191] usb 4-1: Product: syz [ 318.922914][ T2938] usb 1-1: config 0 has an invalid interface number: 28 but max is 0 [ 318.931180][ T2938] usb 1-1: config 0 has no interface number 0 [ 318.934628][T11302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.937421][ T2938] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=30.70 [ 318.953045][ T2938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.976878][T11191] usb 4-1: config 0 descriptor?? [ 319.011594][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.015676][ T2938] usb 1-1: config 0 descriptor?? [ 319.032693][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.064373][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.066143][ T2938] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 319.087985][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 319.128304][T11302] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.143839][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 319.152263][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.161775][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.170610][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.171277][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 319.178032][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.202318][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 319.222173][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 319.244746][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 319.266031][T11302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.266801][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 319.276492][T11302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.322686][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.332202][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.341155][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.348395][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.357567][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.366879][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 319.367485][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.383078][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.392846][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.402385][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.412144][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 17:51:56 executing program 1: r0 = getpgrp(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) r4 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x1, 0x2) r5 = socket(0xa, 0x80005, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0004", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r8 = socket(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0x8, @rand_addr="caf96e86a7d4e6fa835db8603a323f0b", 0x372d}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, @in6={0xa, 0x4e22, 0xfc, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0x1be74d89}, @in6={0xa, 0x4e21, 0x1, @remote, 0x4}, @in6={0xa, 0x4e23, 0x5, @empty, 0x341}], 0x80) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000400)={r7, @in6={{0xa, 0x4e24, 0x100, @loopback, 0x1}}, 0x5, 0x14}, &(0x7f00000004c0)=0x90) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x14}, 0x0) r10 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup2(r11, r10) sendmsg$netlink(r12, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r10], 0x14}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000580)={r9, 0x7, 0x38d3, 0x1}, &(0x7f00000005c0)=0x10) r13 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = accept$inet(r3, &(0x7f0000000300)={0x2, 0x0, @local}, &(0x7f0000000340)=0x10) setsockopt$inet_pktinfo(r15, 0x0, 0x8, &(0x7f0000000380)={0x0, @dev={0xac, 0x14, 0x14, 0x22}, @loopback}, 0xc) r16 = dup2(r14, r13) sendmsg$netlink(r16, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x10000024, &(0x7f0000000100)=ANY=[], 0x339}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r16, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0xffffffffffffabef, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x4}, 0x0, 0x0, &(0x7f0000000100)={0x4, 0x6, 0x8000, 0x1ff}, &(0x7f0000000140)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x5}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r0, r3, 0x0, 0x1, &(0x7f0000000000)='\x00', r17}, 0x30) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfc, 0x76, 0x7a, 0x8, 0x13b1, 0x42, 0x339b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xee, 0x0, 0x1, 0x24, 0x79, 0xd1, 0x0, [], [{{0x7, 0x5, 0x81}}]}}]}}]}}, 0x0) [ 319.421577][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.430681][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.440299][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.449410][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.470694][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.479663][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.520441][T11302] 8021q: adding VLAN 0 to HW filter on device batadv0 17:51:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x14}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) r5 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43", 0x29}, {&(0x7f00000001c0)="53000000c90dca800337f40817707b26f12389c65477dd41d60f082ff53e3987a8c251dbe83721bd01d3be55092ab9c97d912a33048c7c616c88b23af97f1746f358cfb266d7eeef18f60f51937a55da6e68", 0x52}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setresgid(0x0, r6, 0x0) semop(0xffffffffffffffff, &(0x7f0000000280)=[{0x4, 0x9, 0x1000}], 0x1) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r5, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x8}, [{0x2, 0x2}], {0x4, 0xcc706817c56c9907}, [{0x8, 0xa}, {0x8, 0x2}, {0x8, 0x0, r6}, {0x8, 0x0, r7}], {0x10, 0x2}}, 0x4c, 0x0) write$P9_RGETATTR(r3, &(0x7f00000001c0)={0xa0, 0x19, 0x2, {0x400, {0x419ff34038ba8e85, 0x0, 0x8}, 0x1, r4, r6, 0x0, 0xffffffff, 0x1f, 0x3, 0x6, 0x9, 0x0, 0xd30, 0xffff, 0x1, 0x9, 0xfffffffffffffff7, 0x12a, 0x8, 0x6}}, 0xa0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@getlink={0x28, 0x12, 0x209, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 319.612107][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 319.632048][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 319.652115][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 319.664541][T11333] sg_write: process 17 (syz-executor.2) changed security contexts after opening file descriptor, this is not allowed. [ 319.677349][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 319.705845][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 319.733789][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 319.764610][ T30] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 319.770746][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 319.792282][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 319.800333][T11191] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input7 17:51:56 executing program 2: setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1a2900, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000040)=0x54) syz_usb_connect$cdc_ncm(0x0, 0x92, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001020000102505a1a4400001028301090280000201dae0480904000001020d00030a24060001ac3dee2ab3052400ae260d240f01faffffff018004009c06241a0100040524150400042402080a2407030000020000000c241bf248000109001f0001090581030c03c73f06090401c401000000000000010102020d008009058202c001797f04925e4563b0d749d151"], &(0x7f00000002c0)={0xa, &(0x7f0000000140)={0xa}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x2, [{0x84, &(0x7f00000001c0)=@string={0x84, 0x3, "1f776397c455e96c75a466fa7a27edbe18787341c83c30d72fa337d89e00ab1362145f10a5ea79ad8e5fb438a709b061179363085ab35c52e1d86eaad3707645afc7c8b86efd44034fd6e457e520997132c75f971e306f9aaf137fccaaf2b00419b8425128d90f0d14db65665b664579478edf1ddcd59467b43507c81751f799328c"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}]}) 17:51:57 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r9, 0x0, 0x7, 0xcce}) r10 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r11, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x6768cf33c3b7992e, 0x0) ioctl$LOOP_GET_STATUS(r12, 0x4c03, &(0x7f0000000800)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000940)={0x10, 0x30, 0xfa00, {&(0x7f0000000900)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0xe3b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r13}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000009c0)={'team0\x00', r8}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000a00)=0x0) r15 = getpid() r16 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/snapshot\x00', 0xa400, 0x0) r17 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x1040, 0x0) kcmp$KCMP_EPOLL_TFD(r14, r15, 0x7, r6, &(0x7f0000000ac0)={r16, r17, 0x4}) [ 320.032426][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 320.046458][ T17] usb 4-1: USB disconnect, device number 4 [ 320.052485][ C0] iforce 4-1:0.164: iforce_usb_irq - usb_submit_urb failed with result -19 [ 320.175193][ T30] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 320.183548][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.193737][ T30] usb 2-1: config 0 has no interface number 0 [ 320.194173][ T2938] gspca_stk1135: reg_w 0xd err -32 [ 320.199935][ T30] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=33.9b [ 320.206086][ T2938] gspca_stk1135: serial bus timeout: status=0x00 [ 320.214145][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.228640][ T2938] gspca_stk1135: Sensor write failed [ 320.234075][ T2938] gspca_stk1135: serial bus timeout: status=0x00 [ 320.240426][ T2938] gspca_stk1135: Sensor write failed [ 320.245843][ T2938] gspca_stk1135: serial bus timeout: status=0x00 [ 320.252304][ T2938] gspca_stk1135: Sensor read failed [ 320.257574][ T2938] gspca_stk1135: serial bus timeout: status=0x00 [ 320.263981][ T2938] gspca_stk1135: Sensor read failed [ 320.269216][ T2938] gspca_stk1135: Detected sensor type unknown (0x0) [ 320.275953][ T2938] gspca_stk1135: serial bus timeout: status=0x00 [ 320.282415][ T2938] gspca_stk1135: Sensor read failed [ 320.287683][ T2938] gspca_stk1135: serial bus timeout: status=0x00 [ 320.294097][ T2938] gspca_stk1135: Sensor read failed [ 320.299395][ T2938] gspca_stk1135: serial bus timeout: status=0x00 [ 320.299406][ T2938] gspca_stk1135: Sensor write failed [ 320.299458][ T2938] gspca_stk1135: serial bus timeout: status=0x00 [ 320.299469][ T2938] gspca_stk1135: Sensor write failed [ 320.299664][ T2938] stk1135: probe of 1-1:0.28 failed with error -32 [ 320.302310][T11191] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 320.366230][ T30] usb 2-1: config 0 descriptor?? [ 320.444337][ T30] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 320.573197][T11191] usb 3-1: Using ep0 maxpacket: 16 [ 320.624828][ T367] usb 2-1: Failed to submit usb control message: -71 [ 320.631660][ T367] usb 2-1: unable to send the bmi data to the device: -71 [ 320.639038][ T367] usb 2-1: unable to get target info from device [ 320.645496][ T367] usb 2-1: could not get target info (-71) [ 320.651387][ T367] usb 2-1: could not probe fw (-71) [ 320.663143][ T30] usb 2-1: USB disconnect, device number 5 17:51:57 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) r10 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) sendmsg$netlink(r9, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x14}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:51:57 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r9, 0x0, 0x7, 0xcce}) r10 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r11, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x6768cf33c3b7992e, 0x0) ioctl$LOOP_GET_STATUS(r12, 0x4c03, &(0x7f0000000800)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000940)={0x10, 0x30, 0xfa00, {&(0x7f0000000900)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0xe3b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r13}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000009c0)={'team0\x00', r8}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000a00)=0x0) r15 = getpid() r16 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/snapshot\x00', 0xa400, 0x0) r17 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x1040, 0x0) kcmp$KCMP_EPOLL_TFD(r14, r15, 0x7, r6, &(0x7f0000000ac0)={r16, r17, 0x4}) [ 320.692778][T11191] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.703078][T11191] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 199, changing to 11 [ 320.714480][T11191] usb 3-1: config 1 interface 1 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.727698][T11191] usb 3-1: config 1 interface 1 has no altsetting 0 17:51:57 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r9, 0x0, 0x7, 0xcce}) r10 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r11, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x6768cf33c3b7992e, 0x0) ioctl$LOOP_GET_STATUS(r12, 0x4c03, &(0x7f0000000800)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000940)={0x10, 0x30, 0xfa00, {&(0x7f0000000900)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0xe3b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r13}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000009c0)={'team0\x00', r8}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000a00)=0x0) r15 = getpid() r16 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/snapshot\x00', 0xa400, 0x0) r17 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcs\x00', 0x1040, 0x0) kcmp$KCMP_EPOLL_TFD(r14, r15, 0x7, r6, &(0x7f0000000ac0)={r16, r17, 0x4}) 17:51:58 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r9, 0x0, 0x7, 0xcce}) r10 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r11, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x6768cf33c3b7992e, 0x0) ioctl$LOOP_GET_STATUS(r12, 0x4c03, &(0x7f0000000800)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000940)={0x10, 0x30, 0xfa00, {&(0x7f0000000900)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0xe3b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r13}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000009c0)={'team0\x00', r8}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000a00)=0x0) r15 = getpid() r16 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/snapshot\x00', 0xa400, 0x0) kcmp$KCMP_EPOLL_TFD(r14, r15, 0x7, r6, &(0x7f0000000ac0)={r16, 0xffffffffffffffff, 0x4}) [ 320.922995][T11191] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.932313][T11191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=131 [ 320.940560][T11191] usb 3-1: Product: syz [ 320.945049][T11191] usb 3-1: SerialNumber: syz 17:51:58 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r9, 0x0, 0x7, 0xcce}) r10 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r11, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x6768cf33c3b7992e, 0x0) ioctl$LOOP_GET_STATUS(r12, 0x4c03, &(0x7f0000000800)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000940)={0x10, 0x30, 0xfa00, {&(0x7f0000000900)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0xe3b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r13}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000009c0)={'team0\x00', r8}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000a00)=0x0) r15 = getpid() kcmp$KCMP_EPOLL_TFD(r14, r15, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) [ 321.082938][ T17] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 321.313551][T11191] usb 3-1: selecting invalid altsetting 1 [ 321.319508][T11191] usb 3-1: selecting invalid altsetting 0 [ 321.325541][T11191] usb 3-1: selecting invalid altsetting 0 [ 321.331439][T11191] cdc_ncm 3-1:1.0: bind() failure [ 321.332414][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 321.343249][T11191] usb 3-1: selecting invalid altsetting 0 [ 321.349090][T11191] usbtest: probe of 3-1:1.1 failed with error -22 [ 321.409969][T11191] usb 3-1: USB disconnect, device number 9 [ 321.460831][ T2938] usb 1-1: USB disconnect, device number 7 [ 321.464516][ T30] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 321.476032][ T17] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 321.484438][ T17] usb 4-1: config 0 has no interface number 0 [ 321.490618][ T17] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 17:51:58 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000020101000000000000100000000000000c0001000000000000000800"], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x86e0e1bbf08d246a}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv6_delrule={0xa8, 0x21, 0x400, 0x70bd29, 0x25dfdbff, {0xa, 0x10, 0x14, 0x5, 0x7, 0x0, 0x0, 0x6, 0x1}, [@FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x8, 0x15, 0x2}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e23}}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_DST={0x14, 0x1, @mcast1}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FRA_DST={0x14, 0x1, @loopback}]}, 0xa8}, 0x1, 0x0, 0x0, 0x18040}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) 17:51:58 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r9, 0x0, 0x7, 0xcce}) r10 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r11, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x6768cf33c3b7992e, 0x0) ioctl$LOOP_GET_STATUS(r12, 0x4c03, &(0x7f0000000800)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000940)={0x10, 0x30, 0xfa00, {&(0x7f0000000900)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0xe3b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r13}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000009c0)={'team0\x00', r8}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000a00)=0x0) kcmp$KCMP_EPOLL_TFD(r14, 0x0, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) [ 321.502000][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 321.513360][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 321.524919][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 321.536508][ T17] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 321.549934][ T17] usb 4-1: config 0 interface 164 has no altsetting 0 17:51:58 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r9, 0x0, 0x7, 0xcce}) r10 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r11, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x6768cf33c3b7992e, 0x0) ioctl$LOOP_GET_STATUS(r12, 0x4c03, &(0x7f0000000800)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000940)={0x10, 0x30, 0xfa00, {&(0x7f0000000900)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0xe3b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r13}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000009c0)={'team0\x00', r8}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000a00)=0x0) kcmp$KCMP_EPOLL_TFD(r14, 0x0, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) [ 321.625807][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 321.776498][ T17] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 321.785737][ T17] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 321.794027][ T17] usb 4-1: Product: syz [ 321.803293][ T17] usb 4-1: config 0 descriptor?? [ 321.812184][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 321.942467][ T30] usb 2-1: config 0 has an invalid interface number: 238 but max is 0 [ 321.950742][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.961149][ T30] usb 2-1: config 0 has no interface number 0 [ 321.967425][ T30] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=33.9b [ 321.976580][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.989214][ T30] usb 2-1: config 0 descriptor?? [ 322.002528][ T2938] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 322.003916][ T17] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 322.044630][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 322.054730][ T30] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 322.070508][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 322.092310][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 322.236868][ T30] usb 2-1: USB disconnect, device number 6 [ 322.243600][ T2938] usb 3-1: Using ep0 maxpacket: 16 [ 322.252690][ T197] usb 2-1: Failed to submit usb control message: -71 [ 322.259499][ T197] usb 2-1: unable to send the bmi data to the device: -71 [ 322.266808][ T197] usb 2-1: unable to get target info from device [ 322.273286][ T197] usb 2-1: could not get target info (-71) [ 322.279193][ T197] usb 2-1: could not probe fw (-71) [ 322.284806][ T17] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 322.302172][ T2938] usb 3-1: device descriptor read/all, error -71 [ 322.312343][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 322.336377][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 322.362034][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 322.383700][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 322.404315][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 17:51:59 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x410000, 0x0) syz_open_dev$video(&(0x7f0000000140)='\xcc\x82\xe03\xae\xbf\x00', 0x3b, 0x48c000) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x2, 0x7, 0x0, "0f348062d210669f0e613600fa33fac1d718753a70ea62b24d0a0e2e4065af66", 0x3432564e}) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000002) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000180)=0xc) 17:51:59 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r9, 0x0, 0x7, 0xcce}) r10 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r11, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x6768cf33c3b7992e, 0x0) ioctl$LOOP_GET_STATUS(r12, 0x4c03, &(0x7f0000000800)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000940)={0x10, 0x30, 0xfa00, {&(0x7f0000000900)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0xe3b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r13}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000009c0)={'team0\x00', r8}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000a00)=0x0) kcmp$KCMP_EPOLL_TFD(r14, 0x0, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:51:59 executing program 2: syz_emit_ethernet(0x66, &(0x7f00000002c0)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x32, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x57}}}}}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x6, 0x80005, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r3, 0x3, 0x6, [0x9ed, 0x6, 0xffff, 0x8, 0x40, 0x4]}, 0x14) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) getsockopt(r5, 0x170, 0x3, &(0x7f0000000080)=""/47, &(0x7f00000000c0)=0x2f) [ 322.433596][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 322.470441][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 322.479192][ T17] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input8 17:51:59 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xc0, 0xbb, 0x9b, 0x40, 0x20b7, 0x1540, 0xef8f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6a, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x21, 0x1, 0x1f}}) syz_usb_control_io(r0, 0x0, &(0x7f0000002400)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)={0x40, 0x21, 0x1}}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x14}, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)=0x0) sched_rr_get_interval(r4, &(0x7f0000000300)) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x3f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x3}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001c40)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) prctl$PR_SET_KEEPCAPS(0x8, 0x0) sendmsg$netlink(r7, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5], 0x14}, 0x0) ioctl$GIO_FONT(r7, 0x4b60, &(0x7f0000000180)=""/168) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0xac, &(0x7f00000003c0)=ANY=[@ANYBLOB="20d8ce"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000008, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x22, {0x22, 0x0, "7e07806b2fef929de3f2f6839c2670121f485dd7d1b330d5a36b831934db0197"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000240)={0xac, &(0x7f0000000340)={0x80, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 322.734198][ T17] usb 4-1: USB disconnect, device number 5 [ 322.862049][ T30] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 323.222122][ T30] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 323.230507][ T30] usb 2-1: config 0 has no interface number 0 [ 323.236824][ T30] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=ef.8f [ 323.246007][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.258257][ T30] usb 2-1: config 0 descriptor?? 17:52:00 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) r10 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) sendmsg$netlink(r9, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x14}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:00 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="2e000000130081c5e4050cecdb4cb9040a485e431d00000081fffffff08ef9000600b0ebb06ac40006001400f9ff", 0x2e}], 0x1}, 0x0) sendmmsg(r0, &(0x7f0000001540), 0x24c, 0x0) 17:52:00 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r9, 0x0, 0x7, 0xcce}) r10 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r11, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x6768cf33c3b7992e, 0x0) ioctl$LOOP_GET_STATUS(r12, 0x4c03, &(0x7f0000000800)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000940)={0x10, 0x30, 0xfa00, {&(0x7f0000000900)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0xe3b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r13}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000009c0)={'team0\x00', r8}) r14 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r14, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:00 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000005380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x22, {0x22, 0x0, "a4d9b1ce6a1541a5687a7490746f1d096cad1308cb87a01ffe4e83d10600b838"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 17:52:00 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r8, 0x0, 0x7, 0xcce}) r9 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r10, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x6768cf33c3b7992e, 0x0) ioctl$LOOP_GET_STATUS(r11, 0x4c03, &(0x7f0000000800)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000940)={0x10, 0x30, 0xfa00, {&(0x7f0000000900)={0xffffffffffffffff}, 0x2, {0xa, 0x4e24, 0xe3b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000980)={0x11, 0x10, 0xfa00, {&(0x7f00000008c0), r12}}, 0x18) r13 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r13, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x8000, 0x0, 0x0) fcntl$getown(r2, 0x9) getpid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) prlimit64(r3, 0xe, &(0x7f0000000280)={0x800000009, 0x1ff}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1a7) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000040)={0xa, 0x4e23, 0xffffffffffffffff, @dev={0xfe, 0x80, [], 0x1c}, 0x1}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="84c46a772fea684c047a1543fb5aa05ce9ee7dbaade15d9211b66f0964f06cec9359064da4fbe27f9ed708927c771fa68e118b750c07292d1b6106b47ecfef5e2c5cb721b67e8895c012e95541dcaf91a904a3543f98c7b833b66d0babe5898f787bb1cb0913ecf91e7dd303073e35a9df01fefb21c0e67acebec04d8005cbf150302780c9c0d8b7520af1dd089b591ecb0a3ec8eb", 0x95}, {0x0}, {&(0x7f0000000400)}], 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="580000000000000029000000390000000208030000000000fe8800000000000000000000000000010000000000000000000000000000000100000000000000000000000000000000ff010000000000000000000000000001080200000000000029000000040000002f3d00000000000003f887d8a5445ae6281557f739a326e37d81607df2ece2c60e6d2d455654cc6b6e37a258ad2d8b929fd27bdc007a42c06b6a67249d356de1e04080e8382f57e08d519901712907193f84425d5e0462607a6ec3aced38a14cee2a962fd0d40d93e2e1e641227da324d87e44299bf171438644f3586f2291a09629769915e5ecccdfdd05f735641ec50718aa4203e3d2f2643f2f41e20791e4c0d743af738f2f3ad029504a1304625d7fdbc86fef52479795e667623239948234f91d2a6cab786ad2f885d2866dacdce55dd14c209b8e48924c56941f8b92d36d499a9407bbc8a75559418a22725e3916738c30a5b35e2174fb49471b660927f42c040108002515e5f3fd3db5201cc569de64a9fbb20395656a022fbec17a9638c0212a4ec7436aa372e61d05020005c204000000099cbf7265baeb7c4b4a58418916a03d8778ad995bb2a227f8ab84cd806bbbebd05e5f059be6621c6d4082cfb60f88af5b9a4803f7fb2fe660576579fdc5346732a6569e53a11856a9c87887820d82bccf9f628ae8af5e7bddffc8e095e5aea6bbce79efd91c915a9048968560d41f04a0669545adc366ea633469453e0c1085cc124491e05e4d1a1dd03ee47a0bc37199dc38b48c57cc1702a68975eb118e3cd34b1cbd4f2f0d1a14556c0b979e5f9acbbb8885897f0cac4b7cff7bf993343f966f0014000000000000002900000043000000ff070000000000001400000000000000290000003e000000080000000000000014000000000000002900000043000000090000000000000048020000000000002900000036000000d945000000000000ff89bc4d5b33b45252789465a53d27386700d63344e1c9c05f265b766bde071444f7d5dcc16fe965851c8ed46c21d86e627ad7e9790162a8dd0840c7a8616c543a7bcc3c056af695c2b224748543831c46e00e592349dd233cce05af67b3722e9e87938ee2f818d0411168ace9170abe083df4df355a67c28e6af4fff642183a4960ed0707e21f1a270b05066a4ed4757328288fa9a70ce1d78e1ebc503a20bd8488182452a6894061df7aa3815c867fc90593695dc34c67c44f7c04bbd140b61d0e218e5f4ffc1be650cc6fe20e0e5aebc355b3d057c050df5cfbd45ba42ee9b70634fc5c9c7244cac51b1178bd8cea7b0b1873ad91776de62fc74d0fa847df2fa0feede680502e4c92817af22348fa90f73d4c90cb0ed58d53035d8b123be5e86316d582958f40dc39f8b6f2cafcfe5ef560e692285d8c123fd0fe362dd0d16bd5f9c581749f0abd03a54795a752c3c6bbc4416870335a7dd70e3399a8f473da26ca71ae07271f4e21053b335387675171070016e2a19852f5ba61410b71d5874ddb06f86a65c5ccc0cc634d7ecb989ff3fc3ac5e91c786b2457750aff725ad553532483e0775bd729317bfb6f02c7e3edfc5f51fce809b1b4f2e53bc315485a342bab769fb9a6f62ab3e8ef9793a14724eb738374a3a09986bc9d348c29074800000006100400100300000000000000060000000000000007000000000000000000000000000000000000000000000009000000000000000200000000000000d7cb00000000000000bb0cc16d13539b7a00000000000029000000080000000400000000000000e00000000000000029000000370000001d18000000000000c2040000040001010005020007000100c910fe880000000000000000000000000101010400000000019d884ea1c6fa0708ba59ba84890385be277159e719dd32f66ba51d32fe338d861bea9cdfdc1262911b06097669635d40ace7ff827348f8bd3470113e014d83684e0f40dd8b0304a730352e7e11dccb1c108d2b6cefa849e907ac72a7a21476c330ca407550cfeb99c3de0998e26a73a594648c2fc98f6695326e6fdba55d2fa67b675450f32b21ebfd52d242caf768745b37b036d193103e0bf131b9817700580000000000000029000000390000000008017c00000000fe8000000000000000000000000000aa7ae53bfb93bcb729a1bace90a3e7523bfe8000000000000000000000000000bbfe8000000000000000000000000000aa380000000000000029000000390000002104010600000000fe8000000000000000000000000000aa00"/1656], 0x678}, 0x40000c1) getpid() semget$private(0x0, 0x3, 0x10100) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) r4 = dup(0xffffffffffffffff) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000003c0)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup2(r7, r6) r9 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r9) r11 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r12, r11) r13 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup2(r14, r13) sendmsg$netlink(r15, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r13], 0x14}, 0x0) sendmsg$netlink(r8, &(0x7f0000028fc8)={0x0, 0x1b, &(0x7f0000019000)=[{&(0x7f0000001200)=ANY=[@ANYRESDEC, @ANYPTR=&(0x7f00000011c0)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYPTR64, @ANYRES32=r8, @ANYRES16=r10, @ANYPTR64, @ANYRESOCT=r12, @ANYBLOB="67c5718558bb14d95a907ec12f4ace59d3c2120bf8a374c513207b7b572c5371a08f5a5d3c2d3fcaafacf2c58446fc5b3ae6eb2f4378d8a2bfa7720035b5d667366b4137e1143e6fab6be49170f05ddba2afb1e5966dc579547294f1ec7d918552b0a01ebee5cce2098bc92c9e46b73989ea5289e58d67c5e71de925395b162033b64d2d3445e55627a3b2936611d671a3758cc1a915ea30f3841837ce8d5950b56a6f39dfafa3079957307d652f34a0e8b8e4bb438b0f5c12121bfd9b99319135352d00e6c7af134a1b8a90e326a99e48700da9018466a991fe1b66daaf", @ANYRESDEC=0x0, @ANYBLOB="f98b5f3956d28b7c640cd652d048e6248eb51a6e34a3736c7ea26eb31fff2909fe20c7ca8b9911ba32d4cf587faa25248ba621d88f0317281174259d40d4800350adde5623fa8947be0f6696a7c19ae0035dd6648f22b9f1b61a4cdd25e4352aa654337c9a6fe1146c869302e5922503cd7402e2b4d167e143aeb867b02489299ef80ee09e2e0cb48d23f817c9b6ca7ceb2751e3fdefcbf68f383c075c0980de773fa73fa2805ae44b62dab8fed5355b7d34e3078ebe94078702bb5dac4c3c4ef7e7a71b1a6387903f4c22dbbf16e47b7921abcbdd", @ANYPTR, @ANYBLOB="b916654f5bee5ee0e37afc9eb2365c78c7162a74ce595fd17e95d6421acf2b80d0579d3c6382a8088cd1d30dc9734c4b13cbfe33d09e5527ff4fd12d1000a9a5a249465f83fb02fa69fd3035e32e6b11a3a126a80c"], @ANYRES64, @ANYRESHEX=r15, @ANYPTR], @ANYRES32]}], 0x1, &(0x7f0000000100)=ANY=[], 0x0, 0x800}, 0x20008001) ioctl$PPPIOCATTACH(r8, 0x4004743d, &(0x7f0000000640)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) getsockopt(r4, 0x0, 0x7f, &(0x7f0000000580)=""/134, &(0x7f0000000400)=0x86) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x0, 0x1ff, 0x0, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, r4, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sync() ftruncate(0xffffffffffffffff, 0x208200) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1004000000001001, 0x2000000000071, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./bus\x00') ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x241) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bc6844e3273d26ce5e525601226e94e117245ea7a23f7e146861a0772e000000000f0000000000000000000000000000000000000000004000", "0ec832aa37c991831eb25895d52dc4092a46931c5c3159d6b4be05e571a62983"}) 17:52:00 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r8, 0x0, 0x7, 0xcce}) r9 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r10, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x6768cf33c3b7992e, 0x0) ioctl$LOOP_GET_STATUS(r11, 0x4c03, &(0x7f0000000800)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000940)={0x10, 0x30, 0xfa00, {&(0x7f0000000900), 0x2, {0xa, 0x4e24, 0xe3b, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}}}, 0x38) r12 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r12, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:00 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r8, 0x0, 0x7, 0xcce}) r9 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r10, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x6768cf33c3b7992e, 0x0) ioctl$LOOP_GET_STATUS(r11, 0x4c03, &(0x7f0000000800)) r12 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r12, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) [ 323.774289][ T2938] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 323.842034][ T17] usb 4-1: new high-speed USB device number 6 using dummy_hcd 17:52:01 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r8, 0x0, 0x7, 0xcce}) r9 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r10, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x6768cf33c3b7992e, 0x0) r11 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r11, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:01 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x171, 0x11, 0x71}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 324.064380][ T2938] usb 3-1: Using ep0 maxpacket: 8 17:52:01 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r8, 0x0, 0x7, 0xcce}) r9 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r10, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r11 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r11, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) [ 324.112025][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 324.183640][ T2938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.194890][ T2938] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 324.208004][ T2938] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 324.217203][ T2938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.225948][ T30] usb 2-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1d, error -32 [ 324.234311][ T30] usb 2-1: Firmware version (0.0) predates our first public release. [ 324.250287][ T30] usb 2-1: Please update to version 0.2 or newer [ 324.257386][ T30] usb 2-1: atusb_probe: initialization failed, error = -32 [ 324.264912][ T30] atusb: probe of 2-1:0.106 failed with error -32 [ 324.277086][ T17] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 324.285599][ T17] usb 4-1: config 0 has no interface number 0 [ 324.291832][ T2938] usb 3-1: config 0 descriptor?? [ 324.291885][ T17] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 324.291969][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 324.319431][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 324.331058][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 324.342667][ T17] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 324.356211][ T17] usb 4-1: config 0 interface 164 has no altsetting 0 [ 324.482588][ T17] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 324.493337][ T17] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 324.501594][ T17] usb 4-1: Product: syz [ 324.509060][ T17] usb 4-1: config 0 descriptor?? [ 324.672054][ T17] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 324.692113][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 324.712214][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 324.732813][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 324.752216][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 324.772294][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 324.778812][ T2938] samsung 0003:0419:0600.0002: unknown main item tag 0x2 [ 324.786219][ T2938] samsung 0003:0419:0600.0002: unknown main item tag 0x4 [ 324.793831][ T2938] samsung 0003:0419:0600.0002: unknown main item tag 0x1 [ 324.803297][ T2938] samsung 0003:0419:0600.0002: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0 [ 324.953336][ T17] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 324.982626][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 324.991514][ T2938] usb 3-1: USB disconnect, device number 12 [ 325.004835][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 325.022171][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 325.042090][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 325.061903][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 325.081911][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 325.102097][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 325.109634][ T17] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input9 [ 325.332957][ T17] usb 4-1: USB disconnect, device number 6 [ 325.762045][ T2938] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 326.012059][ T2938] usb 3-1: Using ep0 maxpacket: 8 [ 326.132043][ T2938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.143199][ T2938] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 326.156232][ T2938] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 326.165543][ T2938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:52:03 executing program 1: r0 = socket$kcm(0x10, 0x4000000002, 0x10) perf_event_open(&(0x7f0000001980)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000013008151e00f80ecdb4cb904014865160b00010006000000000009000e0006001500cd5edc2976d153b4", 0x2e}], 0x1}, 0x0) 17:52:03 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r8, 0x0, 0x7, 0xcce}) r9 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r10, 0x80086601, &(0x7f00000006c0)) getsockopt$inet_dccp_int(r0, 0x21, 0x4cfac8bfcec19c90, &(0x7f0000000700), &(0x7f0000000740)=0x4) r11 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r11, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:03 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000040)={"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"}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vcs\x00', 0x40000, 0x0) recvfrom$inet(r1, &(0x7f0000001980)=""/132, 0x84, 0x100, &(0x7f0000001a40)={0x2, 0x4e20, @multicast2}, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000001a80)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000001ac0)={0x6, 0x7f}) r3 = syz_open_dev$dmmidi(&(0x7f00000021c0)='/dev/dmmidi#\x00', 0x0, 0x321080) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f0000002200)={{0x5, 0x8, 0x81, 0x80, 0x81, 0x7}, 0x100}) r4 = socket$inet_sctp(0x2, 0x6, 0x84) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000002240), &(0x7f0000002280)=0x4) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f00000022c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000002300)=0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002380)={0x0, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000002340)='/dev/vbi#\x00', 0xffffffffffffffff}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000023c0)='/dev/vsock\x00') lsetxattr$trusted_overlay_origin(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)='trusted.overlay.origin\x00', &(0x7f0000002480)='y\x00', 0x2, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000024c0)='/dev/autofs\x00', 0x25000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x2310000000000) splice(r3, &(0x7f0000002500), 0xffffffffffffffff, &(0x7f0000002540), 0xffffffff, 0xa) write$P9_RLOCK(r3, &(0x7f0000002580)={0x8, 0x35, 0x1}, 0x8) pipe2(&(0x7f00000025c0), 0x80000) write$P9_RCREATE(r0, &(0x7f0000002600)={0x18, 0x73, 0x1, {{0x0, 0x0, 0x6}, 0x1}}, 0x18) r7 = syz_open_dev$vcsn(&(0x7f0000002640)='/dev/vcs#\x00', 0x7fffffff, 0x4000) ioctl$KVM_SET_BOOT_CPU_ID(r7, 0xae78, &(0x7f0000002680)=0x2) r8 = syz_open_dev$adsp(&(0x7f00000026c0)='/dev/adsp#\x00', 0x56e7, 0x200000) ioctl$RNDGETENTCNT(r8, 0x80045200, &(0x7f0000002700)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002780)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000002880)=0xe8) r10 = getegid() lchown(&(0x7f0000002740)='./file1\x00', r9, r10) r11 = syz_open_dev$amidi(&(0x7f00000028c0)='/dev/amidi#\x00', 0x400, 0x604002) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000002900)={0x0, 0x4, 0xffffff2f, 0xffffffff}, &(0x7f0000002940)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000002980)={r12, 0x81}, 0x8) 17:52:03 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='d2:Q\xd6K\x00\x00\x00\x00\x148\xd1)b\xf5\"\x97\x86\xd1\xd1v\xf7I\x12`\xb5\xf8I2\x17*>\x14\xdaS\xf0p\xa45\a\'\xa1\x1c\xc0<\xcf\\\x8fF1\xc9\xd0\xb4\x05\x05\x95EU\x11+\xde\x8e\xa2%6\xf8R\xd8\xd8\xafD\x06K\xb6\x9e\x96L\xa8\xae\xea\x1eC\xc3\xc2j\x84\x19\x9b\x00\xf0\xff1\xc8:\n\x89\x825\xf5\\\x9d:\xb0', 0x800, &(0x7f000000a000)) chdir(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000b1d000)='.', 0x2) open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="ed9dac959e9690cde19d86d4b209c2622ee09acc021b0500beeda0b8642b36a098414bbc7ef34eb4490040d2118b80a19191d7eb3200b5597c4286fc306425048be0b150ecf7478f0f13cb7cc2df05c8448b5f7fe1f2f04de66084f0a3cdd3aed44ad992ea73bb636d2545a961c2a8ef8ac82cd257aba8901cee3e3bde6f75566b381ac6c8779a23a5a07a8ec223f59cc7a70ea9068b92bade0f44f090376d475ecb6d01656a3f28e62aed3505869271d3e9048c0ad74de84317b5c83de1c825eba3f15ccc258a07e1197adbac2f098978c14ebb4daec572bb1c11c3145f3e1442e13c011f4bfab0b3981298e916f04b4aaf4dece4"], &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) [ 326.178656][ T17] usb 2-1: USB disconnect, device number 7 [ 326.212452][ T2938] usb 3-1: config 0 descriptor?? 17:52:03 executing program 2: r0 = socket$packet(0x11, 0x20000000000003, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f00000000c0)) 17:52:03 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r8, 0x0, 0x7, 0xcce}) r9 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) ioctl$FS_IOC_GETFLAGS(r10, 0x80086601, &(0x7f00000006c0)) r11 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r11, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:03 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) r10 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) sendmsg$netlink(r9, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x14}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) 17:52:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) time(0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) write$P9_RFLUSH(r2, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) [ 326.602227][ T2938] usbhid 3-1:0.0: can't add hid device: -71 [ 326.608441][ T2938] usbhid: probe of 3-1:0.0 failed with error -71 17:52:03 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r8, 0x0, 0x7, 0xcce}) r9 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) openat$ion(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ion\x00', 0x41000, 0x0) r10 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r10, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) [ 326.644823][ T2938] usb 3-1: USB disconnect, device number 13 [ 326.646140][T11471] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 326.704405][T11478] IPVS: ftp: loaded support on port[0] = 21 17:52:03 executing program 2: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 17:52:03 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r8, 0x0, 0x7, 0xcce}) r9 = syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0x40a85323, &(0x7f00000005c0)={{0x4, 0x9}, 'port0\x00', 0x20, 0x0, 0x5, 0x8ea4, 0xffff, 0xb03c, 0x4, 0x0, 0x4, 0x81}) r10 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r10, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) [ 326.842344][T11191] usb 4-1: new high-speed USB device number 7 using dummy_hcd 17:52:04 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000003404000001007d60b7030000000000006a0a00fe00ba2300850000001f000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 17:52:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) [ 327.015785][T11478] chnl_net:caif_netlink_parms(): no params data found [ 327.092075][T11191] usb 4-1: Using ep0 maxpacket: 8 [ 327.155656][T11478] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.163066][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.172378][T11478] device bridge_slave_0 entered promiscuous mode [ 327.188809][T11478] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.196173][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.204883][T11478] device bridge_slave_1 entered promiscuous mode [ 327.232611][T11191] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 327.236857][T11478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.240908][T11191] usb 4-1: config 0 has no interface number 0 [ 327.255112][T11478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.256235][T11191] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 327.276373][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 327.284957][T11478] team0: Port device team_slave_0 added [ 327.287738][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 327.304838][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 327.310043][T11478] team0: Port device team_slave_1 added [ 327.316105][T11191] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 327.316175][T11191] usb 4-1: config 0 interface 164 has no altsetting 0 [ 327.392893][T11191] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 327.402097][T11191] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 327.406161][T11478] device hsr_slave_0 entered promiscuous mode [ 327.410321][T11191] usb 4-1: Product: syz [ 327.421694][T11191] usb 4-1: config 0 descriptor?? [ 327.472612][T11478] device hsr_slave_1 entered promiscuous mode [ 327.511905][T11478] debugfs: Directory 'hsr0' with parent '/' already present! [ 327.533602][T11478] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.540767][T11478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.548536][T11478] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.555820][T11478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.582026][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 327.602601][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 327.622214][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 327.631259][T11478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.643643][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 327.648770][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.658658][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.669734][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.672367][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 327.684956][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 327.700554][T11478] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.708427][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 327.716131][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.724872][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.732065][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.746083][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.755188][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.762465][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.796089][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 327.805482][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 327.815107][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.824849][ T2938] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 327.839519][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.853184][T11478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 327.881017][T11478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.882026][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 327.913890][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 327.932576][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 327.949189][T11507] Unknown ioctl -2080330098 [ 327.955497][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 327.982048][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 328.004961][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 328.014882][T11507] Unknown ioctl -2080330098 [ 328.025304][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 17:52:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) time(0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) write$P9_RFLUSH(r2, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) 17:52:05 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r8, 0x0, 0x7, 0xcce}) syz_open_dev$media(&(0x7f0000000580)='/dev/media#\x00', 0x9, 0x450040) r9 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r9, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) time(0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) write$P9_RFLUSH(r2, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) 17:52:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) time(0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x800000000004e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) write$P9_RFLUSH(r2, &(0x7f00000001c0)={0x7d6a591eedaef62b}, 0xfffffe36) connect$unix(r2, &(0x7f0000000100)=@abs, 0x6e) [ 328.052651][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 328.060677][T11191] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input10 [ 328.100353][T11191] usb 4-1: USB disconnect, device number 7 [ 328.190430][T11522] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 328.237919][T11524] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:52:05 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000540)={0x0, 0x100, r7, 0x0, r8, 0x0, 0x7, 0xcce}) r9 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r9, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:05 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) r10 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) sendmsg$netlink(r9, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x14}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:05 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000e00)='./file0\x00') 17:52:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) 17:52:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setsockopt$inet_int(r0, 0x0, 0x1f, 0x0, 0x0) 17:52:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x168}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) 17:52:05 executing program 5: getsockname(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x2000000, &(0x7f00000003c0)='em1vboxnet0bdevwlan1\x00') write(0xffffffffffffffff, 0x0, 0x0) 17:52:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) 17:52:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) sysfs$1(0x1, &(0x7f0000000240)='9p\x00') 17:52:05 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@initdev, @in=@remote}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) r7 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r7, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) [ 328.840530][T11557] sysfs: Unknown parameter 'em1vboxnet0bdevwlan1' [ 328.873730][T11557] sysfs: Unknown parameter 'em1vboxnet0bdevwlan1' 17:52:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 17:52:06 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)) r7 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r7, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) [ 328.915146][ T17] usb 4-1: new high-speed USB device number 8 using dummy_hcd 17:52:06 executing program 0: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x2000000, 0x0) [ 329.173504][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 329.304774][ T17] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 329.313118][ T17] usb 4-1: config 0 has no interface number 0 [ 329.319407][ T17] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 329.330629][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 329.342045][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 329.353650][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 329.365410][ T17] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 329.380265][ T17] usb 4-1: config 0 interface 164 has no altsetting 0 [ 329.472257][ T17] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 329.481471][ T17] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 329.489888][ T17] usb 4-1: Product: syz [ 329.495330][ T17] usb 4-1: config 0 descriptor?? [ 329.672148][ T17] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 329.694700][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 329.712046][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 329.732275][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 329.752262][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 329.911950][ T17] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 329.932729][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 329.952119][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 329.972132][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 329.992104][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 330.015869][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 330.042275][ T17] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 330.061973][ T17] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 330.069530][ T17] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input11 [ 330.086751][ T17] usb 4-1: USB disconnect, device number 8 17:52:07 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) r10 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) sendmsg$netlink(r9, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x14}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:07 executing program 5: getsockname(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x2000000, &(0x7f00000003c0)='em1vboxnet0bdevwlan1\x00') write(0xffffffffffffffff, 0x0, 0x0) 17:52:07 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x7f, 0x80000) r7 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r7, 0x7, r6, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:07 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f00000000c0)=""/91, 0x5b) 17:52:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@ipv6_newroute={0x1c, 0x18, 0x331}, 0x1c}}, 0x0) 17:52:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x3206, 0x11, 0x0, 0x293) [ 330.587853][T11588] sysfs: Unknown parameter 'em1vboxnet0bdevwlan1' 17:52:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) 17:52:07 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r1 = open(&(0x7f0000000180)='./bus\x00', 0x4000, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, 0x0, 0x10000) 17:52:07 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss={0x2, 0x20000000}, @sack_perm, @timestamp, @timestamp], 0x5) r6 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r6, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:07 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f00000000c0)=""/91, 0x5b) 17:52:07 executing program 0: io_setup(0x83, &(0x7f00000003c0)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) io_getevents(r0, 0x9, 0x9, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)={0x0, r1+10000000}) 17:52:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x10000000d) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000018c0)='threaded\x00', 0x9) r2 = socket$kcm(0x29, 0x3ffffffffffffe, 0x0) recvmsg(r2, &(0x7f000001bd80)={&(0x7f000001bb40)=@can, 0x80, &(0x7f000001bc40), 0x0, &(0x7f000001bc80)=""/198, 0xc6}, 0x100) [ 330.892001][T11191] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 331.171977][T11191] usb 4-1: Using ep0 maxpacket: 8 [ 331.292289][T11191] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 331.300638][T11191] usb 4-1: config 0 has no interface number 0 [ 331.307057][T11191] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 331.318294][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 331.329682][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 331.341521][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 331.353023][T11191] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 331.366756][T11191] usb 4-1: config 0 interface 164 has no altsetting 0 [ 331.452207][T11191] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 331.461610][T11191] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 331.470421][T11191] usb 4-1: Product: syz [ 331.476322][T11191] usb 4-1: config 0 descriptor?? [ 331.632136][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 331.652215][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 331.672148][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 331.692695][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 331.712084][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 331.732237][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 331.891927][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 331.911948][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 331.932765][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 331.951974][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 331.972200][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 331.992167][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 332.012584][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 332.032482][T11191] iforce 4-1:0.164: usb_submit_urb failed: -71 [ 332.039826][T11191] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input12 [ 332.056758][T11191] usb 4-1: USB disconnect, device number 9 17:52:09 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) r10 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) sendmsg$netlink(r9, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x14}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:09 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f00000000c0)=""/91, 0x5b) 17:52:09 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) accept4$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c, 0x800) r5 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:09 executing program 5: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) fstat(0xffffffffffffffff, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) close(0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000fc0)={@initdev}, &(0x7f0000001000)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000005d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005d40)=0x14, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x43e) write$binfmt_script(r1, &(0x7f0000000dc0)={'#! ', './file0'}, 0x7d) close(0xffffffffffffffff) accept4$packet(0xffffffffffffffff, &(0x7f0000005d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', r2}) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000140)}, 0x1) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getpid() r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000300)=""/36, 0x24, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 17:52:09 executing program 0: futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x0) close(0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000001000)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'}) accept4$packet(0xffffffffffffffff, &(0x7f0000005d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005d40)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x43e) write$binfmt_script(r1, &(0x7f0000000dc0)={'#! ', './file0'}, 0x7d) accept4$packet(0xffffffffffffffff, &(0x7f0000005d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005d40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000140)}, 0x1) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getpid() r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000300)=""/36, 0x24, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 17:52:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x3206, 0x11, 0x0, 0x293) 17:52:09 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xa8}]}, 0x10) sendto$inet(r0, 0x0, 0x211, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xfff, 0x4) sendto$inet(r0, &(0x7f00000012c0)="32268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x3206, 0x11, 0x0, 0x293) 17:52:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) 17:52:09 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x400000002, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000280), 0xfed0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) [ 332.861943][T11191] usb 4-1: new high-speed USB device number 10 using dummy_hcd 17:52:09 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10) r4 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) [ 332.940930][ T2938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 332.949255][ T2938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 332.956892][ T2938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 332.964508][ T2938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 332.972264][ T2938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 332.979816][ T2938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 17:52:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) [ 332.987532][ T2938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 332.995152][ T2938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 333.002770][ T2938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 333.010346][ T2938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 333.018103][ T2938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 333.047971][ T2938] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 [ 333.152328][T11191] usb 4-1: Using ep0 maxpacket: 8 [ 333.272439][T11191] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 333.280810][T11191] usb 4-1: config 0 has no interface number 0 [ 333.287081][T11191] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 333.298316][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 333.309682][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 333.321190][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 333.332650][T11191] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 333.346367][T11191] usb 4-1: config 0 interface 164 has no altsetting 0 [ 333.442661][T11191] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 333.452426][T11191] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 333.460756][T11191] usb 4-1: Product: syz [ 333.466533][T11191] usb 4-1: config 0 descriptor?? [ 333.652112][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 333.673210][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 333.692427][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 333.719767][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 333.742806][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 333.861994][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 333.882144][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 333.903098][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 333.922118][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 333.943479][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 333.962071][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 333.981995][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 334.002012][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 334.022014][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 334.042020][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 334.062034][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 334.082052][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 334.101972][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 334.123191][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 334.142863][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 334.149227][T11191] input input13: Timeout waiting for response from device. 17:52:12 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000ddbfe908f8060400016200ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c14779f4775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a6bf4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d13"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) r10 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) sendmsg$netlink(r9, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x14}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) 17:52:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000280)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000480)=[@acquire_done], 0x0, 0x0, 0x0}) 17:52:12 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000180)={0x0, 0x1, {0x28, 0x6, 0xd, 0x7, 0x6, 0x101, 0x0, 0x32}}) r4 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:12 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 335.593809][T11191] usb 4-1: USB disconnect, device number 10 17:52:12 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6400) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x7}, 0xfe3e) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[@ANYPTR], 0x8) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r3, 0x0, 0xd028, 0x16d0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3}) 17:52:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) 17:52:12 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x1}, {0x9, 0x1}, 0x1, 0x147e0169af99ea8b, 0x99}) r4 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:12 executing program 5: bpf$MAP_UPDATE_ELEM(0x8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000180)}, 0x20) 17:52:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/136, 0x88}], 0x1, 0x0) 17:52:12 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000080)=[{{0x77359400}, 0x15, 0x2, 0xffff}, {{r2, r3/1000+30000}, 0x0, 0x1, 0x3}, {{0x0, 0x7530}, 0x3, 0x0, 0x3}, {{0x77359400}, 0x12, 0x0, 0x6f4c}, {{0x0, 0x2710}, 0x1, 0x0, 0x6}], 0x78) r4 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) [ 336.102368][T11191] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 336.341906][T11191] usb 4-1: Using ep0 maxpacket: 8 [ 336.462223][T11191] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 336.470560][T11191] usb 4-1: config 0 has no interface number 0 [ 336.476910][T11191] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 336.488135][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 336.500115][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 336.511680][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 336.522957][T11191] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 336.536441][T11191] usb 4-1: config 0 interface 164 has no altsetting 0 [ 336.632133][T11191] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 336.641346][T11191] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 336.649639][T11191] usb 4-1: Product: syz [ 336.654931][T11191] usb 4-1: config 0 descriptor?? [ 336.842045][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 336.861964][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 336.881956][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 336.901965][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 336.922261][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.041999][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 337.062023][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.082020][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.102060][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.121995][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.141966][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.161979][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.181955][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.202109][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.221981][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.241957][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.262003][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.282051][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.302012][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.322269][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 337.328578][T11191] input input14: Timeout waiting for response from device. 17:52:15 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000ddbfe908f8060400016200ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c14779f4775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a6bf4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d13"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) r10 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) sendmsg$netlink(r9, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x14}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:15 executing program 5: bpf$MAP_UPDATE_ELEM(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000180)}, 0x20) 17:52:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) 17:52:15 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) dup2(0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000040)) r1 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semtimedop(0x0, 0x0, 0x0, 0x0) [ 338.722636][T11191] usb 4-1: USB disconnect, device number 11 17:52:15 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) preadv(r0, &(0x7f0000001400), 0x1, 0x0) 17:52:15 executing program 5: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) 17:52:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) 17:52:16 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0xffffffff, 0x4, 0xfffffff8, 0x841b, 0x9, 0x9}) r1 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) [ 339.202309][T11191] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 339.441959][T11191] usb 4-1: Using ep0 maxpacket: 8 [ 339.562194][T11191] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 339.570532][T11191] usb 4-1: config 0 has no interface number 0 [ 339.576820][T11191] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 339.588039][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 339.599467][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 339.610960][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 339.623623][T11191] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 339.637117][T11191] usb 4-1: config 0 interface 164 has no altsetting 0 [ 339.722240][T11191] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 339.731370][T11191] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 339.739709][T11191] usb 4-1: Product: syz [ 339.745053][T11191] usb 4-1: config 0 descriptor?? [ 339.902094][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 339.922081][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 339.942023][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 339.961952][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 339.981964][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.002165][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.121952][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 340.142004][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.161958][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.181946][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.201961][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.222054][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.241992][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.262054][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.282029][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.302542][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.322063][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.341963][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.361965][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.382064][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 340.388318][T11191] input input15: Timeout waiting for response from device. 17:52:18 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) r10 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) sendmsg$netlink(r9, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x14}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:18 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x2, 0xf1, 0xf5, 0x8, 0x5f9, 0xffff, 0x45c4, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x54, 0x0, 0x0, 0xff, 0x2, 0xea}}]}}]}}, 0x0) 17:52:18 executing program 0: syz_usb_connect(0x0, 0x36a, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xd7, 0xe1, 0xc, 0x8, 0x14aa, 0x22b, 0x90f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x0, 0x0, 0xb4, 0xba, 0xa1}}]}}]}}, 0x0) 17:52:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) 17:52:18 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 341.789556][T11191] usb 4-1: USB disconnect, device number 12 17:52:18 executing program 4: arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r0 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) 17:52:19 executing program 4: r0 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 342.102284][ T2938] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 342.122171][ T5] usb 1-1: new high-speed USB device number 8 using dummy_hcd 17:52:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) [ 342.282297][T11191] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 342.342067][ T2938] usb 6-1: Using ep0 maxpacket: 8 [ 342.362496][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 342.462141][ T2938] usb 6-1: config 0 has an invalid interface number: 84 but max is 0 [ 342.470330][ T2938] usb 6-1: config 0 has no interface number 0 [ 342.476777][ T2938] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=45.c4 [ 342.486249][ T2938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.495138][ T5] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 342.503562][ T5] usb 1-1: config 0 has no interface number 0 [ 342.509694][ T5] usb 1-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=90.f7 [ 342.518899][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.528216][ T2938] usb 6-1: config 0 descriptor?? [ 342.534187][ T5] usb 1-1: config 0 descriptor?? [ 342.572124][T11191] usb 4-1: Using ep0 maxpacket: 8 [ 342.579361][ T2938] usbserial_generic 6-1:0.84: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 342.590975][ T2938] usbserial_generic 6-1:0.84: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 342.602059][ T2938] usbserial_generic 6-1:0.84: device has no bulk endpoints [ 342.610640][ T2938] safe_serial 6-1:0.84: safe_serial converter detected [ 342.617849][ T2938] safe_serial: probe of 6-1:0.84 failed with error -22 [ 342.632322][ T5] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 342.642404][ T5] dvb-usb: bulk message failed: -22 (2/-30592) [ 342.648768][ T5] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 342.672826][ T5] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 342.683240][ T5] usb 1-1: media controller created [ 342.690497][ T5] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.708633][ T5] usb 1-1: DVB: registering adapter 0 frontend 0 (WideView USB DVB-T)... [ 342.717948][ T5] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 342.732761][T11191] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 342.741027][T11191] usb 4-1: config 0 has no interface number 0 [ 342.747267][T11191] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 342.758457][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 342.769787][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 342.781378][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 342.792629][T11191] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 342.806051][T11191] usb 4-1: config 0 interface 164 has no altsetting 0 [ 342.815525][ T17] usb 6-1: USB disconnect, device number 2 [ 342.842309][ T5] Registered IR keymap rc-dtt200u [ 342.848169][ T5] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 342.862084][ T5] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input16 [ 342.876822][ T5] dvb-usb: schedule remote query interval to 300 msecs. [ 342.884010][ T5] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 342.898803][ T5] usb 1-1: USB disconnect, device number 8 [ 342.942160][T11191] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 342.951315][T11191] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 342.959998][T11191] usb 4-1: Product: syz [ 342.969975][T11191] usb 4-1: config 0 descriptor?? [ 342.990846][ T5] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 343.132078][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 343.152148][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.171965][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.192013][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.212829][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.232168][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.352066][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 343.372099][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.391962][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.412046][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.432143][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.453272][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.472196][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.493246][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.513449][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.533429][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.552129][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.572067][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.582207][ T17] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 343.592160][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.612222][ T4893] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 343.614030][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 343.626267][T11191] input input17: Timeout waiting for response from device. [ 343.841963][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 343.861966][ T4893] usb 6-1: Using ep0 maxpacket: 8 [ 343.962125][ T17] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 343.970462][ T17] usb 1-1: config 0 has no interface number 0 [ 343.976769][ T17] usb 1-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=90.f7 [ 343.986035][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.994953][ T4893] usb 6-1: config 0 has an invalid interface number: 84 but max is 0 [ 344.003170][ T4893] usb 6-1: config 0 has no interface number 0 [ 344.009292][ T4893] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=45.c4 [ 344.018515][ T4893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.027816][ T17] usb 1-1: config 0 descriptor?? [ 344.033833][ T4893] usb 6-1: config 0 descriptor?? [ 344.075696][ T17] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 344.085632][ T17] dvb-usb: bulk message failed: -22 (2/-30592) [ 344.091917][ T17] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 344.103533][ T4893] usbserial_generic 6-1:0.84: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 344.115223][ T4893] usbserial_generic 6-1:0.84: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 344.126248][ T4893] usbserial_generic 6-1:0.84: device has no bulk endpoints [ 344.135043][ T4893] safe_serial 6-1:0.84: safe_serial converter detected [ 344.142249][ T4893] safe_serial: probe of 6-1:0.84 failed with error -22 [ 344.152432][ T17] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 344.162628][ T17] usb 1-1: media controller created [ 344.169924][ T17] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.187926][ T17] usb 1-1: DVB: registering adapter 0 frontend 0 (WideView USB DVB-T)... [ 344.196687][ T17] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 344.242224][ T17] Registered IR keymap rc-dtt200u [ 344.248046][ T17] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 344.261247][ T17] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input18 [ 344.276104][ T4893] usb 6-1: USB disconnect, device number 3 [ 344.286728][ T17] dvb-usb: schedule remote query interval to 300 msecs. [ 344.293781][ T17] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 344.311338][ T17] usb 1-1: USB disconnect, device number 9 [ 344.421186][ T17] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. 17:52:21 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000ddbfe908f8060400016200ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c14779f4775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a6bf4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d13"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) r10 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) sendmsg$netlink(r9, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x14}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:21 executing program 4: getpid() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) read$alg(r2, &(0x7f00000000c0)=""/91, 0x5b) 17:52:21 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x7e, 0xe8, 0xbd, 0x10, 0x19b5, 0x21, 0x1d76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xab, 0x1, 0x0, 0x9, 0xbb, 0xb3}}]}}]}}, 0x0) 17:52:21 executing program 0: syz_usb_connect(0x0, 0x36a, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xd7, 0xe1, 0xc, 0x8, 0x14aa, 0x22b, 0x90f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x0, 0x0, 0xb4, 0xba, 0xa1}}]}}]}}, 0x0) [ 344.908808][ T17] usb 4-1: USB disconnect, device number 13 17:52:22 executing program 4: getpid() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) read$alg(r2, &(0x7f00000000c0)=""/91, 0x5b) 17:52:22 executing program 4: getpid() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}) 17:52:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) read$alg(r2, &(0x7f00000000c0)=""/91, 0x5b) [ 345.213353][T11191] usb 1-1: new high-speed USB device number 10 using dummy_hcd 17:52:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 345.272073][ T4893] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 345.383689][ T17] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 345.462758][T11191] usb 1-1: Using ep0 maxpacket: 8 [ 345.522197][ T4893] usb 6-1: Using ep0 maxpacket: 16 [ 345.582219][T11191] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 345.590600][T11191] usb 1-1: config 0 has no interface number 0 [ 345.596894][T11191] usb 1-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=90.f7 [ 345.606043][T11191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.615229][T11191] usb 1-1: config 0 descriptor?? [ 345.632018][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 345.652566][ T4893] usb 6-1: config 0 has an invalid interface number: 171 but max is 0 [ 345.655895][T11191] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 345.660889][ T4893] usb 6-1: config 0 has no interface number 0 [ 345.670638][T11191] dvb-usb: bulk message failed: -22 (2/-30592) [ 345.676895][ T4893] usb 6-1: config 0 interface 171 has no altsetting 0 [ 345.682936][T11191] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 345.712667][T11191] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 345.722919][T11191] usb 1-1: media controller created [ 345.730181][T11191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.745227][T11191] usb 1-1: DVB: registering adapter 0 frontend 0 (WideView USB DVB-T)... [ 345.754398][T11191] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 345.762463][ T17] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 345.771947][ T17] usb 4-1: config 0 has no interface number 0 [ 345.778134][ T17] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 345.789344][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 345.800735][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 345.812340][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 345.823674][ T17] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 345.824032][T11191] Registered IR keymap rc-dtt200u [ 345.837200][ T17] usb 4-1: config 0 interface 164 has no altsetting 0 [ 345.849949][T11191] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 345.863091][T11191] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input19 [ 345.877149][T11191] dvb-usb: schedule remote query interval to 300 msecs. [ 345.884222][T11191] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 345.897837][T11191] usb 1-1: USB disconnect, device number 10 [ 345.932752][ T4893] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=1d.76 [ 345.941969][ T4893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.950021][ T4893] usb 6-1: Product: syz [ 345.954323][ T4893] usb 6-1: Manufacturer: syz [ 345.958980][ T4893] usb 6-1: SerialNumber: syz [ 345.964493][ T17] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 345.973693][ T17] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 345.981954][ T17] usb 4-1: Product: syz [ 345.987802][ T17] usb 4-1: config 0 descriptor?? [ 345.993722][ T4893] usb 6-1: config 0 descriptor?? [ 346.044765][ T4893] hub 6-1:0.171: ignoring external hub [ 346.049482][T11191] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 346.151913][ T17] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 346.172089][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.192037][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.212098][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.232119][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.252495][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.344929][ T4893] usb 6-1: USB disconnect, device number 4 [ 346.373990][ T17] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 346.392376][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.416626][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.442195][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.462813][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.482242][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.502293][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.522037][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.542130][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.562881][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.582017][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.602475][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.623250][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.642079][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 346.648790][ T17] input input20: Timeout waiting for response from device. [ 347.011894][T11191] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 347.251831][T11191] usb 6-1: Using ep0 maxpacket: 16 [ 347.372302][T11191] usb 6-1: config 0 has an invalid interface number: 171 but max is 0 [ 347.380602][T11191] usb 6-1: config 0 has no interface number 0 [ 347.386892][T11191] usb 6-1: config 0 interface 171 has no altsetting 0 [ 347.552136][T11191] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=1d.76 [ 347.561341][T11191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.569538][T11191] usb 6-1: Product: syz [ 347.573878][T11191] usb 6-1: Manufacturer: syz [ 347.578517][T11191] usb 6-1: SerialNumber: syz [ 347.584549][T11191] usb 6-1: config 0 descriptor?? [ 347.622937][T11191] hub 6-1:0.171: ignoring external hub [ 347.935421][T11191] usb 6-1: USB disconnect, device number 5 17:52:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:25 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000ddbfe908f8060400016200ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c14779f4775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a6bf4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d13"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) r10 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) sendmsg$netlink(r9, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7], 0x14}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:25 executing program 4: r0 = getpid() kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) 17:52:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) 17:52:25 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x7e, 0xe8, 0xbd, 0x10, 0x19b5, 0x21, 0x1d76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xab, 0x0, 0x0, 0x9, 0xbb, 0xb3}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @string={0x4, 0x3, "cd05"}}, 0x0, 0x0, 0x0}, 0x0) 17:52:25 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x7e, 0xe8, 0xbd, 0x10, 0x19b5, 0x21, 0x1d76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xab, 0x1, 0x0, 0x9, 0xbb, 0xb3}}]}}]}}, 0x0) [ 348.034397][ T5] usb 4-1: USB disconnect, device number 14 17:52:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:25 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x225, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xe9d6, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x29, {0xfedc}}}, &(0x7f0000000bc0)={0xcc, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:52:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) 17:52:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) [ 348.352632][ T2938] usb 1-1: new high-speed USB device number 11 using dummy_hcd 17:52:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 348.502586][T11191] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 348.522505][ T5] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 348.562400][ T12] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 348.612262][ T2938] usb 1-1: Using ep0 maxpacket: 16 [ 348.742386][ T2938] usb 1-1: config 0 has an invalid interface number: 171 but max is 0 [ 348.750726][ T2938] usb 1-1: config 0 has no interface number 0 [ 348.757321][T11191] usb 6-1: Using ep0 maxpacket: 16 [ 348.772034][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 348.812179][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 348.882155][T11191] usb 6-1: config 0 has an invalid interface number: 171 but max is 0 [ 348.890517][T11191] usb 6-1: config 0 has no interface number 0 [ 348.897168][T11191] usb 6-1: config 0 interface 171 has no altsetting 0 [ 348.904620][ T5] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 348.913158][ T5] usb 4-1: config 0 has no interface number 0 [ 348.919386][ T5] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 348.930722][ T5] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 348.942261][ T5] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 348.953905][ T5] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 348.965209][ T5] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 348.979226][ T5] usb 4-1: config 0 interface 164 has no altsetting 0 [ 348.986586][ T2938] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=1d.76 [ 348.995757][ T2938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.003964][ T2938] usb 1-1: Product: syz [ 349.008178][ T2938] usb 1-1: Manufacturer: syz [ 349.012967][ T2938] usb 1-1: SerialNumber: syz [ 349.018921][ T2938] usb 1-1: config 0 descriptor?? [ 349.052734][ T12] usb 5-1: config 0 interface 0 altsetting 243 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.063913][ T12] usb 5-1: config 0 interface 0 has no altsetting 0 [ 349.070574][ T12] usb 5-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00 [ 349.079727][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.090283][ T2938] hub 1-1:0.171: ignoring external hub [ 349.099317][ T5] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 349.108584][ T5] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 349.116987][ T5] usb 4-1: Product: syz [ 349.122950][ T12] usb 5-1: config 0 descriptor?? [ 349.128852][ T5] usb 4-1: config 0 descriptor?? [ 349.162226][T11191] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=1d.76 [ 349.171435][T11191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.179719][T11191] usb 6-1: Product: syz [ 349.184122][T11191] usb 6-1: Manufacturer: syz [ 349.188764][T11191] usb 6-1: SerialNumber: syz [ 349.203826][T11191] usb 6-1: config 0 descriptor?? [ 349.243325][T11191] hub 6-1:0.171: ignoring external hub [ 349.321952][ T5] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 349.342027][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 349.362183][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 349.382212][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 349.402283][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 349.522196][ T5] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 349.543304][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 349.564371][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 349.582151][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 349.591680][ T2938] usb 1-1: USB disconnect, device number 11 [ 349.601717][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x2 [ 349.609080][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.616474][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.623613][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.630677][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.637716][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.644796][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.651951][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.658928][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.666019][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.673038][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.680068][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.687150][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.694179][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.701150][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.708298][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.715342][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.722452][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.729474][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.736576][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.743618][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.750634][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.757766][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.764890][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.772022][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.779052][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.786145][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.793154][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.800150][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.807250][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.814381][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.821352][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.828414][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.835507][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.842605][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.849602][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.856987][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.864073][ T12] apple 0003:05AC:0225.0004: unknown main item tag 0x0 [ 349.872442][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 349.879939][ T12] apple 0003:05AC:0225.0004: hidraw0: USB HID ve9.d6 Device [HID 05ac:0225] on usb-dummy_hcd.4-1/input0 [ 349.894563][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 349.905482][ T12] usb 5-1: USB disconnect, device number 2 [ 349.928708][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 349.953253][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 349.973221][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 349.981017][T11191] usb 6-1: USB disconnect, device number 6 [ 349.992865][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 350.013225][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 350.032984][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 350.057078][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 350.083625][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 350.102436][ T5] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 350.108857][ T5] input input21: Timeout waiting for response from device. [ 350.381943][ T2938] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 350.621957][T11191] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 350.629815][ T2938] usb 1-1: Using ep0 maxpacket: 16 [ 350.752701][ T2938] usb 1-1: config 0 has an invalid interface number: 171 but max is 0 [ 350.760927][ T2938] usb 1-1: config 0 has no interface number 0 [ 350.871866][T11191] usb 5-1: Using ep0 maxpacket: 8 [ 350.922265][ T2938] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=1d.76 [ 350.931484][ T2938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.939713][ T2938] usb 1-1: Product: syz [ 350.943970][ T2938] usb 1-1: Manufacturer: syz [ 350.948599][ T2938] usb 1-1: SerialNumber: syz [ 350.955236][ T2938] usb 1-1: config 0 descriptor?? [ 350.992259][T11191] usb 5-1: config 0 interface 0 altsetting 243 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.003621][T11191] usb 5-1: config 0 interface 0 has no altsetting 0 [ 351.010322][T11191] usb 5-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00 [ 351.019552][T11191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.029077][ T2938] hub 1-1:0.171: ignoring external hub [ 351.038683][T11191] usb 5-1: config 0 descriptor?? 17:52:28 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) r9 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0x6, &(0x7f0000000700)=0x1, 0x4) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, 0xffffffffffffffff) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) 17:52:28 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x7e, 0xe8, 0xbd, 0x10, 0x19b5, 0x21, 0x1d76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xab, 0x0, 0x0, 0x9, 0xbb, 0xb3}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @string={0x4, 0x3, "cd05"}}, 0x0, 0x0, 0x0}, 0x0) 17:52:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:28 executing program 5: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdd, 0xbf, 0xe9, 0x8, 0x6f8, 0x4, 0x6201, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa4, 0x0, 0x2, 0x48, 0x81, 0x75, 0x0, [], [{{0x9, 0x5, 0x85, 0xb}}, {{0x9, 0x5, 0x1, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0xac, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 351.140286][ T17] usb 4-1: USB disconnect, device number 15 17:52:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:28 executing program 4: syz_usb_connect(0x0, 0x3b3, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6c, 0x3, 0xe0, 0x8, 0x24c6, 0xd183, 0x4f36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x2, 0xff, 0x5d, 0x81, 0x0, [], [{{0x9, 0x5, 0x85, 0xb}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) 17:52:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, 0xffffffffffffffff) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) 17:52:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 351.382836][T11191] usbhid 5-1:0.0: can't add hid device: -71 [ 351.389121][T11191] usbhid: probe of 5-1:0.0 failed with error -71 [ 351.398194][ T2938] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 351.415691][T11191] usb 5-1: USB disconnect, device number 3 [ 351.483654][ T4893] usb 6-1: new high-speed USB device number 7 using dummy_hcd 17:52:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, 0xffffffffffffffff) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) 17:52:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 351.634879][ T17] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 351.642351][ T2938] usb 1-1: Using ep0 maxpacket: 16 [ 351.748444][ T4893] usb 6-1: Using ep0 maxpacket: 8 [ 351.831990][T11191] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 351.873968][ T4893] usb 6-1: config 0 has an invalid interface number: 164 but max is 0 [ 351.882432][ T4893] usb 6-1: config 0 has no interface number 0 [ 351.888592][ T4893] usb 6-1: config 0 interface 164 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 351.899822][ T4893] usb 6-1: config 0 interface 164 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 351.910892][ T4893] usb 6-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 351.920057][ T4893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.929929][ T4893] usb 6-1: config 0 descriptor?? [ 351.954129][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 352.071972][T11191] usb 5-1: Using ep0 maxpacket: 8 [ 352.072020][ T17] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 352.072085][ T17] usb 4-1: config 0 has no interface number 0 [ 352.091652][ T17] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 352.102885][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 352.114231][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 352.125788][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 352.137039][ T17] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 352.150511][ T17] usb 4-1: config 0 interface 164 has no altsetting 0 [ 352.172180][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -110 [ 352.192134][T11191] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 352.192224][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 352.200457][T11191] usb 5-1: config 0 has no interface number 0 [ 352.200547][T11191] usb 5-1: config 0 interface 169 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 352.224143][T11191] usb 5-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 352.224359][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 352.233661][T11191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.249063][T11191] usb 5-1: config 0 descriptor?? [ 352.272395][ T17] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 352.281994][ T17] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 352.290290][ T17] usb 4-1: Product: syz [ 352.296156][ T17] usb 4-1: config 0 descriptor?? [ 352.413080][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -110 [ 352.432135][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 352.452303][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 352.462212][ T17] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 352.473691][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 352.482263][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 352.492199][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 352.502172][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 352.510818][T11191] usb 5-1: USB disconnect, device number 4 [ 352.521439][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 352.528694][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 352.543374][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 352.553473][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 352.562757][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 352.582308][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 352.602109][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 352.622056][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 352.642129][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 352.662041][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 352.682064][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 352.703309][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 352.712261][ T17] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 352.723147][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 352.729641][ T4893] input input22: Timeout waiting for response from device. [ 352.740100][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 352.747273][ T4893] usb 6-1: USB disconnect, device number 7 [ 352.763199][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 352.782406][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 352.802474][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 352.822094][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 352.842073][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 352.861999][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 352.869541][ T17] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input23 [ 353.087455][ T30] usb 4-1: USB disconnect, device number 16 [ 353.241884][ T4893] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 353.282022][ T17] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 353.492104][ T4893] usb 6-1: Using ep0 maxpacket: 8 [ 353.521919][ T17] usb 5-1: Using ep0 maxpacket: 8 [ 353.612676][ T4893] usb 6-1: config 0 has an invalid interface number: 164 but max is 0 [ 353.620962][ T4893] usb 6-1: config 0 has no interface number 0 [ 353.627364][ T4893] usb 6-1: config 0 interface 164 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 353.638565][ T4893] usb 6-1: config 0 interface 164 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 353.649848][ T4893] usb 6-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 17:52:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) 17:52:30 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) r9 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000600)=0x814300, 0x4) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) [ 353.659032][ T4893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.671006][ T17] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 353.679430][ T17] usb 5-1: config 0 has no interface number 0 [ 353.685735][ T17] usb 5-1: config 0 interface 169 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 353.696952][ T17] usb 5-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 353.706135][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.719326][ T17] usb 5-1: config 0 descriptor?? [ 353.735817][ T4893] usb 6-1: config 0 descriptor?? [ 353.902007][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -110 [ 353.922396][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 353.942034][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 353.962106][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 353.970722][ T2938] usb 5-1: USB disconnect, device number 5 [ 353.983224][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 354.032013][T11191] usb 4-1: new high-speed USB device number 17 using dummy_hcd 17:52:31 executing program 5: syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8d, 0xd1, 0x47, 0x10, 0x41e, 0x4017, 0x2e61, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x1, 0xe6, 0x79, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0) [ 354.161991][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -110 [ 354.182176][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -32 [ 354.203123][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 17:52:31 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x34, 0xbd, 0x90, 0x40, 0x846, 0x1040, 0x9a6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe0, 0x0, 0x0, 0x4c, 0xe5, 0x7a}}]}}]}}, 0x0) 17:52:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) [ 354.225993][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 354.253030][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 354.272118][T11191] usb 4-1: Using ep0 maxpacket: 8 [ 354.278468][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 354.312132][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 354.336229][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 354.372044][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 354.392232][T11191] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 354.400669][T11191] usb 4-1: config 0 has no interface number 0 [ 354.407053][T11191] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 354.407930][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 354.418264][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 354.436833][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 354.448406][T11191] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 354.459724][T11191] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 354.461519][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 354.473176][T11191] usb 4-1: config 0 interface 164 has no altsetting 0 17:52:31 executing program 4: syz_usb_connect(0x0, 0x3b3, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6c, 0x3, 0xe0, 0x8, 0x24c6, 0xd183, 0x4f36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x2, 0xff, 0x5d, 0x81, 0x0, [], [{{0x9, 0x5, 0x85, 0xb}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) 17:52:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) [ 354.511421][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 354.554457][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 354.562333][ T2938] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 354.598817][ T4893] iforce 6-1:0.164: usb_submit_urb failed: -71 [ 354.605228][ T4893] input input24: Timeout waiting for response from device. 17:52:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 354.656946][ T4893] usb 6-1: USB disconnect, device number 8 [ 354.662463][T11191] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 354.672164][T11191] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 354.680414][T11191] usb 4-1: Product: syz 17:52:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) [ 354.726656][T11191] usb 4-1: config 0 descriptor?? 17:52:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 354.842221][ T2938] usb 1-1: device firmware changed [ 354.848053][ T2938] usb 1-1: USB disconnect, device number 12 [ 354.893762][ T12] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 354.901893][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 354.924141][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 354.942484][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 354.964805][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 354.984443][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 355.004557][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 355.042352][ T4893] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 355.131964][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 355.162121][T11191] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 355.182230][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 355.202066][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 355.213092][ T2938] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 355.222839][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 355.252361][ T12] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 355.261152][ T12] usb 5-1: config 0 has no interface number 0 [ 355.267730][ T12] usb 5-1: config 0 interface 169 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 355.279353][ T12] usb 5-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 355.288769][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.298778][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 355.305964][ T12] usb 5-1: config 0 descriptor?? [ 355.311973][ T4893] usb 6-1: Using ep0 maxpacket: 16 [ 355.322260][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 355.349309][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 355.376121][T11191] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 355.384196][T11191] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input25 [ 355.442335][ T4893] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 355.451090][ T4893] usb 6-1: config 0 has no interface number 0 [ 355.457354][ T4893] usb 6-1: config 0 interface 19 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 355.468026][ T4893] usb 6-1: config 0 interface 19 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 355.479230][ T4893] usb 6-1: config 0 interface 19 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 355.492775][ T4893] usb 6-1: New USB device found, idVendor=041e, idProduct=4017, bcdDevice=2e.61 [ 355.502206][ T4893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.512016][ T4893] usb 6-1: config 0 descriptor?? [ 355.549087][ T17] usb 5-1: USB disconnect, device number 6 [ 355.562106][ T4893] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4017 [ 355.626181][ T30] usb 4-1: USB disconnect, device number 17 [ 355.674610][ T2938] usb 1-1: config 0 has an invalid interface number: 224 but max is 0 [ 355.682953][ T2938] usb 1-1: config 0 has no interface number 0 [ 355.689131][ T2938] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice= 9.a6 [ 355.698333][ T2938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.709052][ T2938] usb 1-1: config 0 descriptor?? [ 355.782700][ T4893] gspca_zc3xx: reg_w_i err -71 [ 355.972179][ T2938] asix 1-1:0.224 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 355.982612][ T2938] asix: probe of 1-1:0.224 failed with error -71 [ 355.992881][ T2938] usb 1-1: USB disconnect, device number 13 17:52:33 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000ddbfe908f8060400016200ed00010902240001000000000904a4e92319b875000905850b000d0000000905010341000000005b7481db4894cd501e42ffc9c7e69f4eacc71f2d60087793bb9db2c4c9e1830101e114d5c8956f42cf4d7c92f71ff0fb85abd1fd06671269ec4b3a4830a47e74aef28fbdde383db227b6f1a02e84847cfc0a3be4f07648913d73ae7e156c21cf44e1fda4d436b133991fecd3023bf386cb21ed85b695b2f579912e5eea4b2db0ee3bc2e645dcdcb82cb7732fce272a39e6922ffffc8243a06685e47356542838ec20f8d4ee9bd76a4c14779f4775dc4c2908b4f3e21de4c986d961d6bf574f81c2c7c0c559385a275f54336d317609e4ea205b5b6bb70c1a68509ee851572af4b5bb72964b121cebdc48519cc5c9c100d5bb10c71a1c2de1116a841eadc3990bfa24f1663c634615e4a64eb004a73e70d5e7349cdacb79a96654172ce8de333e4be6b3c51e4bb8688576653a6bf4025cb78bd0eaaf4e02d6cf382bbf4b1e6c413b06dae03fca569d13"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) [ 356.401838][ T4893] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 356.408426][ T4893] gspca_zc3xx: probe of 6-1:0.19 failed with error -71 [ 356.422279][ T4893] usb 6-1: USB disconnect, device number 9 [ 356.531863][ T30] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 356.731916][ T17] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 356.772054][ T4893] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 356.780006][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 356.902063][ T30] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 356.910498][ T30] usb 4-1: config 0 has no interface number 0 [ 356.916811][ T30] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 356.927947][ T30] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 356.939345][ T30] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 356.950921][ T30] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 356.962252][ T30] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 356.976211][ T30] usb 4-1: config 0 interface 164 has no altsetting 0 [ 357.033143][ T4893] usb 6-1: Using ep0 maxpacket: 16 [ 357.062003][ T30] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 357.071180][ T30] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 357.079765][ T30] usb 4-1: Product: syz [ 357.086613][ T30] usb 4-1: config 0 descriptor?? [ 357.162218][ T17] usb 1-1: config 0 has an invalid interface number: 224 but max is 0 [ 357.170634][ T17] usb 1-1: config 0 has no interface number 0 [ 357.176942][ T17] usb 1-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice= 9.a6 [ 357.186084][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.195010][ T4893] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 357.203218][ T4893] usb 6-1: config 0 has no interface number 0 [ 357.209331][ T4893] usb 6-1: config 0 interface 19 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 357.220036][ T4893] usb 6-1: config 0 interface 19 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 357.231205][ T4893] usb 6-1: config 0 interface 19 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 357.244371][ T4893] usb 6-1: New USB device found, idVendor=041e, idProduct=4017, bcdDevice=2e.61 [ 357.253531][ T4893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:52:34 executing program 5: syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8d, 0xd1, 0x47, 0x10, 0x41e, 0x4017, 0x2e61, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x1, 0xe6, 0x79, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0) [ 357.263182][ T17] usb 1-1: config 0 descriptor?? [ 357.269139][ T4893] usb 6-1: config 0 descriptor?? [ 357.283736][ T30] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 357.296382][ T4893] usb 6-1: can't set config #0, error -71 [ 357.311560][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 357.329902][ T4893] usb 6-1: USB disconnect, device number 10 [ 357.338778][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 357.365733][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 17:52:34 executing program 0: syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x28, 0xc1, 0x3, 0x8, 0x6993, 0xb001, 0xbf14, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x30, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x38b, 0xffffffffffffffff}}]}}]}}]}}, 0x0) 17:52:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) 17:52:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:34 executing program 4: syz_usb_connect(0x0, 0x3b3, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6c, 0x3, 0xe0, 0x8, 0x24c6, 0xd183, 0x4f36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x2, 0xff, 0x5d, 0x81, 0x0, [], [{{0x9, 0x5, 0x85, 0xb}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) [ 357.502017][ T17] asix 1-1:0.224 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 357.512701][ T17] asix: probe of 1-1:0.224 failed with error -71 [ 357.532005][ T30] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 357.554153][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 357.573350][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 357.584551][ T17] usb 1-1: USB disconnect, device number 14 [ 357.599273][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 17:52:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r2, r0) read$alg(r3, &(0x7f00000000c0)=""/91, 0x5b) 17:52:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 357.624915][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 357.646607][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 357.672449][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 357.692247][ T30] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 357.700207][ T30] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input26 17:52:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) [ 357.782221][ T4893] usb 6-1: new high-speed USB device number 11 using dummy_hcd 17:52:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 357.862200][T11118] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 357.896840][T12046] cgroup: fork rejected by pids controller in /syz1 [ 357.919908][ T2938] usb 4-1: USB disconnect, device number 18 [ 357.982233][ T17] usb 1-1: new low-speed USB device number 15 using dummy_hcd 17:52:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 358.022615][ T4893] usb 6-1: Using ep0 maxpacket: 16 [ 358.112204][T11118] usb 5-1: Using ep0 maxpacket: 8 [ 358.143547][ T4893] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 358.151954][ T4893] usb 6-1: config 0 has no interface number 0 [ 358.158096][ T4893] usb 6-1: config 0 interface 19 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 358.168775][ T4893] usb 6-1: config 0 interface 19 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 358.180420][ T4893] usb 6-1: config 0 interface 19 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 358.193553][ T4893] usb 6-1: New USB device found, idVendor=041e, idProduct=4017, bcdDevice=2e.61 [ 358.202744][ T4893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.223073][ T4893] usb 6-1: config 0 descriptor?? [ 358.265297][ T4893] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4017 [ 358.292167][T11118] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 358.301482][T11118] usb 5-1: config 0 has no interface number 0 [ 358.309078][T11118] usb 5-1: config 0 interface 169 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 358.320325][T11118] usb 5-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 358.329464][T11118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.339288][T11118] usb 5-1: config 0 descriptor?? [ 358.412581][ T17] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 358.420752][ T17] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.431055][ T17] usb 1-1: config 0 has no interface number 0 [ 358.437380][ T17] usb 1-1: config 0 interface 48 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 358.448621][ T17] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=bf.14 17:52:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) [ 358.457807][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.471035][ T17] usb 1-1: config 0 descriptor?? [ 358.476917][ T4893] gspca_zc3xx: reg_w_i err -71 [ 358.516223][ T17] yealink 1-1:0.48: invalid payload size 0, expected 16 [ 358.524639][ T17] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.48/input/input27 [ 358.593676][T11118] usb 5-1: USB disconnect, device number 7 [ 358.826247][ T17] usb 1-1: USB disconnect, device number 15 [ 358.841877][ C1] yealink 1-1:0.48: urb_ctl_callback - urb status -2 17:52:36 executing program 5: syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8d, 0xd1, 0x47, 0x10, 0x41e, 0x4017, 0x2e61, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x1, 0xe6, 0x79, 0x6a, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x2, 0x5}]}}]}}]}}]}}, 0x0) [ 359.111869][ T4893] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 359.118496][ T4893] gspca_zc3xx: probe of 6-1:0.19 failed with error -71 [ 359.128369][ T4893] usb 6-1: USB disconnect, device number 11 [ 359.481919][ T4893] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 359.489869][ T17] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 359.722034][ T4893] usb 6-1: Using ep0 maxpacket: 16 [ 359.842107][ T4893] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 359.850341][ T4893] usb 6-1: config 0 has no interface number 0 [ 359.857397][ T4893] usb 6-1: config 0 interface 19 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 359.868190][ T4893] usb 6-1: config 0 interface 19 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 359.879396][ T4893] usb 6-1: config 0 interface 19 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.892519][ T4893] usb 6-1: New USB device found, idVendor=041e, idProduct=4017, bcdDevice=2e.61 [ 359.901655][ T4893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.910675][ T17] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 359.918895][ T17] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.929366][ T17] usb 1-1: config 0 has no interface number 0 [ 359.935565][ T17] usb 1-1: config 0 interface 48 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 359.946753][ T17] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=bf.14 [ 359.955853][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.965368][ T17] usb 1-1: config 0 descriptor?? [ 359.971291][ T4893] usb 6-1: config 0 descriptor?? [ 360.006064][ T17] yealink 1-1:0.48: invalid payload size 0, expected 16 [ 360.018697][ T17] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.48/input/input28 [ 360.033464][ T4893] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4017 [ 360.252137][ T4893] gspca_zc3xx: reg_w_i err -71 [ 360.305932][ T17] usb 1-1: USB disconnect, device number 16 [ 360.321899][ C1] yealink 1-1:0.48: urb_ctl_callback - urb status -2 17:52:37 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4c, 0x10, 0xf1, 0x8, 0x582, 0x47, 0x4a1f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x1, 0xe1, 0x2b, 0xa6, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x9, 0x4, "02936ad58e56bb"}]}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) 17:52:37 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x8, 0xd00c0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) 17:52:37 executing program 4: syz_usb_connect(0x0, 0x3b3, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6c, 0x3, 0xe0, 0x8, 0x24c6, 0xd183, 0x4f36, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa9, 0x0, 0x2, 0xff, 0x5d, 0x81, 0x0, [], [{{0x9, 0x5, 0x85, 0xb}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) 17:52:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:37 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x1d34, 0x4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0) 17:52:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) [ 360.891919][ T4893] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 360.898465][ T4893] gspca_zc3xx: probe of 6-1:0.19 failed with error -71 [ 360.922471][ T2938] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 360.923199][ T4893] usb 6-1: USB disconnect, device number 12 [ 360.942494][ T17] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 360.955107][T11191] usb 1-1: new high-speed USB device number 17 using dummy_hcd 17:52:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) [ 361.163478][ T2938] usb 5-1: Using ep0 maxpacket: 8 [ 361.202599][T11191] usb 1-1: Using ep0 maxpacket: 8 [ 361.212018][ T17] usb 4-1: Using ep0 maxpacket: 8 [ 361.282201][ T2938] usb 5-1: config 0 has an invalid interface number: 169 but max is 0 [ 361.290557][ T2938] usb 5-1: config 0 has no interface number 0 [ 361.296902][ T2938] usb 5-1: config 0 interface 169 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 361.308107][ T2938] usb 5-1: New USB device found, idVendor=24c6, idProduct=d183, bcdDevice=4f.36 [ 361.317526][ T2938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.327312][ T2938] usb 5-1: config 0 descriptor?? [ 361.332044][ T4893] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 361.342343][ T17] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 361.350642][ T17] usb 4-1: config 0 has no interface number 0 [ 361.357034][ T17] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 361.362137][T11191] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 361.368250][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 361.376946][T11191] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 361.389842][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 361.396139][T11191] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 361.407544][ T17] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 361.416524][T11191] usb 1-1: config 0 has no interface number 0 [ 361.427652][ T17] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 361.427730][ T17] usb 4-1: config 0 interface 164 has no altsetting 0 [ 361.433845][T11191] usb 1-1: config 0 has no interface number 1 [ 361.460613][T11191] usb 1-1: config 0 interface 67 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 361.471319][T11191] usb 1-1: too many endpoints for config 0 interface 2 altsetting 147: 106, using maximum allowed: 30 [ 361.482462][T11191] usb 1-1: config 0 interface 2 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 106 [ 361.495735][T11191] usb 1-1: config 0 interface 2 has no altsetting 0 [ 361.502490][T11191] usb 1-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice=4a.1f [ 361.511664][T11191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.525274][ T17] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 361.534917][ T17] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 361.537249][T11191] usb 1-1: config 0 descriptor?? [ 361.543330][ T17] usb 4-1: Product: syz [ 361.554499][ T17] usb 4-1: config 0 descriptor?? [ 361.587113][T11191] usb 1-1: selecting invalid altsetting 0 [ 361.659758][T11118] usb 5-1: USB disconnect, device number 8 [ 361.735754][ T17] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 361.762751][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 361.782448][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 361.812577][ T4893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.823823][ T4893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 361.823982][T11191] usb 1-1: string descriptor 0 read error: -71 [ 361.836913][ T4893] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.40 [ 361.836976][ T4893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.837987][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 361.853967][ T4893] usb 6-1: config 0 descriptor?? [ 361.866666][T11191] usb 1-1: USB disconnect, device number 17 [ 362.013223][ T17] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 362.032082][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 362.052460][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 362.083461][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 362.102504][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 362.122428][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 362.141938][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 362.161979][ T17] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 362.170025][ T17] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input29 [ 362.345037][ T4893] hid-led 0003:1D34:0004.0005: unknown main item tag 0x0 [ 362.387782][ T17] usb 4-1: USB disconnect, device number 19 [ 362.552574][ T4893] hid-led: probe of 0003:1D34:0004.0005 failed with error -71 [ 362.565139][ T4893] usb 6-1: USB disconnect, device number 13 [ 362.771925][T11191] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 363.031880][T11191] usb 1-1: Using ep0 maxpacket: 8 [ 363.152104][T11191] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 363.160368][T11191] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 363.168570][T11191] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 363.177641][T11191] usb 1-1: config 0 has no interface number 0 [ 363.183860][T11191] usb 1-1: config 0 has no interface number 1 [ 363.190007][T11191] usb 1-1: config 0 interface 67 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 363.200662][T11191] usb 1-1: too many endpoints for config 0 interface 2 altsetting 147: 106, using maximum allowed: 30 [ 363.211884][T11191] usb 1-1: config 0 interface 2 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 106 [ 363.225268][T11191] usb 1-1: config 0 interface 2 has no altsetting 0 [ 363.231984][T11191] usb 1-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice=4a.1f [ 363.241046][T11191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.251702][T11191] usb 1-1: config 0 descriptor?? [ 363.297768][T11191] usb 1-1: selecting invalid altsetting 0 [ 363.392018][ T2938] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 363.532441][T11191] usb 1-1: string descriptor 0 read error: -71 [ 363.541620][T11191] usb 1-1: USB disconnect, device number 18 17:52:40 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc31c, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xfffffffffffffd90, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x0}}}]}}]}}, 0x0) 17:52:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) 17:52:40 executing program 4: 17:52:40 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:40 executing program 4: [ 363.762405][ T2938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.773663][ T2938] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 363.786631][ T2938] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.40 [ 363.795861][ T2938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:52:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 363.857774][ T2938] usb 6-1: config 0 descriptor?? [ 364.012985][ T4893] usb 4-1: new high-speed USB device number 20 using dummy_hcd 17:52:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000040, 0x1d34, 0x4, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0) 17:52:41 executing program 4: 17:52:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) 17:52:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:41 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) [ 364.133989][ T17] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 364.182188][ T2938] usbhid 6-1:0.0: can't add hid device: -71 [ 364.188441][ T2938] usbhid: probe of 6-1:0.0 failed with error -71 [ 364.229935][ T2938] usb 6-1: USB disconnect, device number 14 [ 364.262378][ T4893] usb 4-1: Using ep0 maxpacket: 8 [ 364.382322][ T4893] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 364.390679][ T4893] usb 4-1: config 0 has no interface number 0 [ 364.396933][ T4893] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 364.408093][ T4893] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 364.419434][ T4893] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 364.430979][ T4893] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 364.442327][ T4893] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 364.455791][ T4893] usb 4-1: config 0 interface 164 has no altsetting 0 [ 364.462868][ T17] usb 1-1: Using ep0 maxpacket: 32 [ 364.542841][ T4893] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 364.552175][ T4893] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 364.560430][ T4893] usb 4-1: Product: syz [ 364.566187][ T4893] usb 4-1: config 0 descriptor?? [ 364.582099][ T17] usb 1-1: config index 0 descriptor too short (expected 64912, got 36) [ 364.590547][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.601704][ T17] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 364.602255][ T2938] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 364.610952][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.619631][ T17] usb 1-1: config 0 descriptor?? [ 364.678081][ T17] usbhid 1-1:0.0: can't add hid device: -22 [ 364.684363][ T17] usbhid: probe of 1-1:0.0 failed with error -22 [ 364.742080][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 364.773123][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 364.794086][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 364.814058][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 364.843232][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 364.875428][ T17] usb 1-1: USB disconnect, device number 19 [ 364.982156][ T2938] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.993246][ T2938] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 365.006233][ T2938] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.40 [ 365.012023][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 365.015457][ T2938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.030837][ T2938] usb 6-1: config 0 descriptor?? [ 365.042420][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 365.062659][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 365.085475][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 365.122131][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 365.142132][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 365.162449][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 365.191968][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 365.199403][ T4893] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input30 [ 365.422989][ T17] usb 4-1: USB disconnect, device number 20 [ 365.514638][ T2938] hid-led 0003:1D34:0004.0006: unknown main item tag 0x0 [ 365.642123][ T4893] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 365.722351][ T2938] hid-led: probe of 0003:1D34:0004.0006 failed with error -71 [ 365.733345][ T2938] usb 6-1: USB disconnect, device number 15 [ 365.892103][ T4893] usb 1-1: Using ep0 maxpacket: 32 [ 366.012224][ T4893] usb 1-1: config index 0 descriptor too short (expected 64912, got 36) [ 366.020652][ T4893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.032151][ T4893] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 366.041246][ T4893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.050931][ T4893] usb 1-1: config 0 descriptor?? [ 366.107685][ T4893] usbhid 1-1:0.0: can't add hid device: -22 [ 366.114046][ T4893] usbhid: probe of 1-1:0.0 failed with error -22 [ 366.304040][ T2938] usb 1-1: USB disconnect, device number 20 17:52:43 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x9c, 0x2, 0x72, 0x10, 0x7fd, 0x1, 0x6973, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7a, 0x49, 0x3f, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}, {{0x9, 0x5, 0x84, 0x9b5a1c4223be0c76}}]}}]}}]}}, 0x0) 17:52:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:43 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 17:52:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) 17:52:43 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:43 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe2, 0x21, 0x1a, 0x40, 0x10cf, 0x5502, 0x64e9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8d, 0x0, 0x1, 0x3, 0x1c, 0xa3, 0x0, [], [{{0x9, 0x5, 0x84, 0x3}}]}}]}}]}}, 0x0) 17:52:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) 17:52:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 367.092064][ T4893] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 367.113032][ T17] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 367.122159][T11118] usb 1-1: new high-speed USB device number 21 using dummy_hcd 17:52:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 367.342510][ T4893] usb 4-1: Using ep0 maxpacket: 8 [ 367.385505][T11118] usb 1-1: Using ep0 maxpacket: 16 [ 367.472445][ T4893] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 367.480691][ T4893] usb 4-1: config 0 has no interface number 0 [ 367.487001][ T4893] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 367.498232][ T4893] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 367.509610][ T4893] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 367.521318][ T4893] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 367.532765][ T4893] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 367.546406][ T4893] usb 4-1: config 0 interface 164 has no altsetting 0 [ 367.553561][ T17] usb 6-1: config 0 has an invalid interface number: 141 but max is 0 [ 367.561879][ T17] usb 6-1: config 0 has no interface number 0 [ 367.568016][ T17] usb 6-1: config 0 interface 141 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 367.579293][ T17] usb 6-1: New USB device found, idVendor=10cf, idProduct=5502, bcdDevice=64.e9 [ 367.588436][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.598126][ T17] usb 6-1: config 0 descriptor?? [ 367.642338][T11118] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 367.652404][T11118] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 367.662307][T11118] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=69.73 [ 367.671407][T11118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.685938][ T4893] usb 4-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=62.01 [ 367.695776][ T4893] usb 4-1: New USB device strings: Mfr=0, Product=237, SerialNumber=0 [ 367.704115][ T4893] usb 4-1: Product: syz [ 367.709915][ T17] vmk80xx 6-1:0.141: driver 'vmk80xx' failed to auto-configure device. [ 367.719523][ T4893] usb 4-1: config 0 descriptor?? [ 367.728570][T11118] usb 1-1: config 0 descriptor?? [ 367.845843][ T2938] usb 6-1: USB disconnect, device number 16 [ 367.882002][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 367.902527][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 367.921993][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 367.941909][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 367.962073][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 367.982357][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 367.993792][T11118] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 368.003057][T11118] usb 1-1: USB disconnect, device number 21 [ 368.142040][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -110 [ 368.162094][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 368.181916][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 368.202106][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 368.222298][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 368.242120][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 368.262056][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 368.281983][ T4893] iforce 4-1:0.164: usb_submit_urb failed: -32 [ 368.289388][ T4893] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.164/input/input31 [ 368.505999][T11118] usb 4-1: USB disconnect, device number 21 [ 368.611896][ T4893] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 368.742576][ T2938] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 368.972165][ T4893] usb 6-1: config 0 has an invalid interface number: 141 but max is 0 [ 368.980510][ T4893] usb 6-1: config 0 has no interface number 0 [ 368.981953][ T2938] usb 1-1: Using ep0 maxpacket: 16 [ 368.986800][ T4893] usb 6-1: config 0 interface 141 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 369.002959][ T4893] usb 6-1: New USB device found, idVendor=10cf, idProduct=5502, bcdDevice=64.e9 [ 369.012143][ T4893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.021323][ T4893] usb 6-1: config 0 descriptor?? [ 369.083146][ T4893] vmk80xx 6-1:0.141: driver 'vmk80xx' failed to auto-configure device. [ 369.112381][ T2938] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 369.122678][ T2938] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 369.132596][ T2938] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=69.73 [ 369.141838][ T2938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.151136][ T2938] usb 1-1: config 0 descriptor?? [ 369.265644][ T4893] usb 6-1: USB disconnect, device number 17 [ 369.413502][ T2938] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 369.427120][ T2938] usb 1-1: USB disconnect, device number 22 17:52:46 executing program 0: syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x9c, 0x2, 0x72, 0x10, 0x7fd, 0x1, 0x6973, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7a, 0x49, 0x3f, 0x0, [], [{{0x9, 0x5, 0x8f, 0x2}}, {{0x9, 0x5, 0x84, 0x9b5a1c4223be0c76}}]}}]}}]}}, 0x0) 17:52:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) 17:52:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:46 executing program 4: syz_usb_connect(0x0, 0x0, 0x0, 0x0) 17:52:46 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = gettid() syz_open_procfs(r6, &(0x7f00000005c0)='net/snmp\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="db9ccf84cd6fcd2c9fcd16240c0b7fe010c5d18607c2588e74a99e6b53ed7140eefc96bb9f7e4c6d6f52fe3e612c3ae2818cd7b30d109572849c9b3baa0e5f34560680626f616f0a0dd4ad98bfe7c2e394ebabb02874cd7d031a8e77bce2a0c7b30dd6cb6acf2603678e6ddf66e954ee3ff5a2bab79cb925bd48f7ea2144837a97f67fd9bdb279bf1b76698b63609352cd6600a9e2", @ANYPTR64, @ANYBLOB="bc0161fe7276aefbabec588ea8bb", @ANYRESOCT=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYRES64, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], @ANYBLOB="5c63050c7c40aca3af278609314fa4a76726903f96e4d27105fe17844af2b9955dea5d1771a77a0792d82ce8fb88914744d328a113a5366953a29074203e8f8c2ad3165f9d4f4a52f5b2d4394b0dac92f7260bcb7bdba3d3cf0c5b0f0d710d46c5afd6db20"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=0x0, @ANYRES16=r7, @ANYRESDEC=r1]], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x0, 0x4f, &(0x7f0000000180)=""/79) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xea, 0x0) 17:52:46 executing program 5: syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x49, 0x5b, 0x8f, 0x8, 0x5da, 0xa3, 0x7c8c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x3, 0xa9, 0x8a, 0x79, 0x0, [], [{{0x9, 0x5, 0x8f}}, {{0x9, 0x5, 0x1, 0x2}}, {{0x9, 0x5, 0x81}}]}}]}}]}}, 0x0) 17:52:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) 17:52:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 17:52:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) 17:52:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getgid() keyctl$chown(0x4, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000180)='\x00\x00', 0xff20, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 370.153834][ T4893] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 370.172065][ T2938] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 370.174849][T11118] usb 6-1: new high-speed USB device number 18 using dummy_hcd 17:52:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f00000001c0)={0x100000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) read$alg(r4, &(0x7f00000000c0)=""/91, 0x5b) [ 370.411925][ T2938] usb 1-1: Using ep0 maxpacket: 16 [ 370.432125][ T4893] usb 4-1: Using ep0 maxpacket: 8 [ 370.442269][T11118] usb 6-1: Using ep0 maxpacket: 8 [ 370.532111][ T2938] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 370.542452][ T2938] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 370.552916][ T2938] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=69.73 [ 370.562047][ T2938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.571259][ T2938] usb 1-1: config 0 descriptor?? [ 370.572201][ T4893] usb 4-1: config 0 has an invalid interface number: 164 but max is 0 [ 370.584880][ T4893] usb 4-1: config 0 has no interface number 0 [ 370.591059][ T4893] usb 4-1: too many endpoints for config 0 interface 164 altsetting 233: 35, using maximum allowed: 30 [ 370.602280][ T4893] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 370.613621][ T4893] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x85 has invalid maxpacket 1280, setting to 1024 [ 370.625247][ T4893] usb 4-1: config 0 interface 164 altsetting 233 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 370.636508][ T4893] usb 4-1: config 0 interface 164 altsetting 233 has 2 endpoint descriptors, different from the interface descriptor's value: 35 [ 370.649960][ T4893] usb 4-1: config 0 interface 164 has no altsetting 0 [ 370.657057][T11118] usb 6-1: config 0 has an invalid interface number: 139 but max is 0 [ 370.665386][T11118] usb 6-1: config 0 has no interface number 0 [ 370.671526][T11118] usb 6-1: config 0 interface 139 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 370.681613][T11118] usb 6-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=7c.8c [ 370.690749][T11118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.700413][T11118] usb 6-1: config 0 descriptor?? [ 370.754131][T11118] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 143 is not bulk. [ 370.764152][T11118] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 129 is not bulk. [ 370.774204][T11118] ===================================================== [ 370.781182][T11118] BUG: KMSAN: uninit-value in usb_probe_interface+0xd19/0x1310 [ 370.788738][T11118] CPU: 1 PID: 11118 Comm: kworker/1:3 Not tainted 5.3.0-rc7+ #0 [ 370.796365][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.807045][T11118] Workqueue: usb_hub_wq hub_event [ 370.812068][T11118] Call Trace: [ 370.815472][T11118] dump_stack+0x191/0x1f0 [ 370.819814][T11118] kmsan_report+0x17d/0x2f0 [ 370.824331][T11118] __msan_warning+0x73/0xe0 [ 370.828837][T11118] mts_usb_probe+0xd1d/0xfb0 [ 370.833434][T11118] ? mdc800_usb_waitForIRQ+0x790/0x790 [ 370.835161][ T2938] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 370.838909][T11118] ? mdc800_usb_waitForIRQ+0x790/0x790 [ 370.851285][T11118] usb_probe_interface+0xd19/0x1310 [ 370.856511][T11118] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 370.862416][T11118] ? usb_register_driver+0x7d0/0x7d0 [ 370.864132][ T2938] usb 1-1: USB disconnect, device number 23 [ 370.867708][T11118] really_probe+0x1373/0x1dc0 [ 370.867741][T11118] driver_probe_device+0x1ba/0x510 [ 370.867771][T11118] __device_attach_driver+0x5b8/0x790 [ 370.867812][T11118] bus_for_each_drv+0x28e/0x3b0 [ 370.893656][T11118] ? deferred_probe_work_func+0x400/0x400 [ 370.899379][T11118] __device_attach+0x489/0x750 [ 370.904135][T11118] device_initial_probe+0x4a/0x60 [ 370.909147][T11118] bus_probe_device+0x131/0x390 [ 370.913992][T11118] device_add+0x25b5/0x2df0 [ 370.918497][T11118] usb_set_configuration+0x309f/0x3710 [ 370.924235][T11118] generic_probe+0xe7/0x280 [ 370.928736][T11118] ? usb_choose_configuration+0xae0/0xae0 [ 370.934453][T11118] usb_probe_device+0x146/0x200 [ 370.939290][T11118] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 370.945202][T11118] ? usb_register_device_driver+0x470/0x470 [ 370.951103][T11118] really_probe+0x1373/0x1dc0 [ 370.955872][T11118] driver_probe_device+0x1ba/0x510 [ 370.955902][T11118] __device_attach_driver+0x5b8/0x790 [ 370.955945][T11118] bus_for_each_drv+0x28e/0x3b0 [ 370.966410][T11118] ? deferred_probe_work_func+0x400/0x400 [ 370.976962][T11118] __device_attach+0x489/0x750 [ 370.981746][T11118] device_initial_probe+0x4a/0x60 [ 370.986783][T11118] bus_probe_device+0x131/0x390 [ 370.991651][T11118] device_add+0x25b5/0x2df0 [ 370.996168][T11118] usb_new_device+0x23e5/0x2fb0 [ 371.001016][T11118] hub_event+0x581d/0x72f0 [ 371.005464][T11118] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 371.011336][T11118] ? led_work+0x720/0x720 [ 371.015652][T11118] ? led_work+0x720/0x720 [ 371.019968][T11118] process_one_work+0x1572/0x1ef0 [ 371.024989][T11118] worker_thread+0x111b/0x2460 [ 371.029751][T11118] kthread+0x4b5/0x4f0 [ 371.033804][T11118] ? process_one_work+0x1ef0/0x1ef0 [ 371.039014][T11118] ? kthread_blkcg+0xf0/0xf0 [ 371.043663][T11118] ret_from_fork+0x35/0x40 [ 371.048077][T11118] [ 371.050386][T11118] Local variable description: ----ep_in_set@mts_usb_probe [ 371.057501][T11118] Variable was created at: [ 371.061925][T11118] mts_usb_probe+0x53/0xfb0 [ 371.066479][T11118] usb_probe_interface+0xd19/0x1310 [ 371.071651][T11118] ===================================================== [ 371.078568][T11118] Disabling lock debugging due to kernel taint [ 371.082814][ T2938] usb usb1: dummy_bus_suspend [ 371.084720][T11118] Kernel panic - not syncing: panic_on_warn set ... [ 371.084739][T11118] CPU: 1 PID: 11118 Comm: kworker/1:3 Tainted: G B 5.3.0-rc7+ #0 [ 371.084747][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.084764][T11118] Workqueue: usb_hub_wq hub_event [ 371.120041][T11118] Call Trace: [ 371.124391][T11118] dump_stack+0x191/0x1f0 [ 371.128710][T11118] panic+0x3c9/0xc1e [ 371.132627][T11118] kmsan_report+0x2e5/0x2f0 [ 371.137128][T11118] __msan_warning+0x73/0xe0 [ 371.141822][T11118] mts_usb_probe+0xd1d/0xfb0 [ 371.146414][T11118] ? mdc800_usb_waitForIRQ+0x790/0x790 [ 371.151868][T11118] ? mdc800_usb_waitForIRQ+0x790/0x790 [ 371.157324][T11118] usb_probe_interface+0xd19/0x1310 [ 371.162527][T11118] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 371.168434][T11118] ? usb_register_driver+0x7d0/0x7d0 [ 371.173713][T11118] really_probe+0x1373/0x1dc0 [ 371.178409][T11118] driver_probe_device+0x1ba/0x510 [ 371.183525][T11118] __device_attach_driver+0x5b8/0x790 [ 371.188916][T11118] bus_for_each_drv+0x28e/0x3b0 [ 371.193778][T11118] ? deferred_probe_work_func+0x400/0x400 [ 371.199504][T11118] __device_attach+0x489/0x750 [ 371.204336][T11118] device_initial_probe+0x4a/0x60 [ 371.209363][T11118] bus_probe_device+0x131/0x390 [ 371.214206][T11118] device_add+0x25b5/0x2df0 [ 371.218704][T11118] usb_set_configuration+0x309f/0x3710 [ 371.224173][T11118] generic_probe+0xe7/0x280 [ 371.228661][T11118] ? usb_choose_configuration+0xae0/0xae0 [ 371.234361][T11118] usb_probe_device+0x146/0x200 [ 371.239193][T11118] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 371.245098][T11118] ? usb_register_device_driver+0x470/0x470 [ 371.250987][T11118] really_probe+0x1373/0x1dc0 [ 371.255654][T11118] driver_probe_device+0x1ba/0x510 [ 371.260751][T11118] __device_attach_driver+0x5b8/0x790 [ 371.266116][T11118] bus_for_each_drv+0x28e/0x3b0 [ 371.270947][T11118] ? deferred_probe_work_func+0x400/0x400 [ 371.276666][T11118] __device_attach+0x489/0x750 [ 371.281451][T11118] device_initial_probe+0x4a/0x60 [ 371.286485][T11118] bus_probe_device+0x131/0x390 [ 371.291324][T11118] device_add+0x25b5/0x2df0 [ 371.295843][T11118] usb_new_device+0x23e5/0x2fb0 [ 371.300727][T11118] hub_event+0x581d/0x72f0 [ 371.305164][T11118] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 371.311039][T11118] ? led_work+0x720/0x720 [ 371.315352][T11118] ? led_work+0x720/0x720 [ 371.319664][T11118] process_one_work+0x1572/0x1ef0 [ 371.328292][T11118] worker_thread+0x111b/0x2460 [ 371.333090][T11118] kthread+0x4b5/0x4f0 [ 371.337166][T11118] ? process_one_work+0x1ef0/0x1ef0 [ 371.342377][T11118] ? kthread_blkcg+0xf0/0xf0 [ 371.346977][T11118] ret_from_fork+0x35/0x40 [ 371.352869][T11118] Kernel Offset: disabled [ 371.357191][T11118] Rebooting in 86400 seconds..