c312aa0b8ab7b5fe9b2d3c0ebec3d7095cd77bbc51646c4b03c618e467690da804f36c3ccb6f8b68414fa9ef84"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x3c88, 0x4, 0x0, 0x0, {{0xa}, {0x3bdc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x3, 0x401, 0x1, 0x68a, 0xfffffffa}, 0x1, 0x0, [{0x8, 0x80000000, 0xc4a, 0x3, 0x9, 0x1000}, {0x5c0, 0x20, 0x5, 0x40, 0x1, 0x6f79}, {0x2, 0x7, 0x4, 0x6096, 0x6f2, 0x5}, {0x6, 0xffffffff, 0x10001, 0x5, 0x2, 0x7}, {0x1, 0x2, 0x4, 0x0, 0x2, 0x7fff}, {0x5, 0x0, 0x7, 0xfffffe01, 0x1f, 0x1000}, {0x2, 0x1c2973e1, 0x80000001, 0xcc0b, 0xffffff81, 0x7ff}]}, [{0x5, 0x2, 0x101, 0xff, 0x1, 0x7}, {0x2, 0xfffffbff, 0x0, 0x7fff, 0x8001, 0x80000000}, {0xb5fc, 0x9b78, 0xfffffbff, 0x8, 0x9}, {0x32, 0x7ff, 0xf2d, 0xfffffff8, 0xd10, 0x3}, {0xca95, 0x1, 0x3, 0x3ff, 0x0, 0x1000}, {0x10001, 0xc19, 0x5, 0x7fffffff, 0x8}, {0x80000001, 0x5, 0x9, 0x6, 0x40, 0x3}, {0x7c8, 0x3ff, 0x7, 0x3, 0x0, 0x2}, {0x7, 0x0, 0x5, 0x9, 0x8000, 0x7}, {0x7, 0x100, 0x1, 0x6, 0x401, 0x3}, {0x1, 0xff, 0x7, 0x6, 0x9, 0x40}, {0x559, 0x6, 0x800, 0x4, 0x2f, 0x1000}, {0x2, 0x100, 0x1, 0x6, 0x40, 0xaea}, {0xffffff88, 0xffffffff, 0x1, 0x2, 0x20000000, 0xdae6}, {0x80000001, 0x100, 0x62, 0x6, 0x9, 0x5}, {0x5, 0x401, 0x80, 0x3, 0x3, 0x4}, {0x1, 0x2, 0x7, 0x8, 0xfffffffe, 0x1}, {0xffffff6f, 0xffffffff, 0x800, 0x20, 0x6a, 0x9}, {0x6, 0x9, 0x6, 0x8183, 0x9, 0x2}, {0x5, 0x7, 0x8, 0x46, 0x80, 0x140}, {0xe91, 0x4f, 0x200, 0x8, 0xbc, 0x5}, {0x5, 0x0, 0x2, 0x8, 0x3, 0x610f}, {0xffffffff, 0x2, 0x4, 0xffff7fff, 0x101, 0x9}, {0x6, 0x1, 0x38000000, 0x80000001, 0x9}, {0x0, 0x8, 0x5, 0x7, 0xfffff800, 0x1ff}, {0x5, 0x1ff, 0x9, 0x8, 0xffffffff, 0x10000}, {0x800, 0x7, 0x3f, 0xa54, 0x7f, 0x8}, {0x1, 0x2, 0xd1f, 0x4, 0x1f, 0x9ac2}, {0x9, 0x3f, 0x4, 0x7e, 0x78b2, 0x1}, {0x20, 0x80, 0x5, 0xfc9, 0x7ff, 0x3}, {0x1a0d00, 0x81, 0x8, 0xf7, 0x7fff, 0x94}, {0x5, 0x5, 0xb295, 0x3a, 0x3, 0x1ff}, {0x200, 0xffffff77, 0x6, 0x4, 0x8001, 0xffffffff}, {0x1, 0xffff2773, 0x0, 0x3ff, 0xffffff45, 0x7}, {0xfcd3, 0x40, 0x1, 0x1, 0x8, 0x4}, {0x9, 0x3f, 0x99d1, 0x6, 0x1, 0x7}, {0x3f, 0x6, 0xe8f3, 0x3, 0x8, 0x35f}, {0xb6b7, 0x7, 0x3, 0x7ff, 0x4}, {0x58c, 0x5, 0x4, 0x758, 0xfffff800, 0x2}, {0x5, 0x63b, 0x0, 0xfffffff7, 0xe3b7, 0x3}, {0x7, 0x5, 0x8, 0x5, 0x81, 0x1000}, {0x9, 0x4, 0x6, 0x52, 0x5, 0x20}, {0x0, 0x5, 0x100, 0xcbee, 0x6, 0x3}, {0x5ba0, 0x2, 0x2, 0x2, 0x401, 0x1}, {0x4, 0xff, 0x10000, 0x1, 0x0, 0x8}, {0x5, 0x84, 0x7, 0x5635, 0x80, 0x401}, {0x6, 0x800, 0x2, 0x6, 0x3f, 0x8000}, {0x453f, 0xfffffeff, 0x40, 0x2, 0x7fff, 0xfa1}, {0x0, 0x9adf989, 0xfffffffa, 0xffffffff, 0x8, 0x963}, {0x4, 0x7fffffff, 0xefa, 0x1, 0x1}, {0x100, 0xffffffff, 0x80000001, 0x4, 0x1}, {0x7, 0x5, 0x100, 0x2, 0xa2, 0x5}, {0xfffffffb, 0xffff7fff, 0xfffffffa, 0x2, 0x1, 0x101}, {0x2, 0x1000, 0x7, 0x3, 0x9, 0x9}, {0x80000000, 0x4, 0x8, 0x0, 0x800, 0x8}, {0x10000, 0x4, 0x9, 0x1, 0x7, 0x6}, {0x10, 0x4, 0x1, 0x7ff, 0x8000, 0x4}, {0x1, 0x80000001, 0x8, 0x7, 0x6, 0x6ed}, {0x5, 0xfffffeff, 0xeb8, 0xc3, 0x8000, 0xffff}, {0x6, 0x5, 0xae, 0x3, 0x8, 0x5}, {0x5, 0x2, 0x9, 0xffffffc1, 0x80000000, 0x1}, {0x4, 0x6, 0x8a4c, 0x3, 0x6, 0x6}, {0x0, 0x1, 0x800, 0xfffffff9, 0x8, 0x7}, {0x1, 0x7fff, 0x2, 0x80000000, 0x3, 0x8001}, {0x5, 0x44, 0x80000000, 0x8, 0x3, 0x8}, {0x2, 0x8000, 0x2, 0x80, 0xbcfd, 0x1}, {0x5, 0x1, 0x3, 0x6a, 0xfffffffb, 0x8}, {0xaa, 0x7, 0x7f, 0x100, 0x80, 0xfffffff8}, {0x6, 0x7fffffff, 0x3f, 0xfffffeff, 0x6, 0xfff}, {0x5, 0xfffffff8, 0x8, 0x3b, 0x7, 0x6}, {0x9, 0x8, 0x5, 0x5, 0x8, 0x4}, {0x0, 0x1336, 0x44, 0x6, 0xc7c, 0x9}, {0xcca, 0x5b26, 0xff, 0x4, 0x0, 0x7}, {0x7f, 0x97, 0x0, 0x100, 0x6b, 0x4}, {0x9, 0xfff, 0x5, 0xff, 0x6b, 0x81}, {0x4, 0x1ff, 0x100, 0xffffffff, 0x5cac}, {0x3, 0x1, 0x20, 0x1, 0x0, 0x9}, {0x2, 0x1f, 0x1, 0x2, 0x1f, 0xf87a}, {0x100, 0x1ff, 0xbec, 0x1, 0x2, 0x1}, {0xff, 0x4, 0x0, 0x6, 0x9, 0x80}, {0x8, 0x3, 0x7, 0x4, 0x44d, 0x975}, {0xffffffff, 0x2d6, 0x4, 0x81, 0x7fffffff, 0x3}, {0x5, 0x1, 0x8, 0x7c42, 0x9, 0x65fd}, {0x1f, 0x8, 0x0, 0x48, 0x7, 0x200}, {0xff, 0xa628, 0xb03, 0x2, 0xb6, 0x401}, {0x1, 0x20, 0x0, 0x1ff, 0x5, 0x865}, {0x101, 0x7, 0x8, 0x80000001, 0x101, 0xffff}, {0x2, 0x7, 0x83a5, 0x1, 0x2, 0x1}, {0xab18, 0x5, 0xecef, 0xfffffff7, 0x3}, {0x1, 0x7, 0x8, 0x400, 0x5, 0xc7ac}, {0x800, 0x4, 0x6, 0x1, 0x1, 0x1}, {0x0, 0xc7, 0x3, 0x4, 0x8, 0x9b6}, {0x40, 0x4c, 0x80, 0x80000001, 0x9, 0x2}, {0x3, 0x9, 0x7, 0x8, 0xfffffff9, 0x1ff}, {0xfffffff9, 0x1f, 0x3ff, 0x5, 0xbd, 0xfff}, {0x5, 0x100, 0x9, 0xf6, 0x7, 0x1}, {0x7, 0x6, 0xfff, 0x2, 0x80000000, 0x2}, {0x7ff, 0x1, 0xffffff81, 0xe7e7, 0x8, 0x1}, {0x0, 0x7, 0x0, 0xff, 0x1, 0x20}, {0x6, 0x0, 0x4d3, 0x2, 0x7f, 0x9}, {0x6000000, 0x7, 0xf10, 0x0, 0x1, 0x1}, {0x3, 0x5, 0xfffffff9, 0x3, 0x80000001, 0x200}, {0x7f, 0x0, 0x5, 0x800, 0x4730010f, 0xa20a}, {0x0, 0x8, 0x4, 0x6, 0x4, 0x90}, {0x5, 0x1, 0x5, 0x10000, 0xffffffff, 0xfffffffe}, {0x8, 0x6, 0x5, 0x0, 0x800, 0x80}, {0x6, 0x6, 0x5, 0x3, 0x4f, 0x1}, {0x100, 0x8, 0x4, 0x7, 0x2, 0x4}, {0xff, 0x6, 0x1f, 0x4, 0x40c, 0x8}, {0x0, 0x9, 0x100, 0x0, 0x7}, {0x2, 0x1, 0x1, 0x0, 0x81, 0x20}, {0x5, 0x7fff, 0x401, 0x0, 0x0, 0x12c}, {0x4, 0x6, 0x7f, 0x5, 0x7, 0x5}, {0xa9, 0x8, 0x367f, 0xc7, 0x200, 0x7fffffff}, {0xbc, 0x5, 0x400, 0x8, 0x7, 0x3}, {0x2, 0x8, 0x1855, 0x9e, 0x3, 0x3}, {0x0, 0x40, 0x6, 0x20, 0xca4, 0x3f}, {0x0, 0x4, 0x8, 0x4, 0x8000000, 0x3}, {0x7, 0x2, 0xfffffffe, 0x8, 0x10001, 0x9a23}, {0x9, 0xa000, 0x800, 0x9, 0x3}, {0x2, 0x5, 0x100, 0x6, 0x7, 0x8ef2}, {0x1, 0x9, 0xf0b, 0x480, 0x9, 0x3}, {0x401, 0xde3, 0x0, 0x9, 0x5, 0xfff}, {0x1, 0x7, 0x0, 0x2f2, 0x7ff, 0x4}, {0x8305, 0x2, 0x7fff, 0x80, 0xecb, 0x3}, {0x1395, 0xffffffff, 0xfff, 0x2, 0x8, 0x6}, {0x7, 0x4, 0x63c1, 0x401, 0x101, 0xd935}, {0xa0e5, 0x3, 0x8, 0x6, 0x7, 0x4}], [{0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x3, 0x3}, {0x3}, {0x4, 0x1}, {0x3, 0x7bbb9ca65b539a63}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {}, {0x2}, {0x5}, {0x3, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x609ed249d9a0f209}, {0x2, 0x1}, {0x5}, {0x1}, {0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x3}, {0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x2}, {0x3}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0xf1a0fc72e3bab290}, {0x2}, {0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x77845d5fd611bb6b}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x6}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x7fff, 0x3, 0x8, 0x41df, 0x8}, 0x8, 0xf2, [{0x63883ab7, 0x1, 0x58f6, 0x7, 0x3f, 0x80000001}, {0xfff, 0x9, 0x2d, 0x81, 0x2, 0x4}, {0x3, 0x80, 0x1, 0xfffffffd, 0xa81, 0x40}, {0x6, 0x1, 0x400, 0x2e, 0x0, 0x9}, {0x2d88, 0x2, 0x4, 0xe345, 0x7fff, 0x6}]}, [{0x7, 0x8, 0x1ff, 0x9e89, 0x8, 0x1c}, {0x6, 0x71c, 0x6, 0x7, 0x7fff, 0xed0}, {0x2, 0x9, 0x4, 0x9}, {0x101, 0x9, 0x1f, 0x4, 0x8, 0xff}, {0x4, 0x7, 0x101, 0xf02, 0x8, 0x7}, {0x4, 0x1, 0xff, 0x14000, 0x2f6, 0x9}, {0x81, 0x7, 0x8, 0x1000000, 0xd056, 0x7fffffff}, {0x8e9, 0x6, 0x7, 0x9, 0x7, 0xba92}, {0x0, 0x6, 0xfffffffa, 0x0, 0x3, 0x7f}, {0x401, 0x7fff, 0xfffffff9, 0x9, 0xdc6, 0x3e2fdd4e}, {0x2, 0x4, 0x2, 0xc3, 0x0, 0x101}, {0x6, 0xdcb, 0x81, 0x400, 0x1, 0x200}, {0xa18, 0x0, 0x8, 0x0, 0x7fffffff, 0x6}, {0x7ff, 0x5, 0x6, 0x2, 0x4, 0xad}, {0x3, 0x7fff, 0x0, 0x9, 0x1f, 0xcc1}, {0x3ff, 0x7da, 0x9, 0x10001, 0x40, 0x2}, {0x0, 0x775, 0x1000, 0xb91f, 0x6, 0x4}, {0x2, 0x4000, 0x1ff, 0xd60f, 0x2, 0x756}, {0xa5c, 0xdc, 0x2, 0x2, 0x1, 0x6}, {0x9, 0xfffff800, 0x401, 0x2, 0x9, 0x80000001}, {0xe3, 0x6, 0xca05, 0x1, 0xf1, 0x80000000}, {0x927, 0x6, 0xe23, 0xb7, 0x401}, {0x8, 0x7, 0x1, 0xffffbfca, 0x9, 0x9}, {0x2438, 0xfffffffa, 0x3, 0xa8, 0x9, 0x8}, {0x6, 0x4542, 0x5, 0x401, 0x8}, {0x9, 0x6, 0x0, 0x6ba1, 0x4, 0xffffffff}, {0x1, 0x7, 0x6, 0x5, 0x4, 0x8}, {0x9, 0xef, 0x2609, 0x4, 0xf79, 0x2}, {0x9, 0x100, 0x3, 0x3f, 0x6, 0x1}, {0x200, 0x40, 0x2d2000, 0x456, 0x2, 0x7}, {0x81, 0x6, 0x7f, 0xf473, 0x9, 0x2}, {0x6, 0x0, 0x7f, 0x8000, 0x81b, 0x7}, {0x1, 0x101, 0x40, 0x5, 0x0, 0x551d6e41}, {0x0, 0x0, 0x6, 0xc4, 0x1000, 0x6abd117b}, {0xffffffff, 0x22, 0x1f, 0x1, 0x1, 0x9ac}, {0x927, 0x6, 0xfffff000, 0x6, 0x3ff}, {0x6, 0x69c, 0x101, 0x3, 0x6, 0x8}, {0x8000, 0xffffffff, 0x8000, 0x10001, 0x8001, 0x29fc}, {0x6, 0xfff, 0x7fffffff, 0x3, 0x6, 0x1}, {0x2, 0x80, 0xef, 0x8, 0x4, 0x200}, {0x5, 0x682, 0x7, 0x6, 0x8000, 0x1f}, {0x800, 0x1b7, 0x4, 0x7, 0x1000, 0x4}, {0xe, 0x0, 0x8, 0x100, 0x3d}, {0x8, 0x5, 0x8, 0x20, 0x401, 0x8001}, {0xffffff00, 0xffffffff, 0xff00000, 0x4, 0x6, 0x5}, {0x5, 0x9, 0x4, 0x0, 0xff, 0x101}, {0x1000, 0x40, 0x9, 0xffffffff, 0x7fff, 0x7fffffff}, {0x8, 0x6, 0x400, 0x1, 0x3, 0x8}, {0x5, 0x101, 0x3, 0x8001, 0x7, 0x1}, {0x7, 0x1, 0x401, 0x2, 0x9b, 0x6}, {0x8, 0x3, 0x3, 0x5, 0x0, 0x3d95}, {0x40, 0x2, 0x4, 0x4d27, 0x7f, 0x3f}, {0x400, 0x2, 0x1ff, 0xed0, 0x8d7c, 0x7ff}, {0x1, 0x0, 0x2, 0x6, 0x0, 0x633d}, {0x59d, 0x40, 0x7fffffff, 0x8000, 0x4, 0x8000}, {0x4, 0x5, 0x8, 0x8, 0x10000}, {0x7f, 0xfff, 0x0, 0x3ff, 0x1, 0x7ff}, {0x6, 0x3, 0x10001, 0x3f, 0x9be}, {0x6, 0x0, 0x80000000, 0xffffffff, 0x2, 0x8}, {0x2, 0xdc61, 0x7, 0x8, 0x6, 0x1}, {0x8, 0x7f, 0x2, 0x4, 0xff, 0x3}, {0xfffff800, 0xffff7fff, 0xa66, 0x5, 0x8, 0x2}, {0x7, 0x80000000, 0x8001, 0x20, 0x40, 0x5}, {0x6, 0x9, 0xfff, 0x2, 0x228, 0x9}, {0x6, 0x3, 0x7f, 0x7f, 0x0, 0x7}, {0x1000, 0x5, 0xb38, 0x8000, 0xff, 0x177e}, {0x657, 0x6, 0x400, 0x8000, 0x10000}, {0x4, 0x3ff, 0x654e, 0xb9e9, 0x100, 0x40}, {0x1ff, 0x3c4, 0x10000, 0x7fff, 0x3, 0x1c000000}, {0x9, 0x7, 0x0, 0x3, 0x5, 0x7fff}, {0x5, 0x20, 0x9, 0x80000001, 0x7, 0x7}, {0x8000, 0x200, 0x4, 0x81, 0x4, 0x6}, {0xfff, 0x54, 0x92, 0x1f, 0x1f, 0xa7bb}, {0x8, 0x3379, 0x3, 0x5, 0x35, 0x81}, {0x8, 0x8, 0x8, 0x20, 0x7fffffff, 0xffff8000}, {0x11d, 0x5, 0x7b, 0xdb, 0xabc, 0x51c0}, {0x1, 0x8, 0x5, 0x4, 0xd2, 0x80000001}, {0x0, 0x93, 0x0, 0x1, 0x401, 0xee}, {0x9, 0x7fff, 0x200, 0x5, 0xb2}, {0x800, 0x2, 0xffffffff, 0xd84, 0x4}, {0xfe7f, 0x6a, 0x7826, 0xcdd, 0x7, 0x5}, {0xb4, 0x6, 0x7, 0x1, 0x6, 0x8}, {0x40, 0x564, 0x6, 0x7fffffff, 0x10001, 0x9}, {0x4, 0x8, 0x4, 0x4, 0x0, 0x1ff}, {0x9a, 0x9, 0x401, 0x6, 0x5, 0x4}, {0x3cf, 0x1b, 0x2, 0x1f, 0x9, 0x3f}, {0x0, 0x3, 0x0, 0x3, 0x6b, 0x40000000}, {0x2, 0x4, 0xffffffff, 0x2, 0x8}, {0x0, 0x8, 0x7, 0x6, 0x0, 0x101}, {0x9, 0x0, 0x0, 0x7, 0x3, 0xfffffe00}, {0x7f, 0x800, 0x8, 0x9, 0xab, 0x4}, {0xb301, 0x1d3, 0x9, 0xb6, 0x6, 0x7ff}, {0x1, 0x2, 0x200, 0x1, 0x80, 0x3e}, {0x7fff, 0xa75, 0x6, 0x7fff, 0x4, 0x70ba5e87}, {0x2, 0x7fffffff, 0x10001, 0x7fffffff, 0xffffffff, 0x3ff}, {0x8, 0x8001, 0x22, 0x5, 0x0, 0xf565}, {0xdbc8, 0xa075, 0x0, 0x20, 0x1, 0x3}, {0x60bd, 0x8, 0x8, 0x3, 0x9, 0x3}, {0x20, 0x0, 0x5, 0x7, 0x8, 0x80}, {0x6, 0x2, 0x0, 0x101, 0xffffffff, 0x8000}, {0x3, 0x7a39ab5c, 0x1, 0x9, 0x7, 0x101}, {0x6, 0xffffffff, 0x7fffffff, 0x1, 0x2, 0x4}, {0x7, 0x80000001, 0x800, 0x4, 0x3, 0x9}, {0x5, 0x0, 0x3, 0x83, 0x0, 0x4}, {0x1, 0x95f, 0x81, 0x7fffffff, 0x61, 0xa2a}, {0x5, 0x4, 0x7fff, 0x9, 0x25b}, {0x7ff, 0xffff35bc, 0x8, 0x4, 0x80000001, 0xb0a}, {0x1000, 0xffff, 0x800, 0x7, 0x200, 0xfffffff9}, {0xc4b0, 0xfffffff9, 0x7, 0x54a, 0x0, 0x2d}, {0x8, 0x0, 0x4, 0x9, 0x10000, 0x9}, {0x800, 0x1, 0x4, 0xfffffff7, 0x800, 0x6}, {0x99b, 0xe8, 0x9, 0x20, 0x6, 0x2400}, {0x1b, 0x2, 0x1ff, 0xd8000000, 0xfffffff8, 0x4}, {0x44e, 0x5, 0x4, 0x7, 0x3, 0x8}, {0x8, 0xfffffee0, 0x8, 0x3, 0x7ff, 0x1ff}, {0x3, 0x9, 0x91, 0x1, 0x8e, 0x4}, {0x401, 0x8, 0x6, 0x1f, 0x0, 0x5}, {0x8, 0x8, 0xfffff001, 0x3ff, 0xfffffe00, 0x5}, {0xa43, 0xfffffffa, 0x9, 0x8001, 0x401}, {0x3, 0xffff, 0xfffffff8, 0x81, 0x1, 0x8}, {0x1, 0x6, 0x7ff, 0x6, 0x100, 0x2}, {0x9, 0xff, 0x1, 0x6cf4, 0x100, 0x9}, {0x3f, 0xffff, 0xc3ef, 0x101, 0x9, 0x7fff}, {0xff, 0x2, 0xfffffffd, 0x8, 0xd971, 0x81e0}, {0x2000, 0x6, 0x3e, 0x8, 0x40000000, 0x81}, {0xffffffff, 0x9, 0x408, 0x7, 0xfffff801, 0xc700000}, {0x577, 0x3, 0x401, 0x8, 0x3}, {0x1, 0x3, 0xdeb, 0x5, 0x0, 0xa7a}], [{0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0xf15c4117bb76e3a2}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1}, {0x5, 0x1}, {0x1}, {}, {}, {0x4}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0xc428317c9ba14895}, {0x4, 0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x3}, {0x1}, {0x4}, {0x2}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x4}, {}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x3ff, 0xfffffffd, 0x2, 0x8, 0x6}, 0x38, 0x7, [{0x4, 0x101, 0x3, 0x81, 0x80000000, 0x8}]}, [{0x140, 0x1000, 0x9, 0xf2, 0x9, 0x200}, {0x7ff, 0xa7d7, 0x1, 0xffff, 0x1, 0x5}, {0xbc8e, 0x9fcc9b8, 0x567ed6ea, 0x5, 0x38, 0x3fb}, {0xdf, 0x2, 0x3, 0x8, 0x0, 0x7}, {0xe4, 0x5, 0x6, 0x6cdb, 0x1ff, 0x1}, {0xe3b, 0x23, 0xff, 0x3, 0xb01, 0x7fffffff}, {0x0, 0x2, 0x2, 0x40, 0x1, 0x10001}, {0x7, 0x8, 0xffffffff, 0x0, 0x796, 0x305b800}, {0x9, 0x500, 0x8001, 0x1, 0x8, 0x8}, {0xa2d2, 0x4, 0x7, 0x0, 0x800, 0x4}, {0x1000, 0x400000, 0x3f, 0x9, 0x80}, {0x2, 0x7, 0x6, 0x401, 0xfffffffb, 0xfffffffe}, {0x8, 0x9, 0x6, 0x7, 0x766, 0x3}, {0x949d, 0x4, 0xbc8, 0x4, 0x0, 0x4}, {0xfc000000, 0x7, 0x9, 0x9, 0xfffffffd, 0xffffdc25}, {0x3f, 0x3f6, 0x0, 0x1000, 0x7, 0x4}, {0xa0, 0x80, 0x8, 0x7, 0xfff, 0x8000}, {0xfffffffe, 0x4, 0x1, 0x707, 0x0, 0x7fff}, {0x0, 0x20, 0x401, 0x3, 0x1, 0x80000001}, {0x3, 0x1, 0x5, 0x3, 0x3f, 0x5}, {0x9, 0x1, 0x9c4, 0x5, 0x7, 0x5}, {0x0, 0x3, 0x7, 0x6, 0x5, 0x401}, {0x1, 0xfffeffff, 0x401, 0x3ff, 0x3, 0x200}, {0x2, 0x2, 0x8, 0x57, 0x8, 0x4}, {0x1, 0x9, 0x6, 0x4, 0x96, 0x1000}, {0x2, 0x6, 0x1, 0x9, 0x5, 0xffff7d3a}, {0x4, 0x1, 0x2, 0x3, 0x6, 0x2}, {0x400, 0x7fffffff, 0x8, 0x800, 0xc700, 0x1ff}, {0xe87, 0xb73, 0x4, 0x498, 0x9, 0x7}, {0x0, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x1, 0xffff, 0xc9, 0x8, 0x7d6}, {0x0, 0x1, 0x97d, 0xe2, 0x43, 0x9}, {0x42, 0xff, 0x581, 0x142, 0x2, 0xa6}, {0x90c, 0x41302109, 0x1806, 0x3261, 0x563d}, {0x81, 0x0, 0x8, 0x9, 0x1, 0xffffffff}, {0x538f, 0xfff, 0x3f, 0xfa3, 0x3}, {0x6, 0x8001, 0x1, 0xca89, 0x80000000, 0xecc}, {0x8, 0x5, 0x3ff, 0xc406, 0xf1e, 0x71}, {0x5, 0x101, 0x81, 0x2, 0xf3, 0x100}, {0x1ff, 0x7f, 0x400, 0x87ef, 0x81, 0x7}, {0x4, 0xfffffffa, 0xffffffff, 0x7fffffff, 0x1f, 0x3ff}, {0x1000, 0x3ff, 0xff, 0xffffffff, 0x2, 0x5}, {0x7ff, 0x9, 0x2, 0x1, 0xfffffff7, 0x1f}, {0xffffffff, 0x6, 0x7fff, 0x0, 0x7, 0xfffffe00}, {0x9, 0x500, 0x8, 0x8, 0x9, 0x8}, {0x8001, 0x1, 0x5, 0x5, 0x800100, 0x401}, {0x3, 0x0, 0x4, 0xc9, 0x472, 0x200}, {0x6, 0x9f19, 0xffff2373, 0x30, 0x200, 0x248}, {0x4c8, 0x15a3, 0x7bbc, 0xffffffff, 0x1f}, {0x1, 0x9, 0x100, 0x400, 0x2, 0x3}, {0x0, 0xbcb, 0x80000000, 0x4, 0x8, 0x7fffffff}, {0x8000, 0xd03d, 0x1f, 0xb2, 0x9, 0x9}, {0x21, 0x3, 0x9, 0x3, 0xffffffa3, 0xffffffff}, {0x400, 0x2, 0x1, 0x6, 0xd6, 0x1b}, {0x2, 0x80, 0x5, 0x9, 0x401, 0x80000000}, {0x8, 0x0, 0x99fd, 0x8, 0x7, 0x200}, {0xffffffff, 0x100, 0x1, 0x7, 0x4, 0x3}, {0x9dd, 0x3, 0x9, 0x584, 0x8001, 0x3}, {0x4f3600, 0x3, 0x0, 0x8, 0x4, 0x3}, {0x1, 0x5, 0x80, 0x8, 0x6, 0x3}, {0x4, 0x8f8, 0x0, 0x8, 0x7fffffff, 0x5324}, {0x44, 0x0, 0x7, 0x9, 0x1, 0x4}, {0xa5f, 0x9, 0x14, 0xf4a, 0x7, 0x3}, {0x10001, 0x5, 0x9, 0x3, 0xfffff131, 0x2}, {0x4, 0xfffffffd, 0x5, 0x5, 0x3ff, 0x2411098f}, {0x2, 0x4, 0x5, 0x80, 0x9, 0x8}, {0x1ff, 0x750d014, 0x5d, 0x8000, 0x8000, 0x7f}, {0x966, 0x40, 0x1, 0xfffffe01, 0x40, 0x9}, {0x8, 0x8, 0x9, 0x9, 0xa972, 0x7}, {0x800, 0x4, 0xfffffffb, 0x10000, 0x8001, 0x662}, {0x7, 0x9, 0xc6, 0x2, 0x3, 0x3}, {0x2, 0x6, 0x1, 0x401, 0x9, 0x5}, {0x1ff, 0xfffffffb, 0x8, 0x9, 0xfffffff8, 0x7}, {0x200, 0x2, 0x369d, 0x3, 0x1, 0xf}, {0x4, 0x80000000, 0x3, 0x8001, 0x10000, 0x3}, {0x9, 0x401, 0xa66, 0x4cf, 0x6, 0x1}, {0x1f, 0x6, 0x3f, 0x3, 0x5, 0x44fe3a7e}, {0x9, 0x1, 0x4f39, 0x4cf3, 0x0, 0x6}, {0x3f, 0x60, 0x9, 0x4c, 0x0, 0xffff}, {0x7fffffff, 0x2, 0x800, 0x8, 0x9, 0x10c3}, {0x3f, 0x7, 0x80000000, 0x400, 0xe1, 0x200}, {0x40, 0x6, 0x2, 0xe1ed, 0x20, 0x82d}, {0x1f, 0x664, 0x5, 0x10001, 0x8, 0x400}, {0xb217, 0x8, 0x92, 0x2, 0x9, 0x1}, {0x20, 0x800, 0xfffff598, 0x101, 0x2, 0x7fffffff}, {0x20, 0xf0, 0x5f, 0xfffeffff, 0x3b, 0x2}, {0xa9, 0x40, 0x1023, 0x0, 0x8000, 0xfffffffb}, {0x8, 0x2e5, 0xfff, 0x3, 0x1ff, 0x5}, {0xe26, 0xfac, 0x10001, 0x7, 0x0, 0x5}, {0x8, 0x4, 0x5, 0x7f, 0x9, 0x5}, {0x0, 0x10001, 0x8, 0x24d8, 0xffffffff, 0x6}, {0x0, 0x1000, 0x1ff, 0x401, 0x2c3, 0x7f}, {0x1, 0x7ff, 0x2, 0x55, 0x2, 0x5}, {0xa052, 0x4, 0x7, 0x9, 0x7f, 0xfffffff9}, {0x400, 0x0, 0xfffff172, 0x7, 0x8001, 0x7}, {0x6, 0x286, 0x7, 0x400, 0x8, 0x2}, {0x1, 0x4, 0x0, 0xffffff01, 0x8, 0x80}, {0x7, 0x4, 0x1000, 0x3f, 0x5, 0xd11}, {0x0, 0x0, 0x6, 0x1, 0x7, 0x10001}, {0x938, 0x7, 0x0, 0xfffffbff, 0x6, 0x10}, {0x1, 0x6, 0xff, 0x931e, 0x9, 0x4}, {0x9, 0x9, 0x0, 0x1000, 0x7e6, 0x7}, {0x7, 0x9, 0x9, 0x6, 0x7, 0x81}, {0x9, 0x7f, 0x0, 0x2c1, 0x8, 0xffff}, {0x7ff, 0x9, 0x401, 0xffffffff, 0x8, 0x4}, {0xfffffffe, 0x6, 0x2, 0x7fff, 0x1, 0x1}, {0x7ff, 0x101, 0x22, 0x7f5c, 0x6, 0x351}, {0x6, 0x4, 0x5, 0xfffffa3f, 0x9, 0xffff}, {0xac1, 0x7, 0x5, 0x40, 0xc4b7, 0x7f}, {0xc17, 0x6, 0x0, 0x80, 0x101, 0xe2f}, {0x1ff, 0xa8d, 0x3f, 0x4e, 0x6, 0x1}, {0x9617, 0x0, 0x8, 0x5, 0x3, 0xa8}, {0x401, 0x800, 0x8001, 0x101, 0x3, 0xfffffffb}, {0x0, 0x10001, 0x1, 0xff, 0x5, 0x8}, {0x7, 0x77, 0x6, 0x81, 0x6, 0x14}, {0x101, 0x3ff, 0xc000, 0xef77, 0x1f, 0x9}, {0xc000, 0x80000001, 0x1, 0x0, 0x4, 0x53c}, {0x1, 0x4, 0x2, 0x401, 0x80000000, 0x2}, {0xfff, 0x7, 0x1, 0x3, 0x2, 0x73}, {0x9, 0x3, 0x8, 0x3c, 0x1, 0x5}, {0x80, 0x4, 0x1, 0xfffffffc, 0x6, 0x6}, {0x8000, 0xd2, 0x401, 0x3, 0xb8, 0x1f}, {0x800, 0x0, 0xfff, 0x81, 0x26e2}, {0x0, 0x1f, 0x24a3, 0x5, 0x6, 0x9b}, {0x1, 0x8, 0x80000000, 0x81, 0x0, 0x1}, {0x0, 0x9, 0x4b, 0x7, 0x10001, 0x6}, {0x6, 0x3, 0xb842, 0x2, 0x3, 0x401}, {0xe47, 0x8, 0x247, 0x6, 0xeaa, 0xa6e7}], [{0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {}, {0x2}, {}, {}, {0x3}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x7}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x4}, {0x3, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x4}, {0x1}, {0x0, 0x1}, {0x7}, {0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x97fe6cec49515f98, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x7}, {0x3}, {0x4, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x4}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x4}, {0x6}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0xe8, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x1, 0x3, 0x4, 0x80, 0x7}, 0x7, 0xfe, [{0x4, 0x2, 0x2, 0xbc4, 0x4, 0xe5}, {0x6, 0x6, 0x1, 0x3, 0xfffffeff, 0x1000}, {0x7, 0x0, 0x9e, 0x8000, 0x7fff, 0xffff}, {0x9, 0x7f, 0x1000, 0x0, 0x8001, 0xb080}, {0x8, 0x1, 0xfffffffb, 0x200, 0xc8, 0x200}]}, [{0x81, 0x6, 0x0, 0x9, 0x6, 0xffffffd9}, {0x20, 0xffffffff, 0x3, 0x9, 0x7770, 0x8000}, {0x0, 0x7, 0x5, 0x401, 0x3, 0x6}, {0x7, 0x5, 0x1dc1, 0xed8b, 0x1, 0x2}, {0x7, 0x3ff, 0x20, 0xfffff3c5, 0xfffffc00, 0xe09}, {0x0, 0x1, 0x4, 0x8001, 0x100, 0x4}, {0x7f, 0x138, 0x767, 0xb3, 0x1}, {0x3f, 0x4, 0x5, 0x6, 0x1, 0x80}, {0x5, 0x1ff, 0x2, 0x3, 0x20, 0x8a}, {0x2, 0x6, 0x5, 0x8, 0x7fffffff, 0x9}, {0x9, 0xeaaf, 0x7, 0x1, 0xfffff163, 0x99d}, {0x7fff, 0x400, 0x4, 0x6, 0x6, 0xffffffff}, {0x8, 0x2, 0xfffffffb, 0x4, 0x6, 0x8}, {0xffffffff, 0x8, 0x4, 0x80, 0x20, 0x5}, {0xff, 0xe6a, 0x0, 0x401, 0x1, 0x200}, {0x5c9, 0x9, 0x2, 0x4, 0x16847c88, 0x3}, {0x80000001, 0xf2, 0x101, 0x8001, 0x2, 0x100}, {0x3ff, 0x100, 0x8, 0x1, 0x5}, {0x2, 0x7, 0x3, 0x5, 0xffff18f9, 0x3}, {0x6, 0x9af, 0x0, 0x4, 0x59757803, 0x24000000}, {0x1d3, 0x7, 0x140, 0x7fffffff, 0x1ff, 0x80000001}, {0x4, 0x0, 0x6, 0x4, 0x6, 0x4}, {0x80000001, 0x5, 0x20, 0xffff8000, 0x5, 0x9}, {0x1000, 0x9, 0x1, 0x0, 0xfffffffe, 0x68eb}, {0xff, 0x7fff, 0x1, 0x7, 0x101, 0x6}, {0x200, 0x29b9623, 0x7, 0x9, 0x81, 0xd1f6}, {0xc1, 0x2, 0x8, 0x7, 0x9, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x3, 0x2}, {0x5, 0x400, 0x2, 0xc8f, 0x100, 0x9}, {0x3ff, 0x867b, 0x5, 0x1, 0x1, 0xffff7fff}, {0x6c9, 0x5, 0x890, 0x5, 0x717, 0x8}, {0x800, 0x9, 0x400, 0x1, 0x8, 0x96}, {0x8, 0x9, 0x8000, 0x69c, 0x3, 0x1}, {0x7, 0x100, 0x1, 0x4, 0x7, 0x3f}, {0x7f, 0x3ff, 0x8886, 0x1, 0x200, 0x7fff}, {0x6, 0x8, 0x75, 0x0, 0x8cb3, 0x7}, {0x80, 0x1136, 0x401, 0x200, 0x5, 0x5}, {0x3ff, 0xffffffff, 0x0, 0x405b, 0xfffffff9, 0x1}, {0x8, 0x7, 0x2fde, 0x1, 0x562f2915, 0x2}, {0xc07f, 0x0, 0xfffffa40, 0x9, 0x3, 0xf0000000}, {0x1f, 0x8, 0x6, 0x7, 0x0, 0x10001}, {0x101, 0x8, 0x0, 0x10001, 0x1, 0x9}, {0x401, 0xc00, 0xc0, 0x8, 0x5, 0xfffff1ea}, {0x7, 0x5, 0x4, 0xfffffe5d, 0x2, 0x5}, {0x6, 0x4, 0x3f, 0x3f, 0x31, 0x1000}, {0x1f, 0x40, 0x0, 0xdf1b, 0xec, 0x6}, {0x1000, 0x7ff, 0x5, 0x9b, 0x2, 0x9}, {0x6, 0x6, 0x80000000, 0x80, 0x9, 0x7f}, {0x0, 0x4, 0x8001, 0xfffffff9, 0x4, 0xff}, {0x10001, 0x3, 0x4596ec40, 0x7050, 0x8, 0x5}, {0x792e74b7, 0x10001, 0x6, 0x2120, 0x1, 0x1361}, {0x8, 0x200, 0x40, 0x4, 0xffffffc0, 0x9}, {0x541, 0x1, 0x7216, 0xfff, 0x100, 0x8}, {0x6, 0x5533, 0x4, 0x7fff, 0xffff, 0x4e355d1c}, {0x9, 0x8, 0x7, 0x200, 0x7, 0x6}, {0x4, 0x3f, 0x0, 0x9, 0xfffff242, 0xffff}, {0x3, 0xffffffe0, 0x7fffffff, 0x7fffffff, 0x101, 0xeec0b71}, {0x2, 0x1, 0x2, 0xfffffff8, 0x7f, 0x71}, {0x6, 0x1f, 0x1, 0x0, 0xff, 0x9}, {0x7, 0x10000, 0x3, 0xff, 0x3, 0x10001}, {0x2, 0x2, 0x80000000, 0xffff0001, 0x1000, 0x6}, {0x4000000, 0x4, 0x8, 0x3, 0xfce, 0x9}, {0x7, 0x5, 0x7ff, 0x7, 0x95a, 0x6}, {0x7, 0x4, 0x0, 0x3, 0x8, 0x200}, {0x4, 0x81, 0x10000, 0x7fffffff, 0x0, 0x8}, {0x880, 0x3, 0x8, 0x7, 0xf0000000, 0x1}, {0x9, 0x4, 0x81, 0x8326, 0x2, 0x2}, {0x9, 0x2, 0xfffffffe, 0x20, 0x8, 0x3}, {0x0, 0x5, 0x4, 0x6, 0xffffffff, 0xff}, {0x200, 0x1, 0x6, 0x8000, 0x400, 0xffffffff}, {0x10000, 0x7fff, 0x9, 0x5, 0x4, 0x9108}, {0x400, 0x1f, 0xfffffffb, 0x5, 0x2, 0x7fff}, {0x0, 0x200, 0x9a7, 0x7, 0x3, 0xfffffff7}, {0xffffff31, 0x9, 0xfffffffb, 0x5, 0x8000, 0x9ac2}, {0x5de, 0x8, 0x7fffffff, 0x9, 0x5, 0x1c000}, {0x4, 0x1, 0x200, 0x4, 0x0, 0x3}, {0x7, 0x8, 0x3, 0x5, 0x1, 0x8}, {0x5, 0x5, 0x0, 0x24bf, 0x2, 0xda}, {0x1f51, 0x8, 0x7, 0x7, 0x1, 0x800}, {0x100, 0xfd, 0x1, 0xf21, 0x9, 0xffffffff}, {0x1, 0xef, 0x22c0, 0x4, 0x1f, 0xffffffc0}, {0x9e2, 0x4, 0x5, 0x0, 0x1ff, 0xff}, {0x6, 0x5, 0x9, 0x10001, 0x1fdf, 0x8001}, {0x5, 0x80000000, 0x4, 0x80, 0xfffffffa, 0x4f}, {0x2, 0xd4f1, 0x1, 0x401, 0x4, 0x9}, {0x4, 0x0, 0x3, 0x7fffffff, 0xf9d3}, {0x5, 0x2, 0x2, 0x1ff, 0xfffffc01, 0xffff}, {0x3, 0x7, 0x3b40, 0x8, 0x2, 0x80}, {0xd4ec, 0x8, 0x7fff, 0x6, 0x48a, 0x7}, {0x3, 0x101, 0x6dc9, 0x2, 0x8, 0x10000}, {0x4, 0x16fc, 0x3ff, 0x1, 0x8000, 0x6}, {0x7, 0x3c15ed0, 0xd179, 0x7, 0x1ff, 0x8001}, {0x661, 0x8, 0x9, 0x3, 0x80000000, 0x8001}, {0x1, 0x4, 0xffff8001, 0x1, 0x7, 0xc9c}, {0xfffffff8, 0x7, 0x2, 0x1, 0x80f, 0x9}, {0x401, 0x2, 0x9, 0x6, 0x9, 0xffff7fff}, {0x5, 0x5, 0x1000, 0x3, 0x2}, {0x6, 0x8, 0xa50d, 0x8, 0x1, 0x5}, {0x10000, 0x2, 0x492d3898, 0xa00, 0x6, 0x8}, {0x81, 0x1f, 0x6bc, 0x2, 0x2, 0x1}, {0x3, 0x7, 0xa4ac16, 0x3f, 0x9}, {0x8, 0x7, 0x18, 0x8000, 0x9, 0x9}, {0x80000001, 0x111, 0x401, 0xfffffffa, 0x80000001, 0x4}, {0x2, 0x4, 0x7fffffff, 0x2, 0x2, 0xc34}, {0x6, 0x8, 0x1ff, 0x7fffffff, 0x400, 0x2f97523b}, {0x0, 0x5, 0x6, 0x80000000, 0x8, 0x4}, {0x0, 0xc46, 0x1, 0x4, 0x9, 0x3}, {0xd0000000, 0x140, 0x2, 0x7, 0x9, 0x100}, {0x5, 0x8, 0xff, 0x8, 0x3ff, 0x3}, {0x1, 0x5, 0x6, 0xfffffff9, 0x100}, {0x1, 0x7ff, 0x7, 0x4, 0x93, 0x400}, {0xffff00, 0xffff7fff, 0x5, 0x100, 0x3, 0x96}, {0x7, 0x2ddc, 0x8, 0x574, 0x9, 0x51}, {0x8, 0x80000000, 0x6, 0x81, 0xc34d, 0x1}, {0x3, 0x4, 0x5, 0x401, 0xffffff81, 0x6}, {0xfffffffb, 0x3f, 0x5, 0x9, 0x0, 0x8}, {0x7, 0x2, 0x6, 0x3, 0x3, 0x1}, {0x1ff, 0x6, 0x2b38, 0xdb7, 0x4, 0x1ff}, {0x2, 0x6, 0x20, 0x1022, 0x4, 0xa0}, {0x7f, 0x80000001, 0x80000000, 0x1, 0x0, 0x81}, {0x1a, 0xc4, 0x8, 0x0, 0x4}, {0x5, 0xee, 0x6, 0x3f, 0x0, 0x5}, {0x7f, 0x8001, 0x5, 0x1, 0x8, 0x1}, {0x2, 0x5, 0x0, 0x8, 0x0, 0x8}, {0x2, 0x200, 0x3, 0x2, 0x6, 0x80000001}, {0xfffffffd, 0x7c8, 0x8, 0xffffffff, 0x1, 0x3}, {0x3ff, 0x6, 0x3, 0x5ac8, 0x7f, 0x2c2}, {0x8, 0x4, 0x80000000, 0x7f, 0x5, 0x6}], [{0x1, 0x1}, {0x1}, {0x669b760bb546cf52, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x3, 0x9ab0bff5777ebe}, {0x87582c58087b279, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0xeff12a18f609a707}, {0x2}, {}, {0x1, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x3}, {0x3}, {0x4}, {0xbd74e31ac89a9873, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x7}, {0x5, 0x1}, {0x1}, {0x4, 0x3dfde65f3a83bf71}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x2}, {}, {0x5}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x3}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xc0, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x83, 0x6, "d6fe0e7c7dca3574c04983e8bfc09c533148fbf53439caab49e28c2efe87fba40c2e2024c4cef20b4674f8e97e52e52007e44f20170fe6f2d39e0842d3645f09476a308b970e3b14b38a5a3c09c36aed01652e72008aeccd83893cf188b2b4c09c9418b4ed59017f17113957b3d6ac7546fb32c93e05a0f083571207fdf88e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x100, 0x1f, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8}, @TCA_CT_ZONE={0x6}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0xbd, 0x6, "335a77db9f24f8ea699e628a5ac5a28306e0a6b3d3244c9862a4bd091dcb6750af8c1c1aae6c17aa82653d225945b118e0175c503d8c3903b93120972a50ae81b8213eb8aa3936051371573d7abf5998329cdd3c78f9b94e715aa99662068b8a662f758adab4680246831d80f6ffe7d38408d89607a4d8dc48ae053918e01205755d442f9377b5e3f424b301c7514472cf55607bf87663e771edcbcd12c08d8e3051bebabd623c676dcddf9a33f079222d58b5d43f57dd9fd7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x168, 0x6, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7fff, 0x2, 0x6, 0x401}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8001, 0x10000000, 0x6, 0x4}, 0x3d02}}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xb}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_POLICE={0x54, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x74f, 0x9, 0x56f8, {0x0, 0x1, 0x2, 0x1, 0x5, 0x5}, {0x1, 0x0, 0x4, 0xa4, 0x1, 0x1}, 0xb, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x50c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x10000000, 0x5, 0xffff, 0x0, {0x9, 0x2, 0x1, 0x9, 0xfffe, 0x6}, {0x0, 0x1, 0x8, 0x8, 0x2, 0x3}, 0xb75, 0x6, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0xffffffffffffffff, 0xfffff79a, 0x5a, 0x401, {0x5, 0x0, 0x1f, 0x2, 0x1}, {0x8, 0x1, 0x80c7, 0x6, 0x7, 0x2}, 0x9afa, 0x9, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffeff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x9, 0x48, 0x4, {0x6, 0x2, 0x7, 0x7f, 0x81}, {0xff, 0x2, 0x9, 0x4, 0xba1, 0x6}, 0x0, 0x3f, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x1, 0x80000001, 0x5, 0x2, 0x9, 0x7ff, 0x7, 0x4, 0x6, 0x8, 0x7, 0x27, 0xfff, 0x0, 0x37c, 0x2, 0x1, 0xfffffff9, 0xd0, 0xca, 0xffffff7f, 0x101, 0xfffffc01, 0x9, 0x20, 0x2, 0x8, 0x9, 0x3, 0x3, 0x7, 0x7, 0x7, 0x7ff, 0x7a2a, 0x401, 0x2, 0x7, 0x3ff, 0x5, 0x7344, 0x7247, 0x80000001, 0xc5, 0x8, 0xb3, 0xfffff801, 0x3dde, 0x1, 0x59e, 0x1, 0x2, 0x6, 0x3f, 0x6, 0x0, 0x1, 0x81, 0x0, 0xffff, 0x3, 0xde, 0x8, 0x4, 0x7fff, 0x2, 0x10001, 0x7, 0x5, 0x9fa9, 0x9, 0x6, 0x9, 0x5, 0x3, 0x7, 0x1000, 0x3, 0x200, 0x2, 0x1000, 0xfffffff9, 0x6, 0x1, 0x9, 0x124, 0x7, 0x2, 0x0, 0x5, 0x6, 0x42d1, 0x6, 0x5, 0x7fffffff, 0x1, 0x8000, 0x0, 0x7, 0x8, 0x0, 0x7, 0x84, 0x8, 0x0, 0x9, 0x3, 0x8, 0x7, 0x6, 0xffffffff, 0xffff, 0x4889, 0xef26, 0x7, 0x7, 0x9, 0x6, 0x448, 0x37, 0xe000000, 0x10001, 0xf777, 0x8, 0x1ab, 0x9, 0x3, 0x101, 0x9, 0x8, 0x1, 0x7, 0x5, 0xffff8d71, 0x7, 0x7ff, 0x0, 0x444, 0x80, 0x7, 0x427, 0x200, 0x101, 0x7fff, 0x0, 0xffffffff, 0x2, 0x400, 0x60, 0xc, 0x1, 0x7f, 0x400, 0x1, 0x7, 0x69d3, 0x7ff, 0xc75, 0x0, 0x9, 0x4, 0x8, 0x88e, 0x8, 0x40, 0x2, 0x10000, 0x6, 0x0, 0x6, 0x0, 0xe3, 0x1974, 0x1, 0x5, 0x3, 0xfffffe01, 0x4, 0x5, 0x9, 0x1, 0xffff, 0x35b, 0x5, 0x3ff, 0x100, 0x2, 0x7fffffff, 0x5, 0x4, 0x0, 0x82, 0x4, 0x1000, 0x1f, 0xfff, 0x80000001, 0x5f, 0x3, 0xffffffff, 0x9623, 0x1, 0x4bf7, 0x80, 0x400, 0x80000001, 0x288c0e96, 0x0, 0x4, 0x63f3, 0xffffffff, 0x7ff, 0x5, 0x7, 0x1ff, 0x1000, 0x3, 0x101, 0x78764ef6, 0x1f, 0x200, 0x9a1c, 0x9, 0x8582, 0xffffffff, 0x8, 0x5, 0x8, 0x3, 0x4, 0xfffffffc, 0x9, 0x1, 0x67f, 0x0, 0x9, 0x6, 0x9, 0x4, 0x3, 0xfff, 0x0, 0x6, 0x62, 0x81, 0x8000, 0x1000, 0x89, 0x3, 0x9, 0x6, 0x8001, 0xb7873d83, 0x3, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x8, 0x0, 0x101, {0x58, 0x0, 0xe4, 0xa8, 0x7ff, 0xf4}, {0x9, 0x2, 0x7, 0x3, 0x1000, 0x3}, 0x101, 0x5, 0x5}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x4e30}, 0x1, 0x0, 0x0, 0x10}, 0x20000820) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000051c0)={r0, 0x7fffffffffffffff, 0x5, 0xd6}) r8 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0xb5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000500), 0x0, 0x1, 0x0, 0x0, r10}) r12 = syz_open_dev$dri(&(0x7f0000000000), 0xb5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01864ba, &(0x7f0000000100)={0x3, r11, r13}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000005240)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000005280)={&(0x7f0000005200)=[0x0, r13], 0x2, r14, 0x0, 0x1, 0x4, 0x7f, 0x10001, {0x40, 0x3d9f, 0x7, 0x3, 0xff35, 0x7, 0x40, 0x2, 0x100, 0x6, 0xfff7, 0x2, 0x7, 0x9, "e0317455c9a8e3442dd7c075e42f331da80d6e5722aaced970174793be712c3f"}}) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304, 0x37}, "00000100", "6a1d45a8ef8ee704328c671d000000f6", "94a92000", "920b00652000"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r15, &(0x7f0000000800)=ANY=[], 0x208e24b) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f00000050c0)=""/159, &(0x7f0000005180)=0x9f) sendfile(r6, r15, 0x0, 0x20256) 18:28:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x6, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:22 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 402.253539][T10034] gre1: entered allmulticast mode 18:28:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x7, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:22 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x0, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 402.380878][ T23] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 402.449435][ T9244] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 402.587636][ T5141] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 402.637616][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 402.700441][ T9244] usb 3-1: Using ep0 maxpacket: 8 [ 402.757813][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 402.769081][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 402.779404][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.789542][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.802749][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 402.811971][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.827837][ T9244] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 402.839147][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 402.847101][ T9244] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 402.861334][ T9244] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.871366][ T9244] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.884500][ T9244] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 402.894410][ T9244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.967976][ T5141] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 402.980913][ T5141] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 402.991332][ T5141] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.001328][ T5141] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.014447][ T5141] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.023553][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.077918][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 403.083530][ T23] usbtmc 5-1:16.0: can't read capabilities [ 403.159115][ T9244] usb 3-1: GET_CAPABILITIES returned 0 [ 403.164659][ T9244] usbtmc 3-1:16.0: can't read capabilities [ 403.282630][ T9244] usb 5-1: USB disconnect, device number 26 [ 403.289664][ T5141] usb 2-1: GET_CAPABILITIES returned 0 [ 403.295239][ T5141] usbtmc 2-1:16.0: can't read capabilities [ 403.366487][ T5136] usb 3-1: USB disconnect, device number 41 [ 403.507612][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.516732][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.525818][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.534917][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.544028][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.553132][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.562212][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.571313][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.580414][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.589584][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.598668][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.607747][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.616823][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.625981][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.635091][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.644175][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 403.664761][ T5138] usb 2-1: USB disconnect, device number 59 18:28:23 executing program 2: semget$private(0x0, 0x5, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x9, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:23 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r3, 0xffffffffffffffff, 0x0) 18:28:23 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=@newlink={0x74, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xd2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IGNORE_DF={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x74}}, 0x0) (async) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x285c20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@delchain={0x4e30, 0x65, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0xb}, {0xfffa, 0x68447392e397fefd}, {0xf, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_rsvp={{0x9}, {0x86c, 0x2, [@TCA_RSVP_POLICE={0x858, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x6, 0x1ff, 0x81, 0x80000000, {0x80, 0x2, 0x3, 0x5d95, 0x5, 0x7f}, {0x1, 0x2, 0x8, 0x20, 0x3, 0x8}, 0x4, 0x9, 0x20}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x5, 0x8, 0x5, 0x8, 0x8, 0x5, 0x5, 0x400, 0x6, 0xfffffffb, 0x7f, 0xfffffa9a, 0xf0d0, 0x2eaf, 0x4, 0x3, 0x5, 0xffffffff, 0xffff, 0x9, 0x9, 0x1, 0xff, 0x50, 0xb6, 0x4, 0x2, 0x7fffffff, 0x1ff, 0x0, 0x9, 0x1, 0x6, 0xffff, 0x3, 0x2d5, 0x0, 0xa7b, 0x6b, 0xfff, 0x0, 0x3, 0x7fffffff, 0xad4, 0x8, 0x7, 0x800, 0xfffffa09, 0x1, 0x2, 0x192, 0x7fff, 0x0, 0x1, 0x1, 0x6, 0x7ff, 0x4, 0x9, 0x1, 0x2, 0xff, 0x401, 0x7a4, 0x7fff, 0x2, 0x5, 0xfffffff8, 0x6, 0x7fffffff, 0x2, 0xffffffff, 0x9, 0x8, 0x0, 0x1ff, 0x0, 0x80, 0x4, 0x7, 0x1fe00, 0x5, 0x100, 0x3, 0x7ff, 0x100, 0x6, 0xbb7, 0x2, 0x40b, 0x4, 0x10001, 0x6, 0x80000000, 0x101, 0xa44d, 0x5e, 0xc20, 0xd336, 0xfffff800, 0xffff, 0x9, 0xff6, 0x7, 0x80000000, 0x1f, 0x8, 0x3, 0x7ff, 0x517d, 0x8000, 0x3ff, 0x40, 0x1000, 0x3, 0x1, 0x2, 0xffffffff, 0x9, 0x1, 0xffffffff, 0x6, 0x6, 0x1, 0x9, 0x9, 0x5, 0x7fffffff, 0x81, 0x0, 0x200, 0x3, 0x8, 0xd80b, 0x800, 0x3f, 0x7, 0x0, 0x3, 0x4, 0x0, 0x7, 0x6f, 0x1f6d, 0x101, 0xc47d, 0x2, 0x1f64, 0x4, 0xff, 0x7, 0x4, 0x32, 0xfffff739, 0x0, 0x3, 0x80, 0x6, 0xfff, 0x100, 0x7ff, 0x60000, 0x0, 0x6, 0x1000, 0x4, 0x8, 0x3, 0x7f, 0x25, 0x0, 0x4, 0x100, 0x80, 0xbda6, 0x7fffffff, 0x3f, 0x1, 0x800, 0x81, 0x0, 0x9, 0x5, 0x7f, 0x3ff, 0x9, 0x4, 0xffffffff, 0x5, 0x2, 0x100, 0x10001, 0x6fc1, 0x10001, 0x5, 0x9a25, 0x9, 0x0, 0x0, 0x6, 0xfffffff8, 0x3f, 0x80000000, 0x5, 0x5, 0x1c99, 0xfffffffd, 0x5, 0x1ff, 0x7ff, 0x4, 0xfffffa87, 0x0, 0x8, 0x3f, 0x7fffffff, 0x4, 0x3ff, 0x6d, 0x10000, 0x7, 0x7f, 0x4, 0x6, 0x1, 0x8001, 0xffff, 0x0, 0x1, 0x40, 0x55, 0x7, 0x7, 0x2, 0x2, 0x80000000, 0x7d3, 0x7ff, 0xfffffffe, 0xfffffffe, 0xfffffffb, 0x7fffffff, 0x7, 0x9, 0x9, 0x1, 0x7, 0x4, 0xdef, 0x0, 0x80, 0x8, 0x0, 0x17, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2b, 0xb74, 0x8, 0x0, 0xbd, 0x3, 0xc6, 0x1, 0xea, 0x8000, 0x8, 0x5, 0x81, 0x2, 0x12d, 0x6, 0x8, 0x8001, 0xf09, 0x1, 0x100, 0x85, 0x2, 0x782, 0xffff, 0x8e, 0x4, 0x100, 0x3, 0x0, 0xaa54, 0xffff, 0x9, 0xffffffe0, 0x7, 0x7, 0x9, 0x10000, 0x3, 0xffffffff, 0x60, 0x1, 0x1, 0x0, 0x37e, 0x1, 0x0, 0x7fff, 0x2, 0x1, 0x80, 0xfffffffe, 0xc05, 0x9, 0x80000001, 0xe82, 0x9, 0x19b5, 0x8000, 0x9de, 0x9, 0xfffffffe, 0x2, 0xb73, 0x1, 0x4, 0x9, 0x400, 0x3, 0x8, 0x7fffffff, 0x3, 0x16, 0x40, 0x4, 0x3, 0x6, 0x81, 0x101, 0x7fff, 0x9, 0xce, 0xfffffe01, 0x3, 0x8001, 0x0, 0x5, 0x9, 0x80000001, 0xfff, 0x5, 0x80000000, 0x9, 0x6d, 0x6, 0x1, 0x7, 0x6, 0x7, 0x0, 0x8001, 0x6, 0x4, 0x20, 0xd667, 0xffff7690, 0x4, 0x3, 0x8, 0x8, 0x20d1, 0x3, 0x7ff, 0x9, 0xfff, 0x5, 0x81, 0x100, 0x1d37, 0x1, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x1f, 0x3, 0x7bab, 0x1, 0x0, 0x4, 0x0, 0x7f, 0x8, 0x400, 0x0, 0x3, 0x76c2f1ff, 0x5, 0x2, 0x5fab, 0x5, 0x3, 0xe58, 0x7fffffff, 0x9, 0xa01, 0xffffffff, 0x0, 0x800, 0x400, 0x0, 0x3, 0x4, 0x2, 0x510, 0x3, 0x7, 0x3, 0x2, 0x7, 0x3, 0x8, 0x2, 0x20, 0x4, 0x6, 0x7ff, 0x9, 0x81, 0x2, 0x8, 0x0, 0x7, 0x3, 0x2, 0x1, 0xfffffffe, 0x2, 0x2, 0x7fffffff, 0xfffffffa, 0x3c, 0x1, 0x200, 0xfff, 0x5, 0x4, 0x5, 0x2, 0x8, 0x4, 0x2, 0x12, 0x80000000, 0x2, 0x9, 0x5, 0x8, 0xc6e0000, 0x8, 0x200, 0x80000000, 0xfffffff7, 0x101, 0x333a9a9d, 0x5, 0x4, 0x3, 0x69de, 0x0, 0x18, 0xffffff95, 0x7, 0x80000001, 0x2, 0x80000001, 0xfffffffc, 0x7fff, 0x5, 0x6, 0x8, 0x8, 0xafbb, 0x473, 0x4, 0x168, 0xfff, 0x0, 0x10000, 0x50, 0x2, 0x8, 0xb3, 0x5, 0x52, 0x1, 0x0, 0x9b81, 0x8d6b, 0x80, 0x80000001, 0x5, 0x5, 0xa464, 0xffffffff, 0x0, 0x6, 0x2, 0xdfa3, 0x7, 0x4, 0x3492, 0x5, 0x8000, 0x1]}]}, @TCA_RSVP_SRC={0x8, 0x3, @private=0xa010101}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x457c, 0x2, [@TCA_BPF_ACT={0x3fec, 0x1, [@m_bpf={0xf8, 0xa, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x4, 0x7f, 0x1, 0x9}, {0x9, 0x8, 0x40, 0x6}, {0x7, 0x8, 0x40, 0x401}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x101, 0x9, 0x81, 0x2}, {0x9b, 0x3, 0x2, 0x1}]}]}, {0x8b, 0x6, "399bcd87c27a335e047d32a4aa40b4651afbe925c6407aa2f75af5eba0c514b5973e78ba6de400c6c9122b515bc7b2e390c8e9ff74d6830256a28a3da82634fa1b48c98c3bfde706731dcaf7e5f196d2d6758cf93d476404d28dc312aa0b8ab7b5fe9b2d3c0ebec3d7095cd77bbc51646c4b03c618e467690da804f36c3ccb6f8b68414fa9ef84"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x3c88, 0x4, 0x0, 0x0, {{0xa}, {0x3bdc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x3, 0x401, 0x1, 0x68a, 0xfffffffa}, 0x1, 0x0, [{0x8, 0x80000000, 0xc4a, 0x3, 0x9, 0x1000}, {0x5c0, 0x20, 0x5, 0x40, 0x1, 0x6f79}, {0x2, 0x7, 0x4, 0x6096, 0x6f2, 0x5}, {0x6, 0xffffffff, 0x10001, 0x5, 0x2, 0x7}, {0x1, 0x2, 0x4, 0x0, 0x2, 0x7fff}, {0x5, 0x0, 0x7, 0xfffffe01, 0x1f, 0x1000}, {0x2, 0x1c2973e1, 0x80000001, 0xcc0b, 0xffffff81, 0x7ff}]}, [{0x5, 0x2, 0x101, 0xff, 0x1, 0x7}, {0x2, 0xfffffbff, 0x0, 0x7fff, 0x8001, 0x80000000}, {0xb5fc, 0x9b78, 0xfffffbff, 0x8, 0x9}, {0x32, 0x7ff, 0xf2d, 0xfffffff8, 0xd10, 0x3}, {0xca95, 0x1, 0x3, 0x3ff, 0x0, 0x1000}, {0x10001, 0xc19, 0x5, 0x7fffffff, 0x8}, {0x80000001, 0x5, 0x9, 0x6, 0x40, 0x3}, {0x7c8, 0x3ff, 0x7, 0x3, 0x0, 0x2}, {0x7, 0x0, 0x5, 0x9, 0x8000, 0x7}, {0x7, 0x100, 0x1, 0x6, 0x401, 0x3}, {0x1, 0xff, 0x7, 0x6, 0x9, 0x40}, {0x559, 0x6, 0x800, 0x4, 0x2f, 0x1000}, {0x2, 0x100, 0x1, 0x6, 0x40, 0xaea}, {0xffffff88, 0xffffffff, 0x1, 0x2, 0x20000000, 0xdae6}, {0x80000001, 0x100, 0x62, 0x6, 0x9, 0x5}, {0x5, 0x401, 0x80, 0x3, 0x3, 0x4}, {0x1, 0x2, 0x7, 0x8, 0xfffffffe, 0x1}, {0xffffff6f, 0xffffffff, 0x800, 0x20, 0x6a, 0x9}, {0x6, 0x9, 0x6, 0x8183, 0x9, 0x2}, {0x5, 0x7, 0x8, 0x46, 0x80, 0x140}, {0xe91, 0x4f, 0x200, 0x8, 0xbc, 0x5}, {0x5, 0x0, 0x2, 0x8, 0x3, 0x610f}, {0xffffffff, 0x2, 0x4, 0xffff7fff, 0x101, 0x9}, {0x6, 0x1, 0x38000000, 0x80000001, 0x9}, {0x0, 0x8, 0x5, 0x7, 0xfffff800, 0x1ff}, {0x5, 0x1ff, 0x9, 0x8, 0xffffffff, 0x10000}, {0x800, 0x7, 0x3f, 0xa54, 0x7f, 0x8}, {0x1, 0x2, 0xd1f, 0x4, 0x1f, 0x9ac2}, {0x9, 0x3f, 0x4, 0x7e, 0x78b2, 0x1}, {0x20, 0x80, 0x5, 0xfc9, 0x7ff, 0x3}, {0x1a0d00, 0x81, 0x8, 0xf7, 0x7fff, 0x94}, {0x5, 0x5, 0xb295, 0x3a, 0x3, 0x1ff}, {0x200, 0xffffff77, 0x6, 0x4, 0x8001, 0xffffffff}, {0x1, 0xffff2773, 0x0, 0x3ff, 0xffffff45, 0x7}, {0xfcd3, 0x40, 0x1, 0x1, 0x8, 0x4}, {0x9, 0x3f, 0x99d1, 0x6, 0x1, 0x7}, {0x3f, 0x6, 0xe8f3, 0x3, 0x8, 0x35f}, {0xb6b7, 0x7, 0x3, 0x7ff, 0x4}, {0x58c, 0x5, 0x4, 0x758, 0xfffff800, 0x2}, {0x5, 0x63b, 0x0, 0xfffffff7, 0xe3b7, 0x3}, {0x7, 0x5, 0x8, 0x5, 0x81, 0x1000}, {0x9, 0x4, 0x6, 0x52, 0x5, 0x20}, {0x0, 0x5, 0x100, 0xcbee, 0x6, 0x3}, {0x5ba0, 0x2, 0x2, 0x2, 0x401, 0x1}, {0x4, 0xff, 0x10000, 0x1, 0x0, 0x8}, {0x5, 0x84, 0x7, 0x5635, 0x80, 0x401}, {0x6, 0x800, 0x2, 0x6, 0x3f, 0x8000}, {0x453f, 0xfffffeff, 0x40, 0x2, 0x7fff, 0xfa1}, {0x0, 0x9adf989, 0xfffffffa, 0xffffffff, 0x8, 0x963}, {0x4, 0x7fffffff, 0xefa, 0x1, 0x1}, {0x100, 0xffffffff, 0x80000001, 0x4, 0x1}, {0x7, 0x5, 0x100, 0x2, 0xa2, 0x5}, {0xfffffffb, 0xffff7fff, 0xfffffffa, 0x2, 0x1, 0x101}, {0x2, 0x1000, 0x7, 0x3, 0x9, 0x9}, {0x80000000, 0x4, 0x8, 0x0, 0x800, 0x8}, {0x10000, 0x4, 0x9, 0x1, 0x7, 0x6}, {0x10, 0x4, 0x1, 0x7ff, 0x8000, 0x4}, {0x1, 0x80000001, 0x8, 0x7, 0x6, 0x6ed}, {0x5, 0xfffffeff, 0xeb8, 0xc3, 0x8000, 0xffff}, {0x6, 0x5, 0xae, 0x3, 0x8, 0x5}, {0x5, 0x2, 0x9, 0xffffffc1, 0x80000000, 0x1}, {0x4, 0x6, 0x8a4c, 0x3, 0x6, 0x6}, {0x0, 0x1, 0x800, 0xfffffff9, 0x8, 0x7}, {0x1, 0x7fff, 0x2, 0x80000000, 0x3, 0x8001}, {0x5, 0x44, 0x80000000, 0x8, 0x3, 0x8}, {0x2, 0x8000, 0x2, 0x80, 0xbcfd, 0x1}, {0x5, 0x1, 0x3, 0x6a, 0xfffffffb, 0x8}, {0xaa, 0x7, 0x7f, 0x100, 0x80, 0xfffffff8}, {0x6, 0x7fffffff, 0x3f, 0xfffffeff, 0x6, 0xfff}, {0x5, 0xfffffff8, 0x8, 0x3b, 0x7, 0x6}, {0x9, 0x8, 0x5, 0x5, 0x8, 0x4}, {0x0, 0x1336, 0x44, 0x6, 0xc7c, 0x9}, {0xcca, 0x5b26, 0xff, 0x4, 0x0, 0x7}, {0x7f, 0x97, 0x0, 0x100, 0x6b, 0x4}, {0x9, 0xfff, 0x5, 0xff, 0x6b, 0x81}, {0x4, 0x1ff, 0x100, 0xffffffff, 0x5cac}, {0x3, 0x1, 0x20, 0x1, 0x0, 0x9}, {0x2, 0x1f, 0x1, 0x2, 0x1f, 0xf87a}, {0x100, 0x1ff, 0xbec, 0x1, 0x2, 0x1}, {0xff, 0x4, 0x0, 0x6, 0x9, 0x80}, {0x8, 0x3, 0x7, 0x4, 0x44d, 0x975}, {0xffffffff, 0x2d6, 0x4, 0x81, 0x7fffffff, 0x3}, {0x5, 0x1, 0x8, 0x7c42, 0x9, 0x65fd}, {0x1f, 0x8, 0x0, 0x48, 0x7, 0x200}, {0xff, 0xa628, 0xb03, 0x2, 0xb6, 0x401}, {0x1, 0x20, 0x0, 0x1ff, 0x5, 0x865}, {0x101, 0x7, 0x8, 0x80000001, 0x101, 0xffff}, {0x2, 0x7, 0x83a5, 0x1, 0x2, 0x1}, {0xab18, 0x5, 0xecef, 0xfffffff7, 0x3}, {0x1, 0x7, 0x8, 0x400, 0x5, 0xc7ac}, {0x800, 0x4, 0x6, 0x1, 0x1, 0x1}, {0x0, 0xc7, 0x3, 0x4, 0x8, 0x9b6}, {0x40, 0x4c, 0x80, 0x80000001, 0x9, 0x2}, {0x3, 0x9, 0x7, 0x8, 0xfffffff9, 0x1ff}, {0xfffffff9, 0x1f, 0x3ff, 0x5, 0xbd, 0xfff}, {0x5, 0x100, 0x9, 0xf6, 0x7, 0x1}, {0x7, 0x6, 0xfff, 0x2, 0x80000000, 0x2}, {0x7ff, 0x1, 0xffffff81, 0xe7e7, 0x8, 0x1}, {0x0, 0x7, 0x0, 0xff, 0x1, 0x20}, {0x6, 0x0, 0x4d3, 0x2, 0x7f, 0x9}, {0x6000000, 0x7, 0xf10, 0x0, 0x1, 0x1}, {0x3, 0x5, 0xfffffff9, 0x3, 0x80000001, 0x200}, {0x7f, 0x0, 0x5, 0x800, 0x4730010f, 0xa20a}, {0x0, 0x8, 0x4, 0x6, 0x4, 0x90}, {0x5, 0x1, 0x5, 0x10000, 0xffffffff, 0xfffffffe}, {0x8, 0x6, 0x5, 0x0, 0x800, 0x80}, {0x6, 0x6, 0x5, 0x3, 0x4f, 0x1}, {0x100, 0x8, 0x4, 0x7, 0x2, 0x4}, {0xff, 0x6, 0x1f, 0x4, 0x40c, 0x8}, {0x0, 0x9, 0x100, 0x0, 0x7}, {0x2, 0x1, 0x1, 0x0, 0x81, 0x20}, {0x5, 0x7fff, 0x401, 0x0, 0x0, 0x12c}, {0x4, 0x6, 0x7f, 0x5, 0x7, 0x5}, {0xa9, 0x8, 0x367f, 0xc7, 0x200, 0x7fffffff}, {0xbc, 0x5, 0x400, 0x8, 0x7, 0x3}, {0x2, 0x8, 0x1855, 0x9e, 0x3, 0x3}, {0x0, 0x40, 0x6, 0x20, 0xca4, 0x3f}, {0x0, 0x4, 0x8, 0x4, 0x8000000, 0x3}, {0x7, 0x2, 0xfffffffe, 0x8, 0x10001, 0x9a23}, {0x9, 0xa000, 0x800, 0x9, 0x3}, {0x2, 0x5, 0x100, 0x6, 0x7, 0x8ef2}, {0x1, 0x9, 0xf0b, 0x480, 0x9, 0x3}, {0x401, 0xde3, 0x0, 0x9, 0x5, 0xfff}, {0x1, 0x7, 0x0, 0x2f2, 0x7ff, 0x4}, {0x8305, 0x2, 0x7fff, 0x80, 0xecb, 0x3}, {0x1395, 0xffffffff, 0xfff, 0x2, 0x8, 0x6}, {0x7, 0x4, 0x63c1, 0x401, 0x101, 0xd935}, {0xa0e5, 0x3, 0x8, 0x6, 0x7, 0x4}], [{0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x3, 0x3}, {0x3}, {0x4, 0x1}, {0x3, 0x7bbb9ca65b539a63}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {}, {0x2}, {0x5}, {0x3, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x609ed249d9a0f209}, {0x2, 0x1}, {0x5}, {0x1}, {0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x3}, {0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x2}, {0x3}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0xf1a0fc72e3bab290}, {0x2}, {0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x77845d5fd611bb6b}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x6}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x7fff, 0x3, 0x8, 0x41df, 0x8}, 0x8, 0xf2, [{0x63883ab7, 0x1, 0x58f6, 0x7, 0x3f, 0x80000001}, {0xfff, 0x9, 0x2d, 0x81, 0x2, 0x4}, {0x3, 0x80, 0x1, 0xfffffffd, 0xa81, 0x40}, {0x6, 0x1, 0x400, 0x2e, 0x0, 0x9}, {0x2d88, 0x2, 0x4, 0xe345, 0x7fff, 0x6}]}, [{0x7, 0x8, 0x1ff, 0x9e89, 0x8, 0x1c}, {0x6, 0x71c, 0x6, 0x7, 0x7fff, 0xed0}, {0x2, 0x9, 0x4, 0x9}, {0x101, 0x9, 0x1f, 0x4, 0x8, 0xff}, {0x4, 0x7, 0x101, 0xf02, 0x8, 0x7}, {0x4, 0x1, 0xff, 0x14000, 0x2f6, 0x9}, {0x81, 0x7, 0x8, 0x1000000, 0xd056, 0x7fffffff}, {0x8e9, 0x6, 0x7, 0x9, 0x7, 0xba92}, {0x0, 0x6, 0xfffffffa, 0x0, 0x3, 0x7f}, {0x401, 0x7fff, 0xfffffff9, 0x9, 0xdc6, 0x3e2fdd4e}, {0x2, 0x4, 0x2, 0xc3, 0x0, 0x101}, {0x6, 0xdcb, 0x81, 0x400, 0x1, 0x200}, {0xa18, 0x0, 0x8, 0x0, 0x7fffffff, 0x6}, {0x7ff, 0x5, 0x6, 0x2, 0x4, 0xad}, {0x3, 0x7fff, 0x0, 0x9, 0x1f, 0xcc1}, {0x3ff, 0x7da, 0x9, 0x10001, 0x40, 0x2}, {0x0, 0x775, 0x1000, 0xb91f, 0x6, 0x4}, {0x2, 0x4000, 0x1ff, 0xd60f, 0x2, 0x756}, {0xa5c, 0xdc, 0x2, 0x2, 0x1, 0x6}, {0x9, 0xfffff800, 0x401, 0x2, 0x9, 0x80000001}, {0xe3, 0x6, 0xca05, 0x1, 0xf1, 0x80000000}, {0x927, 0x6, 0xe23, 0xb7, 0x401}, {0x8, 0x7, 0x1, 0xffffbfca, 0x9, 0x9}, {0x2438, 0xfffffffa, 0x3, 0xa8, 0x9, 0x8}, {0x6, 0x4542, 0x5, 0x401, 0x8}, {0x9, 0x6, 0x0, 0x6ba1, 0x4, 0xffffffff}, {0x1, 0x7, 0x6, 0x5, 0x4, 0x8}, {0x9, 0xef, 0x2609, 0x4, 0xf79, 0x2}, {0x9, 0x100, 0x3, 0x3f, 0x6, 0x1}, {0x200, 0x40, 0x2d2000, 0x456, 0x2, 0x7}, {0x81, 0x6, 0x7f, 0xf473, 0x9, 0x2}, {0x6, 0x0, 0x7f, 0x8000, 0x81b, 0x7}, {0x1, 0x101, 0x40, 0x5, 0x0, 0x551d6e41}, {0x0, 0x0, 0x6, 0xc4, 0x1000, 0x6abd117b}, {0xffffffff, 0x22, 0x1f, 0x1, 0x1, 0x9ac}, {0x927, 0x6, 0xfffff000, 0x6, 0x3ff}, {0x6, 0x69c, 0x101, 0x3, 0x6, 0x8}, {0x8000, 0xffffffff, 0x8000, 0x10001, 0x8001, 0x29fc}, {0x6, 0xfff, 0x7fffffff, 0x3, 0x6, 0x1}, {0x2, 0x80, 0xef, 0x8, 0x4, 0x200}, {0x5, 0x682, 0x7, 0x6, 0x8000, 0x1f}, {0x800, 0x1b7, 0x4, 0x7, 0x1000, 0x4}, {0xe, 0x0, 0x8, 0x100, 0x3d}, {0x8, 0x5, 0x8, 0x20, 0x401, 0x8001}, {0xffffff00, 0xffffffff, 0xff00000, 0x4, 0x6, 0x5}, {0x5, 0x9, 0x4, 0x0, 0xff, 0x101}, {0x1000, 0x40, 0x9, 0xffffffff, 0x7fff, 0x7fffffff}, {0x8, 0x6, 0x400, 0x1, 0x3, 0x8}, {0x5, 0x101, 0x3, 0x8001, 0x7, 0x1}, {0x7, 0x1, 0x401, 0x2, 0x9b, 0x6}, {0x8, 0x3, 0x3, 0x5, 0x0, 0x3d95}, {0x40, 0x2, 0x4, 0x4d27, 0x7f, 0x3f}, {0x400, 0x2, 0x1ff, 0xed0, 0x8d7c, 0x7ff}, {0x1, 0x0, 0x2, 0x6, 0x0, 0x633d}, {0x59d, 0x40, 0x7fffffff, 0x8000, 0x4, 0x8000}, {0x4, 0x5, 0x8, 0x8, 0x10000}, {0x7f, 0xfff, 0x0, 0x3ff, 0x1, 0x7ff}, {0x6, 0x3, 0x10001, 0x3f, 0x9be}, {0x6, 0x0, 0x80000000, 0xffffffff, 0x2, 0x8}, {0x2, 0xdc61, 0x7, 0x8, 0x6, 0x1}, {0x8, 0x7f, 0x2, 0x4, 0xff, 0x3}, {0xfffff800, 0xffff7fff, 0xa66, 0x5, 0x8, 0x2}, {0x7, 0x80000000, 0x8001, 0x20, 0x40, 0x5}, {0x6, 0x9, 0xfff, 0x2, 0x228, 0x9}, {0x6, 0x3, 0x7f, 0x7f, 0x0, 0x7}, {0x1000, 0x5, 0xb38, 0x8000, 0xff, 0x177e}, {0x657, 0x6, 0x400, 0x8000, 0x10000}, {0x4, 0x3ff, 0x654e, 0xb9e9, 0x100, 0x40}, {0x1ff, 0x3c4, 0x10000, 0x7fff, 0x3, 0x1c000000}, {0x9, 0x7, 0x0, 0x3, 0x5, 0x7fff}, {0x5, 0x20, 0x9, 0x80000001, 0x7, 0x7}, {0x8000, 0x200, 0x4, 0x81, 0x4, 0x6}, {0xfff, 0x54, 0x92, 0x1f, 0x1f, 0xa7bb}, {0x8, 0x3379, 0x3, 0x5, 0x35, 0x81}, {0x8, 0x8, 0x8, 0x20, 0x7fffffff, 0xffff8000}, {0x11d, 0x5, 0x7b, 0xdb, 0xabc, 0x51c0}, {0x1, 0x8, 0x5, 0x4, 0xd2, 0x80000001}, {0x0, 0x93, 0x0, 0x1, 0x401, 0xee}, {0x9, 0x7fff, 0x200, 0x5, 0xb2}, {0x800, 0x2, 0xffffffff, 0xd84, 0x4}, {0xfe7f, 0x6a, 0x7826, 0xcdd, 0x7, 0x5}, {0xb4, 0x6, 0x7, 0x1, 0x6, 0x8}, {0x40, 0x564, 0x6, 0x7fffffff, 0x10001, 0x9}, {0x4, 0x8, 0x4, 0x4, 0x0, 0x1ff}, {0x9a, 0x9, 0x401, 0x6, 0x5, 0x4}, {0x3cf, 0x1b, 0x2, 0x1f, 0x9, 0x3f}, {0x0, 0x3, 0x0, 0x3, 0x6b, 0x40000000}, {0x2, 0x4, 0xffffffff, 0x2, 0x8}, {0x0, 0x8, 0x7, 0x6, 0x0, 0x101}, {0x9, 0x0, 0x0, 0x7, 0x3, 0xfffffe00}, {0x7f, 0x800, 0x8, 0x9, 0xab, 0x4}, {0xb301, 0x1d3, 0x9, 0xb6, 0x6, 0x7ff}, {0x1, 0x2, 0x200, 0x1, 0x80, 0x3e}, {0x7fff, 0xa75, 0x6, 0x7fff, 0x4, 0x70ba5e87}, {0x2, 0x7fffffff, 0x10001, 0x7fffffff, 0xffffffff, 0x3ff}, {0x8, 0x8001, 0x22, 0x5, 0x0, 0xf565}, {0xdbc8, 0xa075, 0x0, 0x20, 0x1, 0x3}, {0x60bd, 0x8, 0x8, 0x3, 0x9, 0x3}, {0x20, 0x0, 0x5, 0x7, 0x8, 0x80}, {0x6, 0x2, 0x0, 0x101, 0xffffffff, 0x8000}, {0x3, 0x7a39ab5c, 0x1, 0x9, 0x7, 0x101}, {0x6, 0xffffffff, 0x7fffffff, 0x1, 0x2, 0x4}, {0x7, 0x80000001, 0x800, 0x4, 0x3, 0x9}, {0x5, 0x0, 0x3, 0x83, 0x0, 0x4}, {0x1, 0x95f, 0x81, 0x7fffffff, 0x61, 0xa2a}, {0x5, 0x4, 0x7fff, 0x9, 0x25b}, {0x7ff, 0xffff35bc, 0x8, 0x4, 0x80000001, 0xb0a}, {0x1000, 0xffff, 0x800, 0x7, 0x200, 0xfffffff9}, {0xc4b0, 0xfffffff9, 0x7, 0x54a, 0x0, 0x2d}, {0x8, 0x0, 0x4, 0x9, 0x10000, 0x9}, {0x800, 0x1, 0x4, 0xfffffff7, 0x800, 0x6}, {0x99b, 0xe8, 0x9, 0x20, 0x6, 0x2400}, {0x1b, 0x2, 0x1ff, 0xd8000000, 0xfffffff8, 0x4}, {0x44e, 0x5, 0x4, 0x7, 0x3, 0x8}, {0x8, 0xfffffee0, 0x8, 0x3, 0x7ff, 0x1ff}, {0x3, 0x9, 0x91, 0x1, 0x8e, 0x4}, {0x401, 0x8, 0x6, 0x1f, 0x0, 0x5}, {0x8, 0x8, 0xfffff001, 0x3ff, 0xfffffe00, 0x5}, {0xa43, 0xfffffffa, 0x9, 0x8001, 0x401}, {0x3, 0xffff, 0xfffffff8, 0x81, 0x1, 0x8}, {0x1, 0x6, 0x7ff, 0x6, 0x100, 0x2}, {0x9, 0xff, 0x1, 0x6cf4, 0x100, 0x9}, {0x3f, 0xffff, 0xc3ef, 0x101, 0x9, 0x7fff}, {0xff, 0x2, 0xfffffffd, 0x8, 0xd971, 0x81e0}, {0x2000, 0x6, 0x3e, 0x8, 0x40000000, 0x81}, {0xffffffff, 0x9, 0x408, 0x7, 0xfffff801, 0xc700000}, {0x577, 0x3, 0x401, 0x8, 0x3}, {0x1, 0x3, 0xdeb, 0x5, 0x0, 0xa7a}], [{0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0xf15c4117bb76e3a2}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1}, {0x5, 0x1}, {0x1}, {}, {}, {0x4}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0xc428317c9ba14895}, {0x4, 0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x3}, {0x1}, {0x4}, {0x2}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x4}, {}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x3ff, 0xfffffffd, 0x2, 0x8, 0x6}, 0x38, 0x7, [{0x4, 0x101, 0x3, 0x81, 0x80000000, 0x8}]}, [{0x140, 0x1000, 0x9, 0xf2, 0x9, 0x200}, {0x7ff, 0xa7d7, 0x1, 0xffff, 0x1, 0x5}, {0xbc8e, 0x9fcc9b8, 0x567ed6ea, 0x5, 0x38, 0x3fb}, {0xdf, 0x2, 0x3, 0x8, 0x0, 0x7}, {0xe4, 0x5, 0x6, 0x6cdb, 0x1ff, 0x1}, {0xe3b, 0x23, 0xff, 0x3, 0xb01, 0x7fffffff}, {0x0, 0x2, 0x2, 0x40, 0x1, 0x10001}, {0x7, 0x8, 0xffffffff, 0x0, 0x796, 0x305b800}, {0x9, 0x500, 0x8001, 0x1, 0x8, 0x8}, {0xa2d2, 0x4, 0x7, 0x0, 0x800, 0x4}, {0x1000, 0x400000, 0x3f, 0x9, 0x80}, {0x2, 0x7, 0x6, 0x401, 0xfffffffb, 0xfffffffe}, {0x8, 0x9, 0x6, 0x7, 0x766, 0x3}, {0x949d, 0x4, 0xbc8, 0x4, 0x0, 0x4}, {0xfc000000, 0x7, 0x9, 0x9, 0xfffffffd, 0xffffdc25}, {0x3f, 0x3f6, 0x0, 0x1000, 0x7, 0x4}, {0xa0, 0x80, 0x8, 0x7, 0xfff, 0x8000}, {0xfffffffe, 0x4, 0x1, 0x707, 0x0, 0x7fff}, {0x0, 0x20, 0x401, 0x3, 0x1, 0x80000001}, {0x3, 0x1, 0x5, 0x3, 0x3f, 0x5}, {0x9, 0x1, 0x9c4, 0x5, 0x7, 0x5}, {0x0, 0x3, 0x7, 0x6, 0x5, 0x401}, {0x1, 0xfffeffff, 0x401, 0x3ff, 0x3, 0x200}, {0x2, 0x2, 0x8, 0x57, 0x8, 0x4}, {0x1, 0x9, 0x6, 0x4, 0x96, 0x1000}, {0x2, 0x6, 0x1, 0x9, 0x5, 0xffff7d3a}, {0x4, 0x1, 0x2, 0x3, 0x6, 0x2}, {0x400, 0x7fffffff, 0x8, 0x800, 0xc700, 0x1ff}, {0xe87, 0xb73, 0x4, 0x498, 0x9, 0x7}, {0x0, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x1, 0xffff, 0xc9, 0x8, 0x7d6}, {0x0, 0x1, 0x97d, 0xe2, 0x43, 0x9}, {0x42, 0xff, 0x581, 0x142, 0x2, 0xa6}, {0x90c, 0x41302109, 0x1806, 0x3261, 0x563d}, {0x81, 0x0, 0x8, 0x9, 0x1, 0xffffffff}, {0x538f, 0xfff, 0x3f, 0xfa3, 0x3}, {0x6, 0x8001, 0x1, 0xca89, 0x80000000, 0xecc}, {0x8, 0x5, 0x3ff, 0xc406, 0xf1e, 0x71}, {0x5, 0x101, 0x81, 0x2, 0xf3, 0x100}, {0x1ff, 0x7f, 0x400, 0x87ef, 0x81, 0x7}, {0x4, 0xfffffffa, 0xffffffff, 0x7fffffff, 0x1f, 0x3ff}, {0x1000, 0x3ff, 0xff, 0xffffffff, 0x2, 0x5}, {0x7ff, 0x9, 0x2, 0x1, 0xfffffff7, 0x1f}, {0xffffffff, 0x6, 0x7fff, 0x0, 0x7, 0xfffffe00}, {0x9, 0x500, 0x8, 0x8, 0x9, 0x8}, {0x8001, 0x1, 0x5, 0x5, 0x800100, 0x401}, {0x3, 0x0, 0x4, 0xc9, 0x472, 0x200}, {0x6, 0x9f19, 0xffff2373, 0x30, 0x200, 0x248}, {0x4c8, 0x15a3, 0x7bbc, 0xffffffff, 0x1f}, {0x1, 0x9, 0x100, 0x400, 0x2, 0x3}, {0x0, 0xbcb, 0x80000000, 0x4, 0x8, 0x7fffffff}, {0x8000, 0xd03d, 0x1f, 0xb2, 0x9, 0x9}, {0x21, 0x3, 0x9, 0x3, 0xffffffa3, 0xffffffff}, {0x400, 0x2, 0x1, 0x6, 0xd6, 0x1b}, {0x2, 0x80, 0x5, 0x9, 0x401, 0x80000000}, {0x8, 0x0, 0x99fd, 0x8, 0x7, 0x200}, {0xffffffff, 0x100, 0x1, 0x7, 0x4, 0x3}, {0x9dd, 0x3, 0x9, 0x584, 0x8001, 0x3}, {0x4f3600, 0x3, 0x0, 0x8, 0x4, 0x3}, {0x1, 0x5, 0x80, 0x8, 0x6, 0x3}, {0x4, 0x8f8, 0x0, 0x8, 0x7fffffff, 0x5324}, {0x44, 0x0, 0x7, 0x9, 0x1, 0x4}, {0xa5f, 0x9, 0x14, 0xf4a, 0x7, 0x3}, {0x10001, 0x5, 0x9, 0x3, 0xfffff131, 0x2}, {0x4, 0xfffffffd, 0x5, 0x5, 0x3ff, 0x2411098f}, {0x2, 0x4, 0x5, 0x80, 0x9, 0x8}, {0x1ff, 0x750d014, 0x5d, 0x8000, 0x8000, 0x7f}, {0x966, 0x40, 0x1, 0xfffffe01, 0x40, 0x9}, {0x8, 0x8, 0x9, 0x9, 0xa972, 0x7}, {0x800, 0x4, 0xfffffffb, 0x10000, 0x8001, 0x662}, {0x7, 0x9, 0xc6, 0x2, 0x3, 0x3}, {0x2, 0x6, 0x1, 0x401, 0x9, 0x5}, {0x1ff, 0xfffffffb, 0x8, 0x9, 0xfffffff8, 0x7}, {0x200, 0x2, 0x369d, 0x3, 0x1, 0xf}, {0x4, 0x80000000, 0x3, 0x8001, 0x10000, 0x3}, {0x9, 0x401, 0xa66, 0x4cf, 0x6, 0x1}, {0x1f, 0x6, 0x3f, 0x3, 0x5, 0x44fe3a7e}, {0x9, 0x1, 0x4f39, 0x4cf3, 0x0, 0x6}, {0x3f, 0x60, 0x9, 0x4c, 0x0, 0xffff}, {0x7fffffff, 0x2, 0x800, 0x8, 0x9, 0x10c3}, {0x3f, 0x7, 0x80000000, 0x400, 0xe1, 0x200}, {0x40, 0x6, 0x2, 0xe1ed, 0x20, 0x82d}, {0x1f, 0x664, 0x5, 0x10001, 0x8, 0x400}, {0xb217, 0x8, 0x92, 0x2, 0x9, 0x1}, {0x20, 0x800, 0xfffff598, 0x101, 0x2, 0x7fffffff}, {0x20, 0xf0, 0x5f, 0xfffeffff, 0x3b, 0x2}, {0xa9, 0x40, 0x1023, 0x0, 0x8000, 0xfffffffb}, {0x8, 0x2e5, 0xfff, 0x3, 0x1ff, 0x5}, {0xe26, 0xfac, 0x10001, 0x7, 0x0, 0x5}, {0x8, 0x4, 0x5, 0x7f, 0x9, 0x5}, {0x0, 0x10001, 0x8, 0x24d8, 0xffffffff, 0x6}, {0x0, 0x1000, 0x1ff, 0x401, 0x2c3, 0x7f}, {0x1, 0x7ff, 0x2, 0x55, 0x2, 0x5}, {0xa052, 0x4, 0x7, 0x9, 0x7f, 0xfffffff9}, {0x400, 0x0, 0xfffff172, 0x7, 0x8001, 0x7}, {0x6, 0x286, 0x7, 0x400, 0x8, 0x2}, {0x1, 0x4, 0x0, 0xffffff01, 0x8, 0x80}, {0x7, 0x4, 0x1000, 0x3f, 0x5, 0xd11}, {0x0, 0x0, 0x6, 0x1, 0x7, 0x10001}, {0x938, 0x7, 0x0, 0xfffffbff, 0x6, 0x10}, {0x1, 0x6, 0xff, 0x931e, 0x9, 0x4}, {0x9, 0x9, 0x0, 0x1000, 0x7e6, 0x7}, {0x7, 0x9, 0x9, 0x6, 0x7, 0x81}, {0x9, 0x7f, 0x0, 0x2c1, 0x8, 0xffff}, {0x7ff, 0x9, 0x401, 0xffffffff, 0x8, 0x4}, {0xfffffffe, 0x6, 0x2, 0x7fff, 0x1, 0x1}, {0x7ff, 0x101, 0x22, 0x7f5c, 0x6, 0x351}, {0x6, 0x4, 0x5, 0xfffffa3f, 0x9, 0xffff}, {0xac1, 0x7, 0x5, 0x40, 0xc4b7, 0x7f}, {0xc17, 0x6, 0x0, 0x80, 0x101, 0xe2f}, {0x1ff, 0xa8d, 0x3f, 0x4e, 0x6, 0x1}, {0x9617, 0x0, 0x8, 0x5, 0x3, 0xa8}, {0x401, 0x800, 0x8001, 0x101, 0x3, 0xfffffffb}, {0x0, 0x10001, 0x1, 0xff, 0x5, 0x8}, {0x7, 0x77, 0x6, 0x81, 0x6, 0x14}, {0x101, 0x3ff, 0xc000, 0xef77, 0x1f, 0x9}, {0xc000, 0x80000001, 0x1, 0x0, 0x4, 0x53c}, {0x1, 0x4, 0x2, 0x401, 0x80000000, 0x2}, {0xfff, 0x7, 0x1, 0x3, 0x2, 0x73}, {0x9, 0x3, 0x8, 0x3c, 0x1, 0x5}, {0x80, 0x4, 0x1, 0xfffffffc, 0x6, 0x6}, {0x8000, 0xd2, 0x401, 0x3, 0xb8, 0x1f}, {0x800, 0x0, 0xfff, 0x81, 0x26e2}, {0x0, 0x1f, 0x24a3, 0x5, 0x6, 0x9b}, {0x1, 0x8, 0x80000000, 0x81, 0x0, 0x1}, {0x0, 0x9, 0x4b, 0x7, 0x10001, 0x6}, {0x6, 0x3, 0xb842, 0x2, 0x3, 0x401}, {0xe47, 0x8, 0x247, 0x6, 0xeaa, 0xa6e7}], [{0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {}, {0x2}, {}, {}, {0x3}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x7}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x4}, {0x3, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x4}, {0x1}, {0x0, 0x1}, {0x7}, {0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x97fe6cec49515f98, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x7}, {0x3}, {0x4, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x4}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x4}, {0x6}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0xe8, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x1, 0x3, 0x4, 0x80, 0x7}, 0x7, 0xfe, [{0x4, 0x2, 0x2, 0xbc4, 0x4, 0xe5}, {0x6, 0x6, 0x1, 0x3, 0xfffffeff, 0x1000}, {0x7, 0x0, 0x9e, 0x8000, 0x7fff, 0xffff}, {0x9, 0x7f, 0x1000, 0x0, 0x8001, 0xb080}, {0x8, 0x1, 0xfffffffb, 0x200, 0xc8, 0x200}]}, [{0x81, 0x6, 0x0, 0x9, 0x6, 0xffffffd9}, {0x20, 0xffffffff, 0x3, 0x9, 0x7770, 0x8000}, {0x0, 0x7, 0x5, 0x401, 0x3, 0x6}, {0x7, 0x5, 0x1dc1, 0xed8b, 0x1, 0x2}, {0x7, 0x3ff, 0x20, 0xfffff3c5, 0xfffffc00, 0xe09}, {0x0, 0x1, 0x4, 0x8001, 0x100, 0x4}, {0x7f, 0x138, 0x767, 0xb3, 0x1}, {0x3f, 0x4, 0x5, 0x6, 0x1, 0x80}, {0x5, 0x1ff, 0x2, 0x3, 0x20, 0x8a}, {0x2, 0x6, 0x5, 0x8, 0x7fffffff, 0x9}, {0x9, 0xeaaf, 0x7, 0x1, 0xfffff163, 0x99d}, {0x7fff, 0x400, 0x4, 0x6, 0x6, 0xffffffff}, {0x8, 0x2, 0xfffffffb, 0x4, 0x6, 0x8}, {0xffffffff, 0x8, 0x4, 0x80, 0x20, 0x5}, {0xff, 0xe6a, 0x0, 0x401, 0x1, 0x200}, {0x5c9, 0x9, 0x2, 0x4, 0x16847c88, 0x3}, {0x80000001, 0xf2, 0x101, 0x8001, 0x2, 0x100}, {0x3ff, 0x100, 0x8, 0x1, 0x5}, {0x2, 0x7, 0x3, 0x5, 0xffff18f9, 0x3}, {0x6, 0x9af, 0x0, 0x4, 0x59757803, 0x24000000}, {0x1d3, 0x7, 0x140, 0x7fffffff, 0x1ff, 0x80000001}, {0x4, 0x0, 0x6, 0x4, 0x6, 0x4}, {0x80000001, 0x5, 0x20, 0xffff8000, 0x5, 0x9}, {0x1000, 0x9, 0x1, 0x0, 0xfffffffe, 0x68eb}, {0xff, 0x7fff, 0x1, 0x7, 0x101, 0x6}, {0x200, 0x29b9623, 0x7, 0x9, 0x81, 0xd1f6}, {0xc1, 0x2, 0x8, 0x7, 0x9, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x3, 0x2}, {0x5, 0x400, 0x2, 0xc8f, 0x100, 0x9}, {0x3ff, 0x867b, 0x5, 0x1, 0x1, 0xffff7fff}, {0x6c9, 0x5, 0x890, 0x5, 0x717, 0x8}, {0x800, 0x9, 0x400, 0x1, 0x8, 0x96}, {0x8, 0x9, 0x8000, 0x69c, 0x3, 0x1}, {0x7, 0x100, 0x1, 0x4, 0x7, 0x3f}, {0x7f, 0x3ff, 0x8886, 0x1, 0x200, 0x7fff}, {0x6, 0x8, 0x75, 0x0, 0x8cb3, 0x7}, {0x80, 0x1136, 0x401, 0x200, 0x5, 0x5}, {0x3ff, 0xffffffff, 0x0, 0x405b, 0xfffffff9, 0x1}, {0x8, 0x7, 0x2fde, 0x1, 0x562f2915, 0x2}, {0xc07f, 0x0, 0xfffffa40, 0x9, 0x3, 0xf0000000}, {0x1f, 0x8, 0x6, 0x7, 0x0, 0x10001}, {0x101, 0x8, 0x0, 0x10001, 0x1, 0x9}, {0x401, 0xc00, 0xc0, 0x8, 0x5, 0xfffff1ea}, {0x7, 0x5, 0x4, 0xfffffe5d, 0x2, 0x5}, {0x6, 0x4, 0x3f, 0x3f, 0x31, 0x1000}, {0x1f, 0x40, 0x0, 0xdf1b, 0xec, 0x6}, {0x1000, 0x7ff, 0x5, 0x9b, 0x2, 0x9}, {0x6, 0x6, 0x80000000, 0x80, 0x9, 0x7f}, {0x0, 0x4, 0x8001, 0xfffffff9, 0x4, 0xff}, {0x10001, 0x3, 0x4596ec40, 0x7050, 0x8, 0x5}, {0x792e74b7, 0x10001, 0x6, 0x2120, 0x1, 0x1361}, {0x8, 0x200, 0x40, 0x4, 0xffffffc0, 0x9}, {0x541, 0x1, 0x7216, 0xfff, 0x100, 0x8}, {0x6, 0x5533, 0x4, 0x7fff, 0xffff, 0x4e355d1c}, {0x9, 0x8, 0x7, 0x200, 0x7, 0x6}, {0x4, 0x3f, 0x0, 0x9, 0xfffff242, 0xffff}, {0x3, 0xffffffe0, 0x7fffffff, 0x7fffffff, 0x101, 0xeec0b71}, {0x2, 0x1, 0x2, 0xfffffff8, 0x7f, 0x71}, {0x6, 0x1f, 0x1, 0x0, 0xff, 0x9}, {0x7, 0x10000, 0x3, 0xff, 0x3, 0x10001}, {0x2, 0x2, 0x80000000, 0xffff0001, 0x1000, 0x6}, {0x4000000, 0x4, 0x8, 0x3, 0xfce, 0x9}, {0x7, 0x5, 0x7ff, 0x7, 0x95a, 0x6}, {0x7, 0x4, 0x0, 0x3, 0x8, 0x200}, {0x4, 0x81, 0x10000, 0x7fffffff, 0x0, 0x8}, {0x880, 0x3, 0x8, 0x7, 0xf0000000, 0x1}, {0x9, 0x4, 0x81, 0x8326, 0x2, 0x2}, {0x9, 0x2, 0xfffffffe, 0x20, 0x8, 0x3}, {0x0, 0x5, 0x4, 0x6, 0xffffffff, 0xff}, {0x200, 0x1, 0x6, 0x8000, 0x400, 0xffffffff}, {0x10000, 0x7fff, 0x9, 0x5, 0x4, 0x9108}, {0x400, 0x1f, 0xfffffffb, 0x5, 0x2, 0x7fff}, {0x0, 0x200, 0x9a7, 0x7, 0x3, 0xfffffff7}, {0xffffff31, 0x9, 0xfffffffb, 0x5, 0x8000, 0x9ac2}, {0x5de, 0x8, 0x7fffffff, 0x9, 0x5, 0x1c000}, {0x4, 0x1, 0x200, 0x4, 0x0, 0x3}, {0x7, 0x8, 0x3, 0x5, 0x1, 0x8}, {0x5, 0x5, 0x0, 0x24bf, 0x2, 0xda}, {0x1f51, 0x8, 0x7, 0x7, 0x1, 0x800}, {0x100, 0xfd, 0x1, 0xf21, 0x9, 0xffffffff}, {0x1, 0xef, 0x22c0, 0x4, 0x1f, 0xffffffc0}, {0x9e2, 0x4, 0x5, 0x0, 0x1ff, 0xff}, {0x6, 0x5, 0x9, 0x10001, 0x1fdf, 0x8001}, {0x5, 0x80000000, 0x4, 0x80, 0xfffffffa, 0x4f}, {0x2, 0xd4f1, 0x1, 0x401, 0x4, 0x9}, {0x4, 0x0, 0x3, 0x7fffffff, 0xf9d3}, {0x5, 0x2, 0x2, 0x1ff, 0xfffffc01, 0xffff}, {0x3, 0x7, 0x3b40, 0x8, 0x2, 0x80}, {0xd4ec, 0x8, 0x7fff, 0x6, 0x48a, 0x7}, {0x3, 0x101, 0x6dc9, 0x2, 0x8, 0x10000}, {0x4, 0x16fc, 0x3ff, 0x1, 0x8000, 0x6}, {0x7, 0x3c15ed0, 0xd179, 0x7, 0x1ff, 0x8001}, {0x661, 0x8, 0x9, 0x3, 0x80000000, 0x8001}, {0x1, 0x4, 0xffff8001, 0x1, 0x7, 0xc9c}, {0xfffffff8, 0x7, 0x2, 0x1, 0x80f, 0x9}, {0x401, 0x2, 0x9, 0x6, 0x9, 0xffff7fff}, {0x5, 0x5, 0x1000, 0x3, 0x2}, {0x6, 0x8, 0xa50d, 0x8, 0x1, 0x5}, {0x10000, 0x2, 0x492d3898, 0xa00, 0x6, 0x8}, {0x81, 0x1f, 0x6bc, 0x2, 0x2, 0x1}, {0x3, 0x7, 0xa4ac16, 0x3f, 0x9}, {0x8, 0x7, 0x18, 0x8000, 0x9, 0x9}, {0x80000001, 0x111, 0x401, 0xfffffffa, 0x80000001, 0x4}, {0x2, 0x4, 0x7fffffff, 0x2, 0x2, 0xc34}, {0x6, 0x8, 0x1ff, 0x7fffffff, 0x400, 0x2f97523b}, {0x0, 0x5, 0x6, 0x80000000, 0x8, 0x4}, {0x0, 0xc46, 0x1, 0x4, 0x9, 0x3}, {0xd0000000, 0x140, 0x2, 0x7, 0x9, 0x100}, {0x5, 0x8, 0xff, 0x8, 0x3ff, 0x3}, {0x1, 0x5, 0x6, 0xfffffff9, 0x100}, {0x1, 0x7ff, 0x7, 0x4, 0x93, 0x400}, {0xffff00, 0xffff7fff, 0x5, 0x100, 0x3, 0x96}, {0x7, 0x2ddc, 0x8, 0x574, 0x9, 0x51}, {0x8, 0x80000000, 0x6, 0x81, 0xc34d, 0x1}, {0x3, 0x4, 0x5, 0x401, 0xffffff81, 0x6}, {0xfffffffb, 0x3f, 0x5, 0x9, 0x0, 0x8}, {0x7, 0x2, 0x6, 0x3, 0x3, 0x1}, {0x1ff, 0x6, 0x2b38, 0xdb7, 0x4, 0x1ff}, {0x2, 0x6, 0x20, 0x1022, 0x4, 0xa0}, {0x7f, 0x80000001, 0x80000000, 0x1, 0x0, 0x81}, {0x1a, 0xc4, 0x8, 0x0, 0x4}, {0x5, 0xee, 0x6, 0x3f, 0x0, 0x5}, {0x7f, 0x8001, 0x5, 0x1, 0x8, 0x1}, {0x2, 0x5, 0x0, 0x8, 0x0, 0x8}, {0x2, 0x200, 0x3, 0x2, 0x6, 0x80000001}, {0xfffffffd, 0x7c8, 0x8, 0xffffffff, 0x1, 0x3}, {0x3ff, 0x6, 0x3, 0x5ac8, 0x7f, 0x2c2}, {0x8, 0x4, 0x80000000, 0x7f, 0x5, 0x6}], [{0x1, 0x1}, {0x1}, {0x669b760bb546cf52, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x3, 0x9ab0bff5777ebe}, {0x87582c58087b279, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0xeff12a18f609a707}, {0x2}, {}, {0x1, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x3}, {0x3}, {0x4}, {0xbd74e31ac89a9873, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x7}, {0x5, 0x1}, {0x1}, {0x4, 0x3dfde65f3a83bf71}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x2}, {}, {0x5}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x3}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xc0, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x83, 0x6, "d6fe0e7c7dca3574c04983e8bfc09c533148fbf53439caab49e28c2efe87fba40c2e2024c4cef20b4674f8e97e52e52007e44f20170fe6f2d39e0842d3645f09476a308b970e3b14b38a5a3c09c36aed01652e72008aeccd83893cf188b2b4c09c9418b4ed59017f17113957b3d6ac7546fb32c93e05a0f083571207fdf88e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x100, 0x1f, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8}, @TCA_CT_ZONE={0x6}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0xbd, 0x6, "335a77db9f24f8ea699e628a5ac5a28306e0a6b3d3244c9862a4bd091dcb6750af8c1c1aae6c17aa82653d225945b118e0175c503d8c3903b93120972a50ae81b8213eb8aa3936051371573d7abf5998329cdd3c78f9b94e715aa99662068b8a662f758adab4680246831d80f6ffe7d38408d89607a4d8dc48ae053918e01205755d442f9377b5e3f424b301c7514472cf55607bf87663e771edcbcd12c08d8e3051bebabd623c676dcddf9a33f079222d58b5d43f57dd9fd7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x168, 0x6, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7fff, 0x2, 0x6, 0x401}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8001, 0x10000000, 0x6, 0x4}, 0x3d02}}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xb}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_POLICE={0x54, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x74f, 0x9, 0x56f8, {0x0, 0x1, 0x2, 0x1, 0x5, 0x5}, {0x1, 0x0, 0x4, 0xa4, 0x1, 0x1}, 0xb, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x50c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x10000000, 0x5, 0xffff, 0x0, {0x9, 0x2, 0x1, 0x9, 0xfffe, 0x6}, {0x0, 0x1, 0x8, 0x8, 0x2, 0x3}, 0xb75, 0x6, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0xffffffffffffffff, 0xfffff79a, 0x5a, 0x401, {0x5, 0x0, 0x1f, 0x2, 0x1}, {0x8, 0x1, 0x80c7, 0x6, 0x7, 0x2}, 0x9afa, 0x9, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffeff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x9, 0x48, 0x4, {0x6, 0x2, 0x7, 0x7f, 0x81}, {0xff, 0x2, 0x9, 0x4, 0xba1, 0x6}, 0x0, 0x3f, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x1, 0x80000001, 0x5, 0x2, 0x9, 0x7ff, 0x7, 0x4, 0x6, 0x8, 0x7, 0x27, 0xfff, 0x0, 0x37c, 0x2, 0x1, 0xfffffff9, 0xd0, 0xca, 0xffffff7f, 0x101, 0xfffffc01, 0x9, 0x20, 0x2, 0x8, 0x9, 0x3, 0x3, 0x7, 0x7, 0x7, 0x7ff, 0x7a2a, 0x401, 0x2, 0x7, 0x3ff, 0x5, 0x7344, 0x7247, 0x80000001, 0xc5, 0x8, 0xb3, 0xfffff801, 0x3dde, 0x1, 0x59e, 0x1, 0x2, 0x6, 0x3f, 0x6, 0x0, 0x1, 0x81, 0x0, 0xffff, 0x3, 0xde, 0x8, 0x4, 0x7fff, 0x2, 0x10001, 0x7, 0x5, 0x9fa9, 0x9, 0x6, 0x9, 0x5, 0x3, 0x7, 0x1000, 0x3, 0x200, 0x2, 0x1000, 0xfffffff9, 0x6, 0x1, 0x9, 0x124, 0x7, 0x2, 0x0, 0x5, 0x6, 0x42d1, 0x6, 0x5, 0x7fffffff, 0x1, 0x8000, 0x0, 0x7, 0x8, 0x0, 0x7, 0x84, 0x8, 0x0, 0x9, 0x3, 0x8, 0x7, 0x6, 0xffffffff, 0xffff, 0x4889, 0xef26, 0x7, 0x7, 0x9, 0x6, 0x448, 0x37, 0xe000000, 0x10001, 0xf777, 0x8, 0x1ab, 0x9, 0x3, 0x101, 0x9, 0x8, 0x1, 0x7, 0x5, 0xffff8d71, 0x7, 0x7ff, 0x0, 0x444, 0x80, 0x7, 0x427, 0x200, 0x101, 0x7fff, 0x0, 0xffffffff, 0x2, 0x400, 0x60, 0xc, 0x1, 0x7f, 0x400, 0x1, 0x7, 0x69d3, 0x7ff, 0xc75, 0x0, 0x9, 0x4, 0x8, 0x88e, 0x8, 0x40, 0x2, 0x10000, 0x6, 0x0, 0x6, 0x0, 0xe3, 0x1974, 0x1, 0x5, 0x3, 0xfffffe01, 0x4, 0x5, 0x9, 0x1, 0xffff, 0x35b, 0x5, 0x3ff, 0x100, 0x2, 0x7fffffff, 0x5, 0x4, 0x0, 0x82, 0x4, 0x1000, 0x1f, 0xfff, 0x80000001, 0x5f, 0x3, 0xffffffff, 0x9623, 0x1, 0x4bf7, 0x80, 0x400, 0x80000001, 0x288c0e96, 0x0, 0x4, 0x63f3, 0xffffffff, 0x7ff, 0x5, 0x7, 0x1ff, 0x1000, 0x3, 0x101, 0x78764ef6, 0x1f, 0x200, 0x9a1c, 0x9, 0x8582, 0xffffffff, 0x8, 0x5, 0x8, 0x3, 0x4, 0xfffffffc, 0x9, 0x1, 0x67f, 0x0, 0x9, 0x6, 0x9, 0x4, 0x3, 0xfff, 0x0, 0x6, 0x62, 0x81, 0x8000, 0x1000, 0x89, 0x3, 0x9, 0x6, 0x8001, 0xb7873d83, 0x3, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x8, 0x0, 0x101, {0x58, 0x0, 0xe4, 0xa8, 0x7ff, 0xf4}, {0x9, 0x2, 0x7, 0x3, 0x1000, 0x3}, 0x101, 0x5, 0x5}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x4e30}, 0x1, 0x0, 0x0, 0x10}, 0x20000820) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000051c0)={r0, 0x7fffffffffffffff, 0x5, 0xd6}) (async) r8 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r9 = syz_open_dev$dri(&(0x7f0000000000), 0xb5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000500), 0x0, 0x1, 0x0, 0x0, r10}) (async) r12 = syz_open_dev$dri(&(0x7f0000000000), 0xb5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01864ba, &(0x7f0000000100)={0x3, r11, r13}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000005240)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000005280)={&(0x7f0000005200)=[0x0, r13], 0x2, r14, 0x0, 0x1, 0x4, 0x7f, 0x10001, {0x40, 0x3d9f, 0x7, 0x3, 0xff35, 0x7, 0x40, 0x2, 0x100, 0x6, 0xfff7, 0x2, 0x7, 0x9, "e0317455c9a8e3442dd7c075e42f331da80d6e5722aaced970174793be712c3f"}}) (async) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304, 0x37}, "00000100", "6a1d45a8ef8ee704328c671d000000f6", "94a92000", "920b00652000"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) (async) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r15, &(0x7f0000000800)=ANY=[], 0x208e24b) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f00000050c0)=""/159, &(0x7f0000005180)=0x9f) (async) sendfile(r6, r15, 0x0, 0x20256) 18:28:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xe, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:23 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=@newlink={0x74, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xd2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IGNORE_DF={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x74}}, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x285c20}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=@delchain={0x4e30, 0x65, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0xb}, {0xfffa, 0x68447392e397fefd}, {0xf, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_rsvp={{0x9}, {0x86c, 0x2, [@TCA_RSVP_POLICE={0x858, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x6, 0x1ff, 0x81, 0x80000000, {0x80, 0x2, 0x3, 0x5d95, 0x5, 0x7f}, {0x1, 0x2, 0x8, 0x20, 0x3, 0x8}, 0x4, 0x9, 0x20}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x200}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x5, 0x8, 0x5, 0x8, 0x8, 0x5, 0x5, 0x400, 0x6, 0xfffffffb, 0x7f, 0xfffffa9a, 0xf0d0, 0x2eaf, 0x4, 0x3, 0x5, 0xffffffff, 0xffff, 0x9, 0x9, 0x1, 0xff, 0x50, 0xb6, 0x4, 0x2, 0x7fffffff, 0x1ff, 0x0, 0x9, 0x1, 0x6, 0xffff, 0x3, 0x2d5, 0x0, 0xa7b, 0x6b, 0xfff, 0x0, 0x3, 0x7fffffff, 0xad4, 0x8, 0x7, 0x800, 0xfffffa09, 0x1, 0x2, 0x192, 0x7fff, 0x0, 0x1, 0x1, 0x6, 0x7ff, 0x4, 0x9, 0x1, 0x2, 0xff, 0x401, 0x7a4, 0x7fff, 0x2, 0x5, 0xfffffff8, 0x6, 0x7fffffff, 0x2, 0xffffffff, 0x9, 0x8, 0x0, 0x1ff, 0x0, 0x80, 0x4, 0x7, 0x1fe00, 0x5, 0x100, 0x3, 0x7ff, 0x100, 0x6, 0xbb7, 0x2, 0x40b, 0x4, 0x10001, 0x6, 0x80000000, 0x101, 0xa44d, 0x5e, 0xc20, 0xd336, 0xfffff800, 0xffff, 0x9, 0xff6, 0x7, 0x80000000, 0x1f, 0x8, 0x3, 0x7ff, 0x517d, 0x8000, 0x3ff, 0x40, 0x1000, 0x3, 0x1, 0x2, 0xffffffff, 0x9, 0x1, 0xffffffff, 0x6, 0x6, 0x1, 0x9, 0x9, 0x5, 0x7fffffff, 0x81, 0x0, 0x200, 0x3, 0x8, 0xd80b, 0x800, 0x3f, 0x7, 0x0, 0x3, 0x4, 0x0, 0x7, 0x6f, 0x1f6d, 0x101, 0xc47d, 0x2, 0x1f64, 0x4, 0xff, 0x7, 0x4, 0x32, 0xfffff739, 0x0, 0x3, 0x80, 0x6, 0xfff, 0x100, 0x7ff, 0x60000, 0x0, 0x6, 0x1000, 0x4, 0x8, 0x3, 0x7f, 0x25, 0x0, 0x4, 0x100, 0x80, 0xbda6, 0x7fffffff, 0x3f, 0x1, 0x800, 0x81, 0x0, 0x9, 0x5, 0x7f, 0x3ff, 0x9, 0x4, 0xffffffff, 0x5, 0x2, 0x100, 0x10001, 0x6fc1, 0x10001, 0x5, 0x9a25, 0x9, 0x0, 0x0, 0x6, 0xfffffff8, 0x3f, 0x80000000, 0x5, 0x5, 0x1c99, 0xfffffffd, 0x5, 0x1ff, 0x7ff, 0x4, 0xfffffa87, 0x0, 0x8, 0x3f, 0x7fffffff, 0x4, 0x3ff, 0x6d, 0x10000, 0x7, 0x7f, 0x4, 0x6, 0x1, 0x8001, 0xffff, 0x0, 0x1, 0x40, 0x55, 0x7, 0x7, 0x2, 0x2, 0x80000000, 0x7d3, 0x7ff, 0xfffffffe, 0xfffffffe, 0xfffffffb, 0x7fffffff, 0x7, 0x9, 0x9, 0x1, 0x7, 0x4, 0xdef, 0x0, 0x80, 0x8, 0x0, 0x17, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2b, 0xb74, 0x8, 0x0, 0xbd, 0x3, 0xc6, 0x1, 0xea, 0x8000, 0x8, 0x5, 0x81, 0x2, 0x12d, 0x6, 0x8, 0x8001, 0xf09, 0x1, 0x100, 0x85, 0x2, 0x782, 0xffff, 0x8e, 0x4, 0x100, 0x3, 0x0, 0xaa54, 0xffff, 0x9, 0xffffffe0, 0x7, 0x7, 0x9, 0x10000, 0x3, 0xffffffff, 0x60, 0x1, 0x1, 0x0, 0x37e, 0x1, 0x0, 0x7fff, 0x2, 0x1, 0x80, 0xfffffffe, 0xc05, 0x9, 0x80000001, 0xe82, 0x9, 0x19b5, 0x8000, 0x9de, 0x9, 0xfffffffe, 0x2, 0xb73, 0x1, 0x4, 0x9, 0x400, 0x3, 0x8, 0x7fffffff, 0x3, 0x16, 0x40, 0x4, 0x3, 0x6, 0x81, 0x101, 0x7fff, 0x9, 0xce, 0xfffffe01, 0x3, 0x8001, 0x0, 0x5, 0x9, 0x80000001, 0xfff, 0x5, 0x80000000, 0x9, 0x6d, 0x6, 0x1, 0x7, 0x6, 0x7, 0x0, 0x8001, 0x6, 0x4, 0x20, 0xd667, 0xffff7690, 0x4, 0x3, 0x8, 0x8, 0x20d1, 0x3, 0x7ff, 0x9, 0xfff, 0x5, 0x81, 0x100, 0x1d37, 0x1, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x1f, 0x3, 0x7bab, 0x1, 0x0, 0x4, 0x0, 0x7f, 0x8, 0x400, 0x0, 0x3, 0x76c2f1ff, 0x5, 0x2, 0x5fab, 0x5, 0x3, 0xe58, 0x7fffffff, 0x9, 0xa01, 0xffffffff, 0x0, 0x800, 0x400, 0x0, 0x3, 0x4, 0x2, 0x510, 0x3, 0x7, 0x3, 0x2, 0x7, 0x3, 0x8, 0x2, 0x20, 0x4, 0x6, 0x7ff, 0x9, 0x81, 0x2, 0x8, 0x0, 0x7, 0x3, 0x2, 0x1, 0xfffffffe, 0x2, 0x2, 0x7fffffff, 0xfffffffa, 0x3c, 0x1, 0x200, 0xfff, 0x5, 0x4, 0x5, 0x2, 0x8, 0x4, 0x2, 0x12, 0x80000000, 0x2, 0x9, 0x5, 0x8, 0xc6e0000, 0x8, 0x200, 0x80000000, 0xfffffff7, 0x101, 0x333a9a9d, 0x5, 0x4, 0x3, 0x69de, 0x0, 0x18, 0xffffff95, 0x7, 0x80000001, 0x2, 0x80000001, 0xfffffffc, 0x7fff, 0x5, 0x6, 0x8, 0x8, 0xafbb, 0x473, 0x4, 0x168, 0xfff, 0x0, 0x10000, 0x50, 0x2, 0x8, 0xb3, 0x5, 0x52, 0x1, 0x0, 0x9b81, 0x8d6b, 0x80, 0x80000001, 0x5, 0x5, 0xa464, 0xffffffff, 0x0, 0x6, 0x2, 0xdfa3, 0x7, 0x4, 0x3492, 0x5, 0x8000, 0x1]}]}, @TCA_RSVP_SRC={0x8, 0x3, @private=0xa010101}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x457c, 0x2, [@TCA_BPF_ACT={0x3fec, 0x1, [@m_bpf={0xf8, 0xa, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x4, 0x7f, 0x1, 0x9}, {0x9, 0x8, 0x40, 0x6}, {0x7, 0x8, 0x40, 0x401}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x101, 0x9, 0x81, 0x2}, {0x9b, 0x3, 0x2, 0x1}]}]}, {0x8b, 0x6, "399bcd87c27a335e047d32a4aa40b4651afbe925c6407aa2f75af5eba0c514b5973e78ba6de400c6c9122b515bc7b2e390c8e9ff74d6830256a28a3da82634fa1b48c98c3bfde706731dcaf7e5f196d2d6758cf93d476404d28dc312aa0b8ab7b5fe9b2d3c0ebec3d7095cd77bbc51646c4b03c618e467690da804f36c3ccb6f8b68414fa9ef84"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x3c88, 0x4, 0x0, 0x0, {{0xa}, {0x3bdc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x3, 0x401, 0x1, 0x68a, 0xfffffffa}, 0x1, 0x0, [{0x8, 0x80000000, 0xc4a, 0x3, 0x9, 0x1000}, {0x5c0, 0x20, 0x5, 0x40, 0x1, 0x6f79}, {0x2, 0x7, 0x4, 0x6096, 0x6f2, 0x5}, {0x6, 0xffffffff, 0x10001, 0x5, 0x2, 0x7}, {0x1, 0x2, 0x4, 0x0, 0x2, 0x7fff}, {0x5, 0x0, 0x7, 0xfffffe01, 0x1f, 0x1000}, {0x2, 0x1c2973e1, 0x80000001, 0xcc0b, 0xffffff81, 0x7ff}]}, [{0x5, 0x2, 0x101, 0xff, 0x1, 0x7}, {0x2, 0xfffffbff, 0x0, 0x7fff, 0x8001, 0x80000000}, {0xb5fc, 0x9b78, 0xfffffbff, 0x8, 0x9}, {0x32, 0x7ff, 0xf2d, 0xfffffff8, 0xd10, 0x3}, {0xca95, 0x1, 0x3, 0x3ff, 0x0, 0x1000}, {0x10001, 0xc19, 0x5, 0x7fffffff, 0x8}, {0x80000001, 0x5, 0x9, 0x6, 0x40, 0x3}, {0x7c8, 0x3ff, 0x7, 0x3, 0x0, 0x2}, {0x7, 0x0, 0x5, 0x9, 0x8000, 0x7}, {0x7, 0x100, 0x1, 0x6, 0x401, 0x3}, {0x1, 0xff, 0x7, 0x6, 0x9, 0x40}, {0x559, 0x6, 0x800, 0x4, 0x2f, 0x1000}, {0x2, 0x100, 0x1, 0x6, 0x40, 0xaea}, {0xffffff88, 0xffffffff, 0x1, 0x2, 0x20000000, 0xdae6}, {0x80000001, 0x100, 0x62, 0x6, 0x9, 0x5}, {0x5, 0x401, 0x80, 0x3, 0x3, 0x4}, {0x1, 0x2, 0x7, 0x8, 0xfffffffe, 0x1}, {0xffffff6f, 0xffffffff, 0x800, 0x20, 0x6a, 0x9}, {0x6, 0x9, 0x6, 0x8183, 0x9, 0x2}, {0x5, 0x7, 0x8, 0x46, 0x80, 0x140}, {0xe91, 0x4f, 0x200, 0x8, 0xbc, 0x5}, {0x5, 0x0, 0x2, 0x8, 0x3, 0x610f}, {0xffffffff, 0x2, 0x4, 0xffff7fff, 0x101, 0x9}, {0x6, 0x1, 0x38000000, 0x80000001, 0x9}, {0x0, 0x8, 0x5, 0x7, 0xfffff800, 0x1ff}, {0x5, 0x1ff, 0x9, 0x8, 0xffffffff, 0x10000}, {0x800, 0x7, 0x3f, 0xa54, 0x7f, 0x8}, {0x1, 0x2, 0xd1f, 0x4, 0x1f, 0x9ac2}, {0x9, 0x3f, 0x4, 0x7e, 0x78b2, 0x1}, {0x20, 0x80, 0x5, 0xfc9, 0x7ff, 0x3}, {0x1a0d00, 0x81, 0x8, 0xf7, 0x7fff, 0x94}, {0x5, 0x5, 0xb295, 0x3a, 0x3, 0x1ff}, {0x200, 0xffffff77, 0x6, 0x4, 0x8001, 0xffffffff}, {0x1, 0xffff2773, 0x0, 0x3ff, 0xffffff45, 0x7}, {0xfcd3, 0x40, 0x1, 0x1, 0x8, 0x4}, {0x9, 0x3f, 0x99d1, 0x6, 0x1, 0x7}, {0x3f, 0x6, 0xe8f3, 0x3, 0x8, 0x35f}, {0xb6b7, 0x7, 0x3, 0x7ff, 0x4}, {0x58c, 0x5, 0x4, 0x758, 0xfffff800, 0x2}, {0x5, 0x63b, 0x0, 0xfffffff7, 0xe3b7, 0x3}, {0x7, 0x5, 0x8, 0x5, 0x81, 0x1000}, {0x9, 0x4, 0x6, 0x52, 0x5, 0x20}, {0x0, 0x5, 0x100, 0xcbee, 0x6, 0x3}, {0x5ba0, 0x2, 0x2, 0x2, 0x401, 0x1}, {0x4, 0xff, 0x10000, 0x1, 0x0, 0x8}, {0x5, 0x84, 0x7, 0x5635, 0x80, 0x401}, {0x6, 0x800, 0x2, 0x6, 0x3f, 0x8000}, {0x453f, 0xfffffeff, 0x40, 0x2, 0x7fff, 0xfa1}, {0x0, 0x9adf989, 0xfffffffa, 0xffffffff, 0x8, 0x963}, {0x4, 0x7fffffff, 0xefa, 0x1, 0x1}, {0x100, 0xffffffff, 0x80000001, 0x4, 0x1}, {0x7, 0x5, 0x100, 0x2, 0xa2, 0x5}, {0xfffffffb, 0xffff7fff, 0xfffffffa, 0x2, 0x1, 0x101}, {0x2, 0x1000, 0x7, 0x3, 0x9, 0x9}, {0x80000000, 0x4, 0x8, 0x0, 0x800, 0x8}, {0x10000, 0x4, 0x9, 0x1, 0x7, 0x6}, {0x10, 0x4, 0x1, 0x7ff, 0x8000, 0x4}, {0x1, 0x80000001, 0x8, 0x7, 0x6, 0x6ed}, {0x5, 0xfffffeff, 0xeb8, 0xc3, 0x8000, 0xffff}, {0x6, 0x5, 0xae, 0x3, 0x8, 0x5}, {0x5, 0x2, 0x9, 0xffffffc1, 0x80000000, 0x1}, {0x4, 0x6, 0x8a4c, 0x3, 0x6, 0x6}, {0x0, 0x1, 0x800, 0xfffffff9, 0x8, 0x7}, {0x1, 0x7fff, 0x2, 0x80000000, 0x3, 0x8001}, {0x5, 0x44, 0x80000000, 0x8, 0x3, 0x8}, {0x2, 0x8000, 0x2, 0x80, 0xbcfd, 0x1}, {0x5, 0x1, 0x3, 0x6a, 0xfffffffb, 0x8}, {0xaa, 0x7, 0x7f, 0x100, 0x80, 0xfffffff8}, {0x6, 0x7fffffff, 0x3f, 0xfffffeff, 0x6, 0xfff}, {0x5, 0xfffffff8, 0x8, 0x3b, 0x7, 0x6}, {0x9, 0x8, 0x5, 0x5, 0x8, 0x4}, {0x0, 0x1336, 0x44, 0x6, 0xc7c, 0x9}, {0xcca, 0x5b26, 0xff, 0x4, 0x0, 0x7}, {0x7f, 0x97, 0x0, 0x100, 0x6b, 0x4}, {0x9, 0xfff, 0x5, 0xff, 0x6b, 0x81}, {0x4, 0x1ff, 0x100, 0xffffffff, 0x5cac}, {0x3, 0x1, 0x20, 0x1, 0x0, 0x9}, {0x2, 0x1f, 0x1, 0x2, 0x1f, 0xf87a}, {0x100, 0x1ff, 0xbec, 0x1, 0x2, 0x1}, {0xff, 0x4, 0x0, 0x6, 0x9, 0x80}, {0x8, 0x3, 0x7, 0x4, 0x44d, 0x975}, {0xffffffff, 0x2d6, 0x4, 0x81, 0x7fffffff, 0x3}, {0x5, 0x1, 0x8, 0x7c42, 0x9, 0x65fd}, {0x1f, 0x8, 0x0, 0x48, 0x7, 0x200}, {0xff, 0xa628, 0xb03, 0x2, 0xb6, 0x401}, {0x1, 0x20, 0x0, 0x1ff, 0x5, 0x865}, {0x101, 0x7, 0x8, 0x80000001, 0x101, 0xffff}, {0x2, 0x7, 0x83a5, 0x1, 0x2, 0x1}, {0xab18, 0x5, 0xecef, 0xfffffff7, 0x3}, {0x1, 0x7, 0x8, 0x400, 0x5, 0xc7ac}, {0x800, 0x4, 0x6, 0x1, 0x1, 0x1}, {0x0, 0xc7, 0x3, 0x4, 0x8, 0x9b6}, {0x40, 0x4c, 0x80, 0x80000001, 0x9, 0x2}, {0x3, 0x9, 0x7, 0x8, 0xfffffff9, 0x1ff}, {0xfffffff9, 0x1f, 0x3ff, 0x5, 0xbd, 0xfff}, {0x5, 0x100, 0x9, 0xf6, 0x7, 0x1}, {0x7, 0x6, 0xfff, 0x2, 0x80000000, 0x2}, {0x7ff, 0x1, 0xffffff81, 0xe7e7, 0x8, 0x1}, {0x0, 0x7, 0x0, 0xff, 0x1, 0x20}, {0x6, 0x0, 0x4d3, 0x2, 0x7f, 0x9}, {0x6000000, 0x7, 0xf10, 0x0, 0x1, 0x1}, {0x3, 0x5, 0xfffffff9, 0x3, 0x80000001, 0x200}, {0x7f, 0x0, 0x5, 0x800, 0x4730010f, 0xa20a}, {0x0, 0x8, 0x4, 0x6, 0x4, 0x90}, {0x5, 0x1, 0x5, 0x10000, 0xffffffff, 0xfffffffe}, {0x8, 0x6, 0x5, 0x0, 0x800, 0x80}, {0x6, 0x6, 0x5, 0x3, 0x4f, 0x1}, {0x100, 0x8, 0x4, 0x7, 0x2, 0x4}, {0xff, 0x6, 0x1f, 0x4, 0x40c, 0x8}, {0x0, 0x9, 0x100, 0x0, 0x7}, {0x2, 0x1, 0x1, 0x0, 0x81, 0x20}, {0x5, 0x7fff, 0x401, 0x0, 0x0, 0x12c}, {0x4, 0x6, 0x7f, 0x5, 0x7, 0x5}, {0xa9, 0x8, 0x367f, 0xc7, 0x200, 0x7fffffff}, {0xbc, 0x5, 0x400, 0x8, 0x7, 0x3}, {0x2, 0x8, 0x1855, 0x9e, 0x3, 0x3}, {0x0, 0x40, 0x6, 0x20, 0xca4, 0x3f}, {0x0, 0x4, 0x8, 0x4, 0x8000000, 0x3}, {0x7, 0x2, 0xfffffffe, 0x8, 0x10001, 0x9a23}, {0x9, 0xa000, 0x800, 0x9, 0x3}, {0x2, 0x5, 0x100, 0x6, 0x7, 0x8ef2}, {0x1, 0x9, 0xf0b, 0x480, 0x9, 0x3}, {0x401, 0xde3, 0x0, 0x9, 0x5, 0xfff}, {0x1, 0x7, 0x0, 0x2f2, 0x7ff, 0x4}, {0x8305, 0x2, 0x7fff, 0x80, 0xecb, 0x3}, {0x1395, 0xffffffff, 0xfff, 0x2, 0x8, 0x6}, {0x7, 0x4, 0x63c1, 0x401, 0x101, 0xd935}, {0xa0e5, 0x3, 0x8, 0x6, 0x7, 0x4}], [{0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x3, 0x3}, {0x3}, {0x4, 0x1}, {0x3, 0x7bbb9ca65b539a63}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {}, {0x2}, {0x5}, {0x3, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x609ed249d9a0f209}, {0x2, 0x1}, {0x5}, {0x1}, {0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x4}, {0x5}, {0x3}, {0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x2}, {0x3}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0xf1a0fc72e3bab290}, {0x2}, {0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x77845d5fd611bb6b}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x6}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x2, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x7fff, 0x3, 0x8, 0x41df, 0x8}, 0x8, 0xf2, [{0x63883ab7, 0x1, 0x58f6, 0x7, 0x3f, 0x80000001}, {0xfff, 0x9, 0x2d, 0x81, 0x2, 0x4}, {0x3, 0x80, 0x1, 0xfffffffd, 0xa81, 0x40}, {0x6, 0x1, 0x400, 0x2e, 0x0, 0x9}, {0x2d88, 0x2, 0x4, 0xe345, 0x7fff, 0x6}]}, [{0x7, 0x8, 0x1ff, 0x9e89, 0x8, 0x1c}, {0x6, 0x71c, 0x6, 0x7, 0x7fff, 0xed0}, {0x2, 0x9, 0x4, 0x9}, {0x101, 0x9, 0x1f, 0x4, 0x8, 0xff}, {0x4, 0x7, 0x101, 0xf02, 0x8, 0x7}, {0x4, 0x1, 0xff, 0x14000, 0x2f6, 0x9}, {0x81, 0x7, 0x8, 0x1000000, 0xd056, 0x7fffffff}, {0x8e9, 0x6, 0x7, 0x9, 0x7, 0xba92}, {0x0, 0x6, 0xfffffffa, 0x0, 0x3, 0x7f}, {0x401, 0x7fff, 0xfffffff9, 0x9, 0xdc6, 0x3e2fdd4e}, {0x2, 0x4, 0x2, 0xc3, 0x0, 0x101}, {0x6, 0xdcb, 0x81, 0x400, 0x1, 0x200}, {0xa18, 0x0, 0x8, 0x0, 0x7fffffff, 0x6}, {0x7ff, 0x5, 0x6, 0x2, 0x4, 0xad}, {0x3, 0x7fff, 0x0, 0x9, 0x1f, 0xcc1}, {0x3ff, 0x7da, 0x9, 0x10001, 0x40, 0x2}, {0x0, 0x775, 0x1000, 0xb91f, 0x6, 0x4}, {0x2, 0x4000, 0x1ff, 0xd60f, 0x2, 0x756}, {0xa5c, 0xdc, 0x2, 0x2, 0x1, 0x6}, {0x9, 0xfffff800, 0x401, 0x2, 0x9, 0x80000001}, {0xe3, 0x6, 0xca05, 0x1, 0xf1, 0x80000000}, {0x927, 0x6, 0xe23, 0xb7, 0x401}, {0x8, 0x7, 0x1, 0xffffbfca, 0x9, 0x9}, {0x2438, 0xfffffffa, 0x3, 0xa8, 0x9, 0x8}, {0x6, 0x4542, 0x5, 0x401, 0x8}, {0x9, 0x6, 0x0, 0x6ba1, 0x4, 0xffffffff}, {0x1, 0x7, 0x6, 0x5, 0x4, 0x8}, {0x9, 0xef, 0x2609, 0x4, 0xf79, 0x2}, {0x9, 0x100, 0x3, 0x3f, 0x6, 0x1}, {0x200, 0x40, 0x2d2000, 0x456, 0x2, 0x7}, {0x81, 0x6, 0x7f, 0xf473, 0x9, 0x2}, {0x6, 0x0, 0x7f, 0x8000, 0x81b, 0x7}, {0x1, 0x101, 0x40, 0x5, 0x0, 0x551d6e41}, {0x0, 0x0, 0x6, 0xc4, 0x1000, 0x6abd117b}, {0xffffffff, 0x22, 0x1f, 0x1, 0x1, 0x9ac}, {0x927, 0x6, 0xfffff000, 0x6, 0x3ff}, {0x6, 0x69c, 0x101, 0x3, 0x6, 0x8}, {0x8000, 0xffffffff, 0x8000, 0x10001, 0x8001, 0x29fc}, {0x6, 0xfff, 0x7fffffff, 0x3, 0x6, 0x1}, {0x2, 0x80, 0xef, 0x8, 0x4, 0x200}, {0x5, 0x682, 0x7, 0x6, 0x8000, 0x1f}, {0x800, 0x1b7, 0x4, 0x7, 0x1000, 0x4}, {0xe, 0x0, 0x8, 0x100, 0x3d}, {0x8, 0x5, 0x8, 0x20, 0x401, 0x8001}, {0xffffff00, 0xffffffff, 0xff00000, 0x4, 0x6, 0x5}, {0x5, 0x9, 0x4, 0x0, 0xff, 0x101}, {0x1000, 0x40, 0x9, 0xffffffff, 0x7fff, 0x7fffffff}, {0x8, 0x6, 0x400, 0x1, 0x3, 0x8}, {0x5, 0x101, 0x3, 0x8001, 0x7, 0x1}, {0x7, 0x1, 0x401, 0x2, 0x9b, 0x6}, {0x8, 0x3, 0x3, 0x5, 0x0, 0x3d95}, {0x40, 0x2, 0x4, 0x4d27, 0x7f, 0x3f}, {0x400, 0x2, 0x1ff, 0xed0, 0x8d7c, 0x7ff}, {0x1, 0x0, 0x2, 0x6, 0x0, 0x633d}, {0x59d, 0x40, 0x7fffffff, 0x8000, 0x4, 0x8000}, {0x4, 0x5, 0x8, 0x8, 0x10000}, {0x7f, 0xfff, 0x0, 0x3ff, 0x1, 0x7ff}, {0x6, 0x3, 0x10001, 0x3f, 0x9be}, {0x6, 0x0, 0x80000000, 0xffffffff, 0x2, 0x8}, {0x2, 0xdc61, 0x7, 0x8, 0x6, 0x1}, {0x8, 0x7f, 0x2, 0x4, 0xff, 0x3}, {0xfffff800, 0xffff7fff, 0xa66, 0x5, 0x8, 0x2}, {0x7, 0x80000000, 0x8001, 0x20, 0x40, 0x5}, {0x6, 0x9, 0xfff, 0x2, 0x228, 0x9}, {0x6, 0x3, 0x7f, 0x7f, 0x0, 0x7}, {0x1000, 0x5, 0xb38, 0x8000, 0xff, 0x177e}, {0x657, 0x6, 0x400, 0x8000, 0x10000}, {0x4, 0x3ff, 0x654e, 0xb9e9, 0x100, 0x40}, {0x1ff, 0x3c4, 0x10000, 0x7fff, 0x3, 0x1c000000}, {0x9, 0x7, 0x0, 0x3, 0x5, 0x7fff}, {0x5, 0x20, 0x9, 0x80000001, 0x7, 0x7}, {0x8000, 0x200, 0x4, 0x81, 0x4, 0x6}, {0xfff, 0x54, 0x92, 0x1f, 0x1f, 0xa7bb}, {0x8, 0x3379, 0x3, 0x5, 0x35, 0x81}, {0x8, 0x8, 0x8, 0x20, 0x7fffffff, 0xffff8000}, {0x11d, 0x5, 0x7b, 0xdb, 0xabc, 0x51c0}, {0x1, 0x8, 0x5, 0x4, 0xd2, 0x80000001}, {0x0, 0x93, 0x0, 0x1, 0x401, 0xee}, {0x9, 0x7fff, 0x200, 0x5, 0xb2}, {0x800, 0x2, 0xffffffff, 0xd84, 0x4}, {0xfe7f, 0x6a, 0x7826, 0xcdd, 0x7, 0x5}, {0xb4, 0x6, 0x7, 0x1, 0x6, 0x8}, {0x40, 0x564, 0x6, 0x7fffffff, 0x10001, 0x9}, {0x4, 0x8, 0x4, 0x4, 0x0, 0x1ff}, {0x9a, 0x9, 0x401, 0x6, 0x5, 0x4}, {0x3cf, 0x1b, 0x2, 0x1f, 0x9, 0x3f}, {0x0, 0x3, 0x0, 0x3, 0x6b, 0x40000000}, {0x2, 0x4, 0xffffffff, 0x2, 0x8}, {0x0, 0x8, 0x7, 0x6, 0x0, 0x101}, {0x9, 0x0, 0x0, 0x7, 0x3, 0xfffffe00}, {0x7f, 0x800, 0x8, 0x9, 0xab, 0x4}, {0xb301, 0x1d3, 0x9, 0xb6, 0x6, 0x7ff}, {0x1, 0x2, 0x200, 0x1, 0x80, 0x3e}, {0x7fff, 0xa75, 0x6, 0x7fff, 0x4, 0x70ba5e87}, {0x2, 0x7fffffff, 0x10001, 0x7fffffff, 0xffffffff, 0x3ff}, {0x8, 0x8001, 0x22, 0x5, 0x0, 0xf565}, {0xdbc8, 0xa075, 0x0, 0x20, 0x1, 0x3}, {0x60bd, 0x8, 0x8, 0x3, 0x9, 0x3}, {0x20, 0x0, 0x5, 0x7, 0x8, 0x80}, {0x6, 0x2, 0x0, 0x101, 0xffffffff, 0x8000}, {0x3, 0x7a39ab5c, 0x1, 0x9, 0x7, 0x101}, {0x6, 0xffffffff, 0x7fffffff, 0x1, 0x2, 0x4}, {0x7, 0x80000001, 0x800, 0x4, 0x3, 0x9}, {0x5, 0x0, 0x3, 0x83, 0x0, 0x4}, {0x1, 0x95f, 0x81, 0x7fffffff, 0x61, 0xa2a}, {0x5, 0x4, 0x7fff, 0x9, 0x25b}, {0x7ff, 0xffff35bc, 0x8, 0x4, 0x80000001, 0xb0a}, {0x1000, 0xffff, 0x800, 0x7, 0x200, 0xfffffff9}, {0xc4b0, 0xfffffff9, 0x7, 0x54a, 0x0, 0x2d}, {0x8, 0x0, 0x4, 0x9, 0x10000, 0x9}, {0x800, 0x1, 0x4, 0xfffffff7, 0x800, 0x6}, {0x99b, 0xe8, 0x9, 0x20, 0x6, 0x2400}, {0x1b, 0x2, 0x1ff, 0xd8000000, 0xfffffff8, 0x4}, {0x44e, 0x5, 0x4, 0x7, 0x3, 0x8}, {0x8, 0xfffffee0, 0x8, 0x3, 0x7ff, 0x1ff}, {0x3, 0x9, 0x91, 0x1, 0x8e, 0x4}, {0x401, 0x8, 0x6, 0x1f, 0x0, 0x5}, {0x8, 0x8, 0xfffff001, 0x3ff, 0xfffffe00, 0x5}, {0xa43, 0xfffffffa, 0x9, 0x8001, 0x401}, {0x3, 0xffff, 0xfffffff8, 0x81, 0x1, 0x8}, {0x1, 0x6, 0x7ff, 0x6, 0x100, 0x2}, {0x9, 0xff, 0x1, 0x6cf4, 0x100, 0x9}, {0x3f, 0xffff, 0xc3ef, 0x101, 0x9, 0x7fff}, {0xff, 0x2, 0xfffffffd, 0x8, 0xd971, 0x81e0}, {0x2000, 0x6, 0x3e, 0x8, 0x40000000, 0x81}, {0xffffffff, 0x9, 0x408, 0x7, 0xfffff801, 0xc700000}, {0x577, 0x3, 0x401, 0x8, 0x3}, {0x1, 0x3, 0xdeb, 0x5, 0x0, 0xa7a}], [{0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0xf15c4117bb76e3a2}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1}, {0x5, 0x1}, {0x1}, {}, {}, {0x4}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0xc428317c9ba14895}, {0x4, 0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x3}, {0x1}, {0x4}, {0x2}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {}, {0x4}, {}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4}]}}, @TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x3ff, 0xfffffffd, 0x2, 0x8, 0x6}, 0x38, 0x7, [{0x4, 0x101, 0x3, 0x81, 0x80000000, 0x8}]}, [{0x140, 0x1000, 0x9, 0xf2, 0x9, 0x200}, {0x7ff, 0xa7d7, 0x1, 0xffff, 0x1, 0x5}, {0xbc8e, 0x9fcc9b8, 0x567ed6ea, 0x5, 0x38, 0x3fb}, {0xdf, 0x2, 0x3, 0x8, 0x0, 0x7}, {0xe4, 0x5, 0x6, 0x6cdb, 0x1ff, 0x1}, {0xe3b, 0x23, 0xff, 0x3, 0xb01, 0x7fffffff}, {0x0, 0x2, 0x2, 0x40, 0x1, 0x10001}, {0x7, 0x8, 0xffffffff, 0x0, 0x796, 0x305b800}, {0x9, 0x500, 0x8001, 0x1, 0x8, 0x8}, {0xa2d2, 0x4, 0x7, 0x0, 0x800, 0x4}, {0x1000, 0x400000, 0x3f, 0x9, 0x80}, {0x2, 0x7, 0x6, 0x401, 0xfffffffb, 0xfffffffe}, {0x8, 0x9, 0x6, 0x7, 0x766, 0x3}, {0x949d, 0x4, 0xbc8, 0x4, 0x0, 0x4}, {0xfc000000, 0x7, 0x9, 0x9, 0xfffffffd, 0xffffdc25}, {0x3f, 0x3f6, 0x0, 0x1000, 0x7, 0x4}, {0xa0, 0x80, 0x8, 0x7, 0xfff, 0x8000}, {0xfffffffe, 0x4, 0x1, 0x707, 0x0, 0x7fff}, {0x0, 0x20, 0x401, 0x3, 0x1, 0x80000001}, {0x3, 0x1, 0x5, 0x3, 0x3f, 0x5}, {0x9, 0x1, 0x9c4, 0x5, 0x7, 0x5}, {0x0, 0x3, 0x7, 0x6, 0x5, 0x401}, {0x1, 0xfffeffff, 0x401, 0x3ff, 0x3, 0x200}, {0x2, 0x2, 0x8, 0x57, 0x8, 0x4}, {0x1, 0x9, 0x6, 0x4, 0x96, 0x1000}, {0x2, 0x6, 0x1, 0x9, 0x5, 0xffff7d3a}, {0x4, 0x1, 0x2, 0x3, 0x6, 0x2}, {0x400, 0x7fffffff, 0x8, 0x800, 0xc700, 0x1ff}, {0xe87, 0xb73, 0x4, 0x498, 0x9, 0x7}, {0x0, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x1, 0xffff, 0xc9, 0x8, 0x7d6}, {0x0, 0x1, 0x97d, 0xe2, 0x43, 0x9}, {0x42, 0xff, 0x581, 0x142, 0x2, 0xa6}, {0x90c, 0x41302109, 0x1806, 0x3261, 0x563d}, {0x81, 0x0, 0x8, 0x9, 0x1, 0xffffffff}, {0x538f, 0xfff, 0x3f, 0xfa3, 0x3}, {0x6, 0x8001, 0x1, 0xca89, 0x80000000, 0xecc}, {0x8, 0x5, 0x3ff, 0xc406, 0xf1e, 0x71}, {0x5, 0x101, 0x81, 0x2, 0xf3, 0x100}, {0x1ff, 0x7f, 0x400, 0x87ef, 0x81, 0x7}, {0x4, 0xfffffffa, 0xffffffff, 0x7fffffff, 0x1f, 0x3ff}, {0x1000, 0x3ff, 0xff, 0xffffffff, 0x2, 0x5}, {0x7ff, 0x9, 0x2, 0x1, 0xfffffff7, 0x1f}, {0xffffffff, 0x6, 0x7fff, 0x0, 0x7, 0xfffffe00}, {0x9, 0x500, 0x8, 0x8, 0x9, 0x8}, {0x8001, 0x1, 0x5, 0x5, 0x800100, 0x401}, {0x3, 0x0, 0x4, 0xc9, 0x472, 0x200}, {0x6, 0x9f19, 0xffff2373, 0x30, 0x200, 0x248}, {0x4c8, 0x15a3, 0x7bbc, 0xffffffff, 0x1f}, {0x1, 0x9, 0x100, 0x400, 0x2, 0x3}, {0x0, 0xbcb, 0x80000000, 0x4, 0x8, 0x7fffffff}, {0x8000, 0xd03d, 0x1f, 0xb2, 0x9, 0x9}, {0x21, 0x3, 0x9, 0x3, 0xffffffa3, 0xffffffff}, {0x400, 0x2, 0x1, 0x6, 0xd6, 0x1b}, {0x2, 0x80, 0x5, 0x9, 0x401, 0x80000000}, {0x8, 0x0, 0x99fd, 0x8, 0x7, 0x200}, {0xffffffff, 0x100, 0x1, 0x7, 0x4, 0x3}, {0x9dd, 0x3, 0x9, 0x584, 0x8001, 0x3}, {0x4f3600, 0x3, 0x0, 0x8, 0x4, 0x3}, {0x1, 0x5, 0x80, 0x8, 0x6, 0x3}, {0x4, 0x8f8, 0x0, 0x8, 0x7fffffff, 0x5324}, {0x44, 0x0, 0x7, 0x9, 0x1, 0x4}, {0xa5f, 0x9, 0x14, 0xf4a, 0x7, 0x3}, {0x10001, 0x5, 0x9, 0x3, 0xfffff131, 0x2}, {0x4, 0xfffffffd, 0x5, 0x5, 0x3ff, 0x2411098f}, {0x2, 0x4, 0x5, 0x80, 0x9, 0x8}, {0x1ff, 0x750d014, 0x5d, 0x8000, 0x8000, 0x7f}, {0x966, 0x40, 0x1, 0xfffffe01, 0x40, 0x9}, {0x8, 0x8, 0x9, 0x9, 0xa972, 0x7}, {0x800, 0x4, 0xfffffffb, 0x10000, 0x8001, 0x662}, {0x7, 0x9, 0xc6, 0x2, 0x3, 0x3}, {0x2, 0x6, 0x1, 0x401, 0x9, 0x5}, {0x1ff, 0xfffffffb, 0x8, 0x9, 0xfffffff8, 0x7}, {0x200, 0x2, 0x369d, 0x3, 0x1, 0xf}, {0x4, 0x80000000, 0x3, 0x8001, 0x10000, 0x3}, {0x9, 0x401, 0xa66, 0x4cf, 0x6, 0x1}, {0x1f, 0x6, 0x3f, 0x3, 0x5, 0x44fe3a7e}, {0x9, 0x1, 0x4f39, 0x4cf3, 0x0, 0x6}, {0x3f, 0x60, 0x9, 0x4c, 0x0, 0xffff}, {0x7fffffff, 0x2, 0x800, 0x8, 0x9, 0x10c3}, {0x3f, 0x7, 0x80000000, 0x400, 0xe1, 0x200}, {0x40, 0x6, 0x2, 0xe1ed, 0x20, 0x82d}, {0x1f, 0x664, 0x5, 0x10001, 0x8, 0x400}, {0xb217, 0x8, 0x92, 0x2, 0x9, 0x1}, {0x20, 0x800, 0xfffff598, 0x101, 0x2, 0x7fffffff}, {0x20, 0xf0, 0x5f, 0xfffeffff, 0x3b, 0x2}, {0xa9, 0x40, 0x1023, 0x0, 0x8000, 0xfffffffb}, {0x8, 0x2e5, 0xfff, 0x3, 0x1ff, 0x5}, {0xe26, 0xfac, 0x10001, 0x7, 0x0, 0x5}, {0x8, 0x4, 0x5, 0x7f, 0x9, 0x5}, {0x0, 0x10001, 0x8, 0x24d8, 0xffffffff, 0x6}, {0x0, 0x1000, 0x1ff, 0x401, 0x2c3, 0x7f}, {0x1, 0x7ff, 0x2, 0x55, 0x2, 0x5}, {0xa052, 0x4, 0x7, 0x9, 0x7f, 0xfffffff9}, {0x400, 0x0, 0xfffff172, 0x7, 0x8001, 0x7}, {0x6, 0x286, 0x7, 0x400, 0x8, 0x2}, {0x1, 0x4, 0x0, 0xffffff01, 0x8, 0x80}, {0x7, 0x4, 0x1000, 0x3f, 0x5, 0xd11}, {0x0, 0x0, 0x6, 0x1, 0x7, 0x10001}, {0x938, 0x7, 0x0, 0xfffffbff, 0x6, 0x10}, {0x1, 0x6, 0xff, 0x931e, 0x9, 0x4}, {0x9, 0x9, 0x0, 0x1000, 0x7e6, 0x7}, {0x7, 0x9, 0x9, 0x6, 0x7, 0x81}, {0x9, 0x7f, 0x0, 0x2c1, 0x8, 0xffff}, {0x7ff, 0x9, 0x401, 0xffffffff, 0x8, 0x4}, {0xfffffffe, 0x6, 0x2, 0x7fff, 0x1, 0x1}, {0x7ff, 0x101, 0x22, 0x7f5c, 0x6, 0x351}, {0x6, 0x4, 0x5, 0xfffffa3f, 0x9, 0xffff}, {0xac1, 0x7, 0x5, 0x40, 0xc4b7, 0x7f}, {0xc17, 0x6, 0x0, 0x80, 0x101, 0xe2f}, {0x1ff, 0xa8d, 0x3f, 0x4e, 0x6, 0x1}, {0x9617, 0x0, 0x8, 0x5, 0x3, 0xa8}, {0x401, 0x800, 0x8001, 0x101, 0x3, 0xfffffffb}, {0x0, 0x10001, 0x1, 0xff, 0x5, 0x8}, {0x7, 0x77, 0x6, 0x81, 0x6, 0x14}, {0x101, 0x3ff, 0xc000, 0xef77, 0x1f, 0x9}, {0xc000, 0x80000001, 0x1, 0x0, 0x4, 0x53c}, {0x1, 0x4, 0x2, 0x401, 0x80000000, 0x2}, {0xfff, 0x7, 0x1, 0x3, 0x2, 0x73}, {0x9, 0x3, 0x8, 0x3c, 0x1, 0x5}, {0x80, 0x4, 0x1, 0xfffffffc, 0x6, 0x6}, {0x8000, 0xd2, 0x401, 0x3, 0xb8, 0x1f}, {0x800, 0x0, 0xfff, 0x81, 0x26e2}, {0x0, 0x1f, 0x24a3, 0x5, 0x6, 0x9b}, {0x1, 0x8, 0x80000000, 0x81, 0x0, 0x1}, {0x0, 0x9, 0x4b, 0x7, 0x10001, 0x6}, {0x6, 0x3, 0xb842, 0x2, 0x3, 0x401}, {0xe47, 0x8, 0x247, 0x6, 0xeaa, 0xa6e7}], [{0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {}, {0x2}, {}, {}, {0x3}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x7}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x4}, {0x3, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x3}, {0x4}, {0x1}, {0x0, 0x1}, {0x7}, {0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x97fe6cec49515f98, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x7}, {0x3}, {0x4, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x4}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x4}, {0x6}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0xe8, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x1, 0x3, 0x4, 0x80, 0x7}, 0x7, 0xfe, [{0x4, 0x2, 0x2, 0xbc4, 0x4, 0xe5}, {0x6, 0x6, 0x1, 0x3, 0xfffffeff, 0x1000}, {0x7, 0x0, 0x9e, 0x8000, 0x7fff, 0xffff}, {0x9, 0x7f, 0x1000, 0x0, 0x8001, 0xb080}, {0x8, 0x1, 0xfffffffb, 0x200, 0xc8, 0x200}]}, [{0x81, 0x6, 0x0, 0x9, 0x6, 0xffffffd9}, {0x20, 0xffffffff, 0x3, 0x9, 0x7770, 0x8000}, {0x0, 0x7, 0x5, 0x401, 0x3, 0x6}, {0x7, 0x5, 0x1dc1, 0xed8b, 0x1, 0x2}, {0x7, 0x3ff, 0x20, 0xfffff3c5, 0xfffffc00, 0xe09}, {0x0, 0x1, 0x4, 0x8001, 0x100, 0x4}, {0x7f, 0x138, 0x767, 0xb3, 0x1}, {0x3f, 0x4, 0x5, 0x6, 0x1, 0x80}, {0x5, 0x1ff, 0x2, 0x3, 0x20, 0x8a}, {0x2, 0x6, 0x5, 0x8, 0x7fffffff, 0x9}, {0x9, 0xeaaf, 0x7, 0x1, 0xfffff163, 0x99d}, {0x7fff, 0x400, 0x4, 0x6, 0x6, 0xffffffff}, {0x8, 0x2, 0xfffffffb, 0x4, 0x6, 0x8}, {0xffffffff, 0x8, 0x4, 0x80, 0x20, 0x5}, {0xff, 0xe6a, 0x0, 0x401, 0x1, 0x200}, {0x5c9, 0x9, 0x2, 0x4, 0x16847c88, 0x3}, {0x80000001, 0xf2, 0x101, 0x8001, 0x2, 0x100}, {0x3ff, 0x100, 0x8, 0x1, 0x5}, {0x2, 0x7, 0x3, 0x5, 0xffff18f9, 0x3}, {0x6, 0x9af, 0x0, 0x4, 0x59757803, 0x24000000}, {0x1d3, 0x7, 0x140, 0x7fffffff, 0x1ff, 0x80000001}, {0x4, 0x0, 0x6, 0x4, 0x6, 0x4}, {0x80000001, 0x5, 0x20, 0xffff8000, 0x5, 0x9}, {0x1000, 0x9, 0x1, 0x0, 0xfffffffe, 0x68eb}, {0xff, 0x7fff, 0x1, 0x7, 0x101, 0x6}, {0x200, 0x29b9623, 0x7, 0x9, 0x81, 0xd1f6}, {0xc1, 0x2, 0x8, 0x7, 0x9, 0x9}, {0x5, 0x5, 0x3, 0x7ff, 0x3, 0x2}, {0x5, 0x400, 0x2, 0xc8f, 0x100, 0x9}, {0x3ff, 0x867b, 0x5, 0x1, 0x1, 0xffff7fff}, {0x6c9, 0x5, 0x890, 0x5, 0x717, 0x8}, {0x800, 0x9, 0x400, 0x1, 0x8, 0x96}, {0x8, 0x9, 0x8000, 0x69c, 0x3, 0x1}, {0x7, 0x100, 0x1, 0x4, 0x7, 0x3f}, {0x7f, 0x3ff, 0x8886, 0x1, 0x200, 0x7fff}, {0x6, 0x8, 0x75, 0x0, 0x8cb3, 0x7}, {0x80, 0x1136, 0x401, 0x200, 0x5, 0x5}, {0x3ff, 0xffffffff, 0x0, 0x405b, 0xfffffff9, 0x1}, {0x8, 0x7, 0x2fde, 0x1, 0x562f2915, 0x2}, {0xc07f, 0x0, 0xfffffa40, 0x9, 0x3, 0xf0000000}, {0x1f, 0x8, 0x6, 0x7, 0x0, 0x10001}, {0x101, 0x8, 0x0, 0x10001, 0x1, 0x9}, {0x401, 0xc00, 0xc0, 0x8, 0x5, 0xfffff1ea}, {0x7, 0x5, 0x4, 0xfffffe5d, 0x2, 0x5}, {0x6, 0x4, 0x3f, 0x3f, 0x31, 0x1000}, {0x1f, 0x40, 0x0, 0xdf1b, 0xec, 0x6}, {0x1000, 0x7ff, 0x5, 0x9b, 0x2, 0x9}, {0x6, 0x6, 0x80000000, 0x80, 0x9, 0x7f}, {0x0, 0x4, 0x8001, 0xfffffff9, 0x4, 0xff}, {0x10001, 0x3, 0x4596ec40, 0x7050, 0x8, 0x5}, {0x792e74b7, 0x10001, 0x6, 0x2120, 0x1, 0x1361}, {0x8, 0x200, 0x40, 0x4, 0xffffffc0, 0x9}, {0x541, 0x1, 0x7216, 0xfff, 0x100, 0x8}, {0x6, 0x5533, 0x4, 0x7fff, 0xffff, 0x4e355d1c}, {0x9, 0x8, 0x7, 0x200, 0x7, 0x6}, {0x4, 0x3f, 0x0, 0x9, 0xfffff242, 0xffff}, {0x3, 0xffffffe0, 0x7fffffff, 0x7fffffff, 0x101, 0xeec0b71}, {0x2, 0x1, 0x2, 0xfffffff8, 0x7f, 0x71}, {0x6, 0x1f, 0x1, 0x0, 0xff, 0x9}, {0x7, 0x10000, 0x3, 0xff, 0x3, 0x10001}, {0x2, 0x2, 0x80000000, 0xffff0001, 0x1000, 0x6}, {0x4000000, 0x4, 0x8, 0x3, 0xfce, 0x9}, {0x7, 0x5, 0x7ff, 0x7, 0x95a, 0x6}, {0x7, 0x4, 0x0, 0x3, 0x8, 0x200}, {0x4, 0x81, 0x10000, 0x7fffffff, 0x0, 0x8}, {0x880, 0x3, 0x8, 0x7, 0xf0000000, 0x1}, {0x9, 0x4, 0x81, 0x8326, 0x2, 0x2}, {0x9, 0x2, 0xfffffffe, 0x20, 0x8, 0x3}, {0x0, 0x5, 0x4, 0x6, 0xffffffff, 0xff}, {0x200, 0x1, 0x6, 0x8000, 0x400, 0xffffffff}, {0x10000, 0x7fff, 0x9, 0x5, 0x4, 0x9108}, {0x400, 0x1f, 0xfffffffb, 0x5, 0x2, 0x7fff}, {0x0, 0x200, 0x9a7, 0x7, 0x3, 0xfffffff7}, {0xffffff31, 0x9, 0xfffffffb, 0x5, 0x8000, 0x9ac2}, {0x5de, 0x8, 0x7fffffff, 0x9, 0x5, 0x1c000}, {0x4, 0x1, 0x200, 0x4, 0x0, 0x3}, {0x7, 0x8, 0x3, 0x5, 0x1, 0x8}, {0x5, 0x5, 0x0, 0x24bf, 0x2, 0xda}, {0x1f51, 0x8, 0x7, 0x7, 0x1, 0x800}, {0x100, 0xfd, 0x1, 0xf21, 0x9, 0xffffffff}, {0x1, 0xef, 0x22c0, 0x4, 0x1f, 0xffffffc0}, {0x9e2, 0x4, 0x5, 0x0, 0x1ff, 0xff}, {0x6, 0x5, 0x9, 0x10001, 0x1fdf, 0x8001}, {0x5, 0x80000000, 0x4, 0x80, 0xfffffffa, 0x4f}, {0x2, 0xd4f1, 0x1, 0x401, 0x4, 0x9}, {0x4, 0x0, 0x3, 0x7fffffff, 0xf9d3}, {0x5, 0x2, 0x2, 0x1ff, 0xfffffc01, 0xffff}, {0x3, 0x7, 0x3b40, 0x8, 0x2, 0x80}, {0xd4ec, 0x8, 0x7fff, 0x6, 0x48a, 0x7}, {0x3, 0x101, 0x6dc9, 0x2, 0x8, 0x10000}, {0x4, 0x16fc, 0x3ff, 0x1, 0x8000, 0x6}, {0x7, 0x3c15ed0, 0xd179, 0x7, 0x1ff, 0x8001}, {0x661, 0x8, 0x9, 0x3, 0x80000000, 0x8001}, {0x1, 0x4, 0xffff8001, 0x1, 0x7, 0xc9c}, {0xfffffff8, 0x7, 0x2, 0x1, 0x80f, 0x9}, {0x401, 0x2, 0x9, 0x6, 0x9, 0xffff7fff}, {0x5, 0x5, 0x1000, 0x3, 0x2}, {0x6, 0x8, 0xa50d, 0x8, 0x1, 0x5}, {0x10000, 0x2, 0x492d3898, 0xa00, 0x6, 0x8}, {0x81, 0x1f, 0x6bc, 0x2, 0x2, 0x1}, {0x3, 0x7, 0xa4ac16, 0x3f, 0x9}, {0x8, 0x7, 0x18, 0x8000, 0x9, 0x9}, {0x80000001, 0x111, 0x401, 0xfffffffa, 0x80000001, 0x4}, {0x2, 0x4, 0x7fffffff, 0x2, 0x2, 0xc34}, {0x6, 0x8, 0x1ff, 0x7fffffff, 0x400, 0x2f97523b}, {0x0, 0x5, 0x6, 0x80000000, 0x8, 0x4}, {0x0, 0xc46, 0x1, 0x4, 0x9, 0x3}, {0xd0000000, 0x140, 0x2, 0x7, 0x9, 0x100}, {0x5, 0x8, 0xff, 0x8, 0x3ff, 0x3}, {0x1, 0x5, 0x6, 0xfffffff9, 0x100}, {0x1, 0x7ff, 0x7, 0x4, 0x93, 0x400}, {0xffff00, 0xffff7fff, 0x5, 0x100, 0x3, 0x96}, {0x7, 0x2ddc, 0x8, 0x574, 0x9, 0x51}, {0x8, 0x80000000, 0x6, 0x81, 0xc34d, 0x1}, {0x3, 0x4, 0x5, 0x401, 0xffffff81, 0x6}, {0xfffffffb, 0x3f, 0x5, 0x9, 0x0, 0x8}, {0x7, 0x2, 0x6, 0x3, 0x3, 0x1}, {0x1ff, 0x6, 0x2b38, 0xdb7, 0x4, 0x1ff}, {0x2, 0x6, 0x20, 0x1022, 0x4, 0xa0}, {0x7f, 0x80000001, 0x80000000, 0x1, 0x0, 0x81}, {0x1a, 0xc4, 0x8, 0x0, 0x4}, {0x5, 0xee, 0x6, 0x3f, 0x0, 0x5}, {0x7f, 0x8001, 0x5, 0x1, 0x8, 0x1}, {0x2, 0x5, 0x0, 0x8, 0x0, 0x8}, {0x2, 0x200, 0x3, 0x2, 0x6, 0x80000001}, {0xfffffffd, 0x7c8, 0x8, 0xffffffff, 0x1, 0x3}, {0x3ff, 0x6, 0x3, 0x5ac8, 0x7f, 0x2c2}, {0x8, 0x4, 0x80000000, 0x7f, 0x5, 0x6}], [{0x1, 0x1}, {0x1}, {0x669b760bb546cf52, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x3, 0x9ab0bff5777ebe}, {0x87582c58087b279, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x2}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0xeff12a18f609a707}, {0x2}, {}, {0x1, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x3}, {0x3}, {0x4}, {0xbd74e31ac89a9873, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x7}, {0x5, 0x1}, {0x1}, {0x4, 0x3dfde65f3a83bf71}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x2}, {}, {0x5}, {0x1, 0x1}, {0x4}, {0x1}, {0x4}, {0x3}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x2}, {0x1, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xc0, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x83, 0x6, "d6fe0e7c7dca3574c04983e8bfc09c533148fbf53439caab49e28c2efe87fba40c2e2024c4cef20b4674f8e97e52e52007e44f20170fe6f2d39e0842d3645f09476a308b970e3b14b38a5a3c09c36aed01652e72008aeccd83893cf188b2b4c09c9418b4ed59017f17113957b3d6ac7546fb32c93e05a0f083571207fdf88e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x100, 0x1f, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8}, @TCA_CT_ZONE={0x6}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0xbd, 0x6, "335a77db9f24f8ea699e628a5ac5a28306e0a6b3d3244c9862a4bd091dcb6750af8c1c1aae6c17aa82653d225945b118e0175c503d8c3903b93120972a50ae81b8213eb8aa3936051371573d7abf5998329cdd3c78f9b94e715aa99662068b8a662f758adab4680246831d80f6ffe7d38408d89607a4d8dc48ae053918e01205755d442f9377b5e3f424b301c7514472cf55607bf87663e771edcbcd12c08d8e3051bebabd623c676dcddf9a33f079222d58b5d43f57dd9fd7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x168, 0x6, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7fff, 0x2, 0x6, 0x401}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x8001, 0x10000000, 0x6, 0x4}, 0x3d02}}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xb}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_POLICE={0x54, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x1, 0x74f, 0x9, 0x56f8, {0x0, 0x1, 0x2, 0x1, 0x5, 0x5}, {0x1, 0x0, 0x4, 0xa4, 0x1, 0x1}, 0xb, 0x4}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x50c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x10000000, 0x5, 0xffff, 0x0, {0x9, 0x2, 0x1, 0x9, 0xfffe, 0x6}, {0x0, 0x1, 0x8, 0x8, 0x2, 0x3}, 0xb75, 0x6, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0xffffffffffffffff, 0xfffff79a, 0x5a, 0x401, {0x5, 0x0, 0x1f, 0x2, 0x1}, {0x8, 0x1, 0x80c7, 0x6, 0x7, 0x2}, 0x9afa, 0x9, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffeff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x9, 0x48, 0x4, {0x6, 0x2, 0x7, 0x7f, 0x81}, {0xff, 0x2, 0x9, 0x4, 0xba1, 0x6}, 0x0, 0x3f, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x1, 0x80000001, 0x5, 0x2, 0x9, 0x7ff, 0x7, 0x4, 0x6, 0x8, 0x7, 0x27, 0xfff, 0x0, 0x37c, 0x2, 0x1, 0xfffffff9, 0xd0, 0xca, 0xffffff7f, 0x101, 0xfffffc01, 0x9, 0x20, 0x2, 0x8, 0x9, 0x3, 0x3, 0x7, 0x7, 0x7, 0x7ff, 0x7a2a, 0x401, 0x2, 0x7, 0x3ff, 0x5, 0x7344, 0x7247, 0x80000001, 0xc5, 0x8, 0xb3, 0xfffff801, 0x3dde, 0x1, 0x59e, 0x1, 0x2, 0x6, 0x3f, 0x6, 0x0, 0x1, 0x81, 0x0, 0xffff, 0x3, 0xde, 0x8, 0x4, 0x7fff, 0x2, 0x10001, 0x7, 0x5, 0x9fa9, 0x9, 0x6, 0x9, 0x5, 0x3, 0x7, 0x1000, 0x3, 0x200, 0x2, 0x1000, 0xfffffff9, 0x6, 0x1, 0x9, 0x124, 0x7, 0x2, 0x0, 0x5, 0x6, 0x42d1, 0x6, 0x5, 0x7fffffff, 0x1, 0x8000, 0x0, 0x7, 0x8, 0x0, 0x7, 0x84, 0x8, 0x0, 0x9, 0x3, 0x8, 0x7, 0x6, 0xffffffff, 0xffff, 0x4889, 0xef26, 0x7, 0x7, 0x9, 0x6, 0x448, 0x37, 0xe000000, 0x10001, 0xf777, 0x8, 0x1ab, 0x9, 0x3, 0x101, 0x9, 0x8, 0x1, 0x7, 0x5, 0xffff8d71, 0x7, 0x7ff, 0x0, 0x444, 0x80, 0x7, 0x427, 0x200, 0x101, 0x7fff, 0x0, 0xffffffff, 0x2, 0x400, 0x60, 0xc, 0x1, 0x7f, 0x400, 0x1, 0x7, 0x69d3, 0x7ff, 0xc75, 0x0, 0x9, 0x4, 0x8, 0x88e, 0x8, 0x40, 0x2, 0x10000, 0x6, 0x0, 0x6, 0x0, 0xe3, 0x1974, 0x1, 0x5, 0x3, 0xfffffe01, 0x4, 0x5, 0x9, 0x1, 0xffff, 0x35b, 0x5, 0x3ff, 0x100, 0x2, 0x7fffffff, 0x5, 0x4, 0x0, 0x82, 0x4, 0x1000, 0x1f, 0xfff, 0x80000001, 0x5f, 0x3, 0xffffffff, 0x9623, 0x1, 0x4bf7, 0x80, 0x400, 0x80000001, 0x288c0e96, 0x0, 0x4, 0x63f3, 0xffffffff, 0x7ff, 0x5, 0x7, 0x1ff, 0x1000, 0x3, 0x101, 0x78764ef6, 0x1f, 0x200, 0x9a1c, 0x9, 0x8582, 0xffffffff, 0x8, 0x5, 0x8, 0x3, 0x4, 0xfffffffc, 0x9, 0x1, 0x67f, 0x0, 0x9, 0x6, 0x9, 0x4, 0x3, 0xfff, 0x0, 0x6, 0x62, 0x81, 0x8000, 0x1000, 0x89, 0x3, 0x9, 0x6, 0x8001, 0xb7873d83, 0x3, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x8, 0x0, 0x101, {0x58, 0x0, 0xe4, 0xa8, 0x7ff, 0xf4}, {0x9, 0x2, 0x7, 0x3, 0x1000, 0x3}, 0x101, 0x5, 0x5}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x4e30}, 0x1, 0x0, 0x0, 0x10}, 0x20000820) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000051c0)={r0, 0x7fffffffffffffff, 0x5, 0xd6}) r8 = syz_open_dev$dri(&(0x7f0000000580), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64) r9 = syz_open_dev$dri(&(0x7f0000000000), 0xb5, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0], &(0x7f0000000500), 0x0, 0x1, 0x0, 0x0, r10}) (async) r12 = syz_open_dev$dri(&(0x7f0000000000), 0xb5, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r8, 0xc01864ba, &(0x7f0000000100)={0x3, r11, r13}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000005240)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000005280)={&(0x7f0000005200)=[0x0, r13], 0x2, r14, 0x0, 0x1, 0x4, 0x7f, 0x10001, {0x40, 0x3d9f, 0x7, 0x3, 0xff35, 0x7, 0x40, 0x2, 0x100, 0x6, 0xfff7, 0x2, 0x7, 0x9, "e0317455c9a8e3442dd7c075e42f331da80d6e5722aaced970174793be712c3f"}}) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304, 0x37}, "00000100", "6a1d45a8ef8ee704328c671d000000f6", "94a92000", "920b00652000"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) (async) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r15, &(0x7f0000000800)=ANY=[], 0x208e24b) (async, rerun: 32) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f00000050c0)=""/159, &(0x7f0000005180)=0x9f) (rerun: 32) sendfile(r6, r15, 0x0, 0x20256) 18:28:24 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xf, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:24 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:24 executing program 5: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r3, 0x0) [ 404.197799][ T9244] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 404.288025][ T5141] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 404.477712][ T9244] usb 3-1: Using ep0 maxpacket: 8 [ 404.527788][ T5141] usb 5-1: Using ep0 maxpacket: 8 [ 404.547856][ T5138] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 404.587615][ T5136] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 404.597782][ T9244] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 404.609258][ T9244] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 404.619473][ T9244] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 404.629560][ T9244] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.642635][ T9244] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 404.651940][ T5141] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 404.663152][ T9244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.673516][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 404.691871][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 404.702283][ T5141] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.715682][ T5141] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 404.725048][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.818324][ T5138] usb 2-1: Using ep0 maxpacket: 8 [ 404.859677][ T5136] usb 6-1: Using ep0 maxpacket: 8 [ 404.947764][ T9244] usb 3-1: GET_CAPABILITIES returned 0 [ 404.947848][ T5138] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 404.953321][ T9244] usbtmc 3-1:16.0: can't read capabilities [ 404.965085][ T5138] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 404.997893][ T5141] usb 5-1: GET_CAPABILITIES returned 0 [ 404.997984][ T5136] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 405.003687][ T5141] usbtmc 5-1:16.0: can't read capabilities [ 405.014756][ T5138] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 405.014802][ T5138] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.014887][ T5138] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 405.014933][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.016618][ T5136] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 405.076377][ T5136] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 405.089266][ T5136] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.102927][ T5136] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 405.119659][ T5136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.175191][ T5141] usb 3-1: USB disconnect, device number 42 [ 405.209506][ T5140] usb 5-1: USB disconnect, device number 27 [ 405.327767][ T5138] usb 2-1: GET_CAPABILITIES returned 0 [ 405.333322][ T5138] usbtmc 2-1:16.0: can't read capabilities [ 405.407966][ T5136] usb 6-1: GET_CAPABILITIES returned 0 [ 405.413570][ T5136] usbtmc 6-1:16.0: can't read capabilities [ 405.534408][ T5140] usb 2-1: USB disconnect, device number 60 18:28:25 executing program 2: semget$private(0x0, 0x5, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:25 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x2, 0xae, 0x1800}], 0x3, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:25 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r3, 0xffffffffffffffff, 0x0) 18:28:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x60, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:25 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x2, 0xae, 0x1800}], 0x3, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xf0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x2ec, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:25 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x300, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:25 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x2, 0xae, 0x1800}], 0x3, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 406.027867][ T5136] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 406.107777][ T5140] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 406.277618][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 406.367632][ T5141] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 406.377937][ T5140] usb 5-1: Using ep0 maxpacket: 8 [ 406.438135][ T5136] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 406.449379][ T5136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 406.459830][ T5136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 406.471427][ T5136] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.484562][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 406.493864][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.527842][ T5140] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 406.541124][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 406.551245][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 406.561474][ T5140] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.574611][ T5140] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 406.585144][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.617732][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 406.737749][ T5141] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 406.751540][ T5141] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 406.761870][ T5141] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 406.767902][ T5136] usb 3-1: GET_CAPABILITIES returned 0 [ 406.772094][ T5141] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.777453][ T5136] usbtmc 3-1:16.0: can't read capabilities [ 406.795844][ T5141] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 406.811348][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.857950][ T5140] usb 5-1: GET_CAPABILITIES returned 0 [ 406.863590][ T5140] usbtmc 5-1:16.0: can't read capabilities [ 406.976541][ T5140] usb 3-1: USB disconnect, device number 43 [ 407.067998][ T23] usb 5-1: USB disconnect, device number 28 [ 407.087786][ T5141] usb 2-1: GET_CAPABILITIES returned 0 [ 407.093358][ T5141] usbtmc 2-1:16.0: can't read capabilities 18:28:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x500, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 407.256365][ T5140] usb 6-1: USB disconnect, device number 19 [ 407.315076][ T5141] usb 2-1: USB disconnect, device number 61 18:28:27 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x0, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x136a84c2, 0x4) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100026bd7000ffdbdf25090000000800b181", @ANYRES32=r5, @ANYBLOB="0c009900008000001b0000000800090001ac0f0009000700fb8b0799a800000008003700010000000a00060008021100000100000a00060008021100000000000a000600080211000001000011000700067ee62924883992be5022d198000000"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffecf, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="14ff0f0000000000005eee2fb66132bbea000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = accept$alg(r1, 0x0, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x2, r10) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x7fff, 0x20000ffff, 0x80000100, 0x134, r10}) r11 = syz_clone3(&(0x7f0000000e40)={0x2000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xe}, &(0x7f0000000cc0)=""/156, 0x9c, &(0x7f0000000d80)=""/161, &(0x7f0000000600)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6}, 0x58) r12 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r13, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) r14 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r14, 0xc01864c6, &(0x7f0000000240)={0x0}) sendmsg$netlink(r7, &(0x7f0000002000)={&(0x7f0000000500)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40008020}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000740)={0x56c, 0x2e, 0x1, 0x70bd2a, 0x2, "", [@nested={0xe1, 0x87, 0x0, 0x1, [@generic="6c90b2c013de3391dfd596b06a25d5573f5875f28ba8bf02855985018747d0ffc36b98", @generic="bab709cede35dd07ea4a16a968c42349552bc35393876f83562d0d900203e4ca23869dad136af0ffc2ef39eca1e76c538de8cfe83f3d", @typed={0x8, 0x6c, 0x0, 0x0, @fd=r7}, @generic="b1d4f67dc05c8f59422b7cc4de7c6b611e4f060c8d43d6f080b1eca6e778bf4e9269c67cf3dd4041195b5dd829becdb8c077e7374429eda7297f0250b61a2d6cb29eb15f142271bf5a8c1661d4cf23d2078a09f02588234e25f4a4de23f448cbf300efe521571e1efaa9732515a3e674", @typed={0xc, 0x7d, 0x0, 0x0, @u64=0x7f}]}, @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x3}, @generic="d924bd15dd3ea1c66819e4d03f3e9a0ebe25f5cdfdafd887eb386c12b2dc394c55fa5f0350058b01bcfd73481afd86455130", @generic="0301aca7c73b6aeb2bc10601039031dd15df076a7c3e310d42d31d8f0eb3dbb8d3868f8e94e9ea6cd48d1a2470cd3559d8cb4390e34197cfec370e36eba9fa8c9c893919d8313b3a9e06046402073eab43ee36ceeb1d4264c942b9dbb945ddade204c7e73a896af94060a81d8b3710", @nested={0x201, 0x92, 0x0, 0x1, [@typed={0x4, 0x3d}, @typed={0x33, 0x94, 0x0, 0x0, @binary="076ef167de80b38ac88d76c2af13398ffd28d5ba5ae684cd00d1d0ec4cc80696cddd5c407719940371e5af9d241c09"}, @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@loopback}, @generic="94599c3560157f25ec47faea4bb668f980a35a534e05bf5a8255879be4a33db6e2f9ec6e5ec3abf77930f4e326eba31bce9ae8341f5ec72d5fa707c9d41330f2af8939e44b5a1e2810d5043300816fb92a901d649f21a9b33f78d8b11012de04802092aa6f59e7a025f8", @generic="9b36db5d60775287f605ec6cc9b0e4d7b333a2defb7a9166615997eb718a94d8517f38d2d0e866eb66efcc45a9459f9c1cf168cfa6dcf7e20f49e75b988d872a78ae479a21e3ec9a5336338232ed9469c4e00068ae453813f6", @generic="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"]}, @generic="7dbf8a1ea2ddb832a4e9e33e175ba137381ad0539b5f11dc3ad935064455018440167a90c0c5c91b06308e256c2ca5643e811bfb2812f4ba91d35f9af3e1f3ccd2512e6563dfda92c84da700ab3b0be18b68ebd7b7ceac25f53909ede525fd23de04faec5ced64c3d0e992b1423eecb496ad02f860b4d0cb8db4b5698806031d7e0a36c250e959a0fbcda4775d2ab4be4ee34f6c60275f9949979451d3a3218ae010fff83cc16a2bf84d1e61be08612431a85a2bc74fe1105d0131338fb42811f40c6f06357626cf38da9ad3a0f9a7dd37af0dc716750984172d3300", @typed={0x8, 0x75, 0x0, 0x0, @u32=0x40}, @generic="722c04302ba6e463830a6c9d59b2ca974b02894965f2008479c62896f6eb8c62973d5145bbb4ac35504598af4712c1cdf321d3d432e1c4a0c49cf5119babc9e0b39682299570f8fd129d6e54873ef2c5ab94a96fac169d7e6eb3d1266326ba66bbf246634789d700619d9edb367b6ef0cd7cfd75c62190b9c38336238866bb6afed87cee899b1194aea1cb6f6bb12a1d815186b5f84887d0365f04ecb8f1f8b641a36c5ed623aa9f7462d78fce237b1e2b2db1a79ce4186fef438c466eecf5d04417a2a6aad0f1aabf8b6026d6098f5c2ab3", @nested={0x10, 0x25, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @u32=0x7fffffff}, @typed={0x4, 0x29}]}]}, 0x56c}, {&(0x7f0000000ec0)={0x112c, 0x3f, 0x220, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x111b, 0x58, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x91, 0x0, 0x0, @u32=0x9}, @typed={0x4, 0x2b}, @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@loopback}, @generic="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", @generic="8459db69467b756305ccc2b2f697db", @typed={0x8, 0x73, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x34, 0x0, 0x0, @pid=r11}, @generic="260ad636722982fd71c384b4efe937046df403b871cf99c2b21f05641bc26d43adfeb733c67521ab9895d8f9a56f47502e1f8197c5010adefa271732a472df517e78388a4cfc64559fff0feb96e1ed09ffb9d301af546e71b02d8ce99a39297222f3d6dfea23afe7fb2ee10cf2daa41980117c18dad2bf8aedabc37bb618771697a9dbfeb6b1b17b8fad232706c40b44d521cedc0adca95421391b263d6b3e0bc02322635488546c2858ca07721b8c8b854e723d0b30564dc0170e5c"]}]}, 0x112c}], 0x2, &(0x7f00000006c0)=[@rights={{0x18, 0x1, 0x1, [r13, r14]}}], 0x18, 0x4000000}, 0x20040014) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, &(0x7f0000000180), &(0x7f0000000280)=0x4) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18:28:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x600, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:27 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r3, 0xffffffffffffffff, 0x0) 18:28:27 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 407.551874][T10112] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 18:28:27 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x0, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x900, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xe00, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x136a84c2, 0x4) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100026bd7000ffdbdf25090000000800b181", @ANYRES32=r5, @ANYBLOB="0c009900008000001b0000000800090001ac0f0009000700fb8b0799a800000008003700010000000a00060008021100000100000a00060008021100000000000a000600080211000001000011000700067ee62924883992be5022d198000000"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffecf, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="14ff0f0000000000005eee2fb66132bbea000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) accept$alg(r1, 0x0, 0x0) (async) r9 = accept$alg(r1, 0x0, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x2, r10) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x7fff, 0x20000ffff, 0x80000100, 0x134, r10}) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x7fff, 0x20000ffff, 0x80000100, 0x134, r10}) r11 = syz_clone3(&(0x7f0000000e40)={0x2000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xe}, &(0x7f0000000cc0)=""/156, 0x9c, &(0x7f0000000d80)=""/161, &(0x7f0000000600)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6}, 0x58) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) r12 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r13, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r13, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) r14 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r14, 0xc01864c6, &(0x7f0000000240)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r14, 0xc01864c6, &(0x7f0000000240)={0x0}) sendmsg$netlink(r7, &(0x7f0000002000)={&(0x7f0000000500)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40008020}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000740)={0x56c, 0x2e, 0x1, 0x70bd2a, 0x2, "", [@nested={0xe1, 0x87, 0x0, 0x1, [@generic="6c90b2c013de3391dfd596b06a25d5573f5875f28ba8bf02855985018747d0ffc36b98", @generic="bab709cede35dd07ea4a16a968c42349552bc35393876f83562d0d900203e4ca23869dad136af0ffc2ef39eca1e76c538de8cfe83f3d", @typed={0x8, 0x6c, 0x0, 0x0, @fd=r7}, @generic="b1d4f67dc05c8f59422b7cc4de7c6b611e4f060c8d43d6f080b1eca6e778bf4e9269c67cf3dd4041195b5dd829becdb8c077e7374429eda7297f0250b61a2d6cb29eb15f142271bf5a8c1661d4cf23d2078a09f02588234e25f4a4de23f448cbf300efe521571e1efaa9732515a3e674", @typed={0xc, 0x7d, 0x0, 0x0, @u64=0x7f}]}, @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x3}, @generic="d924bd15dd3ea1c66819e4d03f3e9a0ebe25f5cdfdafd887eb386c12b2dc394c55fa5f0350058b01bcfd73481afd86455130", @generic="0301aca7c73b6aeb2bc10601039031dd15df076a7c3e310d42d31d8f0eb3dbb8d3868f8e94e9ea6cd48d1a2470cd3559d8cb4390e34197cfec370e36eba9fa8c9c893919d8313b3a9e06046402073eab43ee36ceeb1d4264c942b9dbb945ddade204c7e73a896af94060a81d8b3710", @nested={0x201, 0x92, 0x0, 0x1, [@typed={0x4, 0x3d}, @typed={0x33, 0x94, 0x0, 0x0, @binary="076ef167de80b38ac88d76c2af13398ffd28d5ba5ae684cd00d1d0ec4cc80696cddd5c407719940371e5af9d241c09"}, @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@loopback}, @generic="94599c3560157f25ec47faea4bb668f980a35a534e05bf5a8255879be4a33db6e2f9ec6e5ec3abf77930f4e326eba31bce9ae8341f5ec72d5fa707c9d41330f2af8939e44b5a1e2810d5043300816fb92a901d649f21a9b33f78d8b11012de04802092aa6f59e7a025f8", @generic="9b36db5d60775287f605ec6cc9b0e4d7b333a2defb7a9166615997eb718a94d8517f38d2d0e866eb66efcc45a9459f9c1cf168cfa6dcf7e20f49e75b988d872a78ae479a21e3ec9a5336338232ed9469c4e00068ae453813f6", @generic="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"]}, @generic="7dbf8a1ea2ddb832a4e9e33e175ba137381ad0539b5f11dc3ad935064455018440167a90c0c5c91b06308e256c2ca5643e811bfb2812f4ba91d35f9af3e1f3ccd2512e6563dfda92c84da700ab3b0be18b68ebd7b7ceac25f53909ede525fd23de04faec5ced64c3d0e992b1423eecb496ad02f860b4d0cb8db4b5698806031d7e0a36c250e959a0fbcda4775d2ab4be4ee34f6c60275f9949979451d3a3218ae010fff83cc16a2bf84d1e61be08612431a85a2bc74fe1105d0131338fb42811f40c6f06357626cf38da9ad3a0f9a7dd37af0dc716750984172d3300", @typed={0x8, 0x75, 0x0, 0x0, @u32=0x40}, @generic="722c04302ba6e463830a6c9d59b2ca974b02894965f2008479c62896f6eb8c62973d5145bbb4ac35504598af4712c1cdf321d3d432e1c4a0c49cf5119babc9e0b39682299570f8fd129d6e54873ef2c5ab94a96fac169d7e6eb3d1266326ba66bbf246634789d700619d9edb367b6ef0cd7cfd75c62190b9c38336238866bb6afed87cee899b1194aea1cb6f6bb12a1d815186b5f84887d0365f04ecb8f1f8b641a36c5ed623aa9f7462d78fce237b1e2b2db1a79ce4186fef438c466eecf5d04417a2a6aad0f1aabf8b6026d6098f5c2ab3", @nested={0x10, 0x25, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @u32=0x7fffffff}, @typed={0x4, 0x29}]}]}, 0x56c}, {&(0x7f0000000ec0)={0x112c, 0x3f, 0x220, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x111b, 0x58, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x91, 0x0, 0x0, @u32=0x9}, @typed={0x4, 0x2b}, @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@loopback}, @generic="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", @generic="8459db69467b756305ccc2b2f697db", @typed={0x8, 0x73, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x34, 0x0, 0x0, @pid=r11}, @generic="260ad636722982fd71c384b4efe937046df403b871cf99c2b21f05641bc26d43adfeb733c67521ab9895d8f9a56f47502e1f8197c5010adefa271732a472df517e78388a4cfc64559fff0feb96e1ed09ffb9d301af546e71b02d8ce99a39297222f3d6dfea23afe7fb2ee10cf2daa41980117c18dad2bf8aedabc37bb618771697a9dbfeb6b1b17b8fad232706c40b44d521cedc0adca95421391b263d6b3e0bc02322635488546c2858ca07721b8c8b854e723d0b30564dc0170e5c"]}]}, 0x112c}], 0x2, &(0x7f00000006c0)=[@rights={{0x18, 0x1, 0x1, [r13, r14]}}], 0x18, 0x4000000}, 0x20040014) (async) sendmsg$netlink(r7, &(0x7f0000002000)={&(0x7f0000000500)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40008020}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000740)={0x56c, 0x2e, 0x1, 0x70bd2a, 0x2, "", [@nested={0xe1, 0x87, 0x0, 0x1, [@generic="6c90b2c013de3391dfd596b06a25d5573f5875f28ba8bf02855985018747d0ffc36b98", @generic="bab709cede35dd07ea4a16a968c42349552bc35393876f83562d0d900203e4ca23869dad136af0ffc2ef39eca1e76c538de8cfe83f3d", @typed={0x8, 0x6c, 0x0, 0x0, @fd=r7}, @generic="b1d4f67dc05c8f59422b7cc4de7c6b611e4f060c8d43d6f080b1eca6e778bf4e9269c67cf3dd4041195b5dd829becdb8c077e7374429eda7297f0250b61a2d6cb29eb15f142271bf5a8c1661d4cf23d2078a09f02588234e25f4a4de23f448cbf300efe521571e1efaa9732515a3e674", @typed={0xc, 0x7d, 0x0, 0x0, @u64=0x7f}]}, @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x3}, @generic="d924bd15dd3ea1c66819e4d03f3e9a0ebe25f5cdfdafd887eb386c12b2dc394c55fa5f0350058b01bcfd73481afd86455130", @generic="0301aca7c73b6aeb2bc10601039031dd15df076a7c3e310d42d31d8f0eb3dbb8d3868f8e94e9ea6cd48d1a2470cd3559d8cb4390e34197cfec370e36eba9fa8c9c893919d8313b3a9e06046402073eab43ee36ceeb1d4264c942b9dbb945ddade204c7e73a896af94060a81d8b3710", @nested={0x201, 0x92, 0x0, 0x1, [@typed={0x4, 0x3d}, @typed={0x33, 0x94, 0x0, 0x0, @binary="076ef167de80b38ac88d76c2af13398ffd28d5ba5ae684cd00d1d0ec4cc80696cddd5c407719940371e5af9d241c09"}, @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@loopback}, @generic="94599c3560157f25ec47faea4bb668f980a35a534e05bf5a8255879be4a33db6e2f9ec6e5ec3abf77930f4e326eba31bce9ae8341f5ec72d5fa707c9d41330f2af8939e44b5a1e2810d5043300816fb92a901d649f21a9b33f78d8b11012de04802092aa6f59e7a025f8", @generic="9b36db5d60775287f605ec6cc9b0e4d7b333a2defb7a9166615997eb718a94d8517f38d2d0e866eb66efcc45a9459f9c1cf168cfa6dcf7e20f49e75b988d872a78ae479a21e3ec9a5336338232ed9469c4e00068ae453813f6", @generic="6f8d64649126bef7746bc48a7a483e6369978cf9dd8f929c374ec4c40e192c2dc57587d34f8e554378bb4381aa9a64b2edda37366da90eecca0aa4a6bd6032a36fbccf48dd454674857e2558ae3a73caca6aef3317a969e965c5b1716dff68cda76b2a82588f53741fb2f8a25766f9620135cce1aeeeab7998a771b69da6d74ebe442ea4bcca3fad62333c537e3443e625b342d4c7ea889dfacf5cfeaddfcea90c76878a98fe167092d26fe3bcafe10029491a915a58344fa57b75d8cc473530e539b3e6835afadd48e7a5526c625d271d4f9f73dfbbfc7703dd2a3908f5fd7f206219252bab8551b913b185fc33bab590f266526d08918832f1"]}, @generic="7dbf8a1ea2ddb832a4e9e33e175ba137381ad0539b5f11dc3ad935064455018440167a90c0c5c91b06308e256c2ca5643e811bfb2812f4ba91d35f9af3e1f3ccd2512e6563dfda92c84da700ab3b0be18b68ebd7b7ceac25f53909ede525fd23de04faec5ced64c3d0e992b1423eecb496ad02f860b4d0cb8db4b5698806031d7e0a36c250e959a0fbcda4775d2ab4be4ee34f6c60275f9949979451d3a3218ae010fff83cc16a2bf84d1e61be08612431a85a2bc74fe1105d0131338fb42811f40c6f06357626cf38da9ad3a0f9a7dd37af0dc716750984172d3300", @typed={0x8, 0x75, 0x0, 0x0, @u32=0x40}, @generic="722c04302ba6e463830a6c9d59b2ca974b02894965f2008479c62896f6eb8c62973d5145bbb4ac35504598af4712c1cdf321d3d432e1c4a0c49cf5119babc9e0b39682299570f8fd129d6e54873ef2c5ab94a96fac169d7e6eb3d1266326ba66bbf246634789d700619d9edb367b6ef0cd7cfd75c62190b9c38336238866bb6afed87cee899b1194aea1cb6f6bb12a1d815186b5f84887d0365f04ecb8f1f8b641a36c5ed623aa9f7462d78fce237b1e2b2db1a79ce4186fef438c466eecf5d04417a2a6aad0f1aabf8b6026d6098f5c2ab3", @nested={0x10, 0x25, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @u32=0x7fffffff}, @typed={0x4, 0x29}]}]}, 0x56c}, {&(0x7f0000000ec0)={0x112c, 0x3f, 0x220, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x111b, 0x58, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x91, 0x0, 0x0, @u32=0x9}, @typed={0x4, 0x2b}, @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@loopback}, @generic="e1f43d92b306e73fada1aa5fbaa9689b873389707b5b3659de43327dffc8b51fe4ed7c4da9f56c49ee89c402544844a0306b84f23bac6cb802de5cbc7322278869036c0c2c2ac27353feab82fb38da80672cdce0ef66c71b33088ac18e5f6fb781a0cb054ffdbff291274e2d9dc87d30aaae3929b4ae61e392d7993640498131421746dadf32db792a6c8089d1d8d4b535f0ff4e5d26a12652b167d3602b57c7c828744a3362ea3d13bb0493be61ac7432bc7a0fbf37557c3578d7b07d35322ceaa2790cf070d7e5c6a8721f32ea2d5c11d3ef5809a8d16556ad6107e2acccba1851b12f72f860f5da1d32945a8f6d9938d97213b1b8fb5188187a23024bd4e32c65b21a89fb8a49e1739fa4a35395071631613494fb3f50c3a9a723217f48ec278896cea087bfebd80739a0cd3ebf75a2bef240483a42090ae8b8434ba63294f56ba210ddf154e53d9c20ace2c3598200eb40fcfb3cbe4f7c781a47696a07c9cec100f73c99dabed1232579a4527cde685313364d1807dab2725f635a55905b57204dbd38db93d40a5e0026480f98784bbaebfa695788fe8b0606aa33abadc941cde52099d00d87a11d0a729a61990cb615c5cbddb4720bc23bddf6360e22d57537f6d798d8f4e79ebed442a6ad676ef63321215110d25a5bd21da2e03ca95b2b0e3a74208ff376b592b3745bb81d9f6cf617a3bf54096c747b3b043a8e6f384b516caa9c52fb85853e75bbaff7bbebcd8ccc6c3c4f7ae7bdafb7626b7f7ca7272f8df6668472c8b600d5f2f74193fb7fb9d7520c3b341e35dccfb908603c726b03a50a6ba8eedc376356a35908f21d218deba6a8210f52b89ab83cea89323b763d7ef402e37b6bf127d7d4f1d1058ffd58327b5372f3b80203a025415a7161cce4a0bc2bba62f6647775b3ab9ef5c1c7dc13896aa59496b3661b74497098027bb7c718252ccbdbfd368902e30e2c14f51eaed48661eb418f2bdf98d209181bad811b14c89da7043210697abeb33fcd83ae60aa85fabc86be37f4158b28dfa9853d0d00532d8afcc7dc5bee7ab5f2df4b2a5c979bc2b545281c66149fb380e6c7e1414b06a9911c28780ef965e603a2f4c6612be2f2cf31fd5deff2f0e124a68d4798bddd1435418f30cee94d98dc8d7b1687969e37e9c9761708b89fc4fbab4c31e84a4b6c310e3b67712a4876fa744bdd1656c366f977f5b28659ee2deb1f82d4a875a2336bf1c6573f5b8f7f91496cd77213ef42333f15984af85439be2c179326d303135eccc03ba36e6301cf131fbe25e8f76ec36cde1dbac05add32ea2c69ecf07bbe8ad132d312fd38a3f298edbcb3c354e37b4753177ef26cead7fad6f515ea6e601fbc64b4a483ea4ee7816ec0b7692dd07759779273c3d04f0f97edd16c998619cfc6e4bf5e3d2424a12a6470377758dc2b1503cd868f9a287e33ac304af668a8495763338e007539bf36fc8cac1f0079b45458066e440887bb78daeb9dfa04d6d96ef0d29f96a0574f1bd9ae68eaceaf6e9113acd3af26f7f4079bb58ba82691ae9e5b298c6470bd6368a264d4a89f54d9a689776cabb8b8ae46c6b788b3a9beeb7fb66a6d3650aa18b9ac4f41e5c51d1a29a07dbaaadb0b27b878faced997610aea3fea8b423ae8343ee6eee6330f373193a88ff5accf9f733b17c4c99091e54afbd035c013c84cfb5478181094128b10436cea0ffd876ade69d66cb0b6a6cf4f6c6e2aec6fc47279d4530971695d621822bf05dae5dd5cafb3650f7de32390c6dcd1ec451f62c510d673005bd63e1aaf822dff33a7aebc261de22b895ca423b7294c8ccf699dc73d74525b05d15753e9d98242cc60098d556cb817a175bca77de765c1812df748543f273a9523f5c15d97a5e5e72bbf7f00d558e7afbc1758ac356d6f9b4d6518d64032f84d266adcd7d7bbc13d2b17f0a32a49e4afda513171021e9871d191bc5aa30c27e36ba578f0e9dda55c5d177451a600450c1ef9fb5ea9596f670743b898a2cf00916c10802a800247a22a073694816fce39319f40466dfb19b93d22c913bf182e1b8cf78a5d40ad578eaf41b46c7d28208eb3c77e7cd79aab469f7d18b44b40487f9ff9da0f6505b92340a9829f906779dc747cbb2fd95e63743de7ad6fcf728bf77451e7fda5f98bada0fc94b03d4060f1d695c8ece25640fd6c4ba15514d996eedd401f6b0b41cb7e3c5474c213696846743177104e8e27c5b7aff00ec32d7081cf453401f579d985517c07df411094d31b3cc487415704230c4f60aa64468f5f0898436daf03f4fe3675e34c83707deeb5cfb4333b0b4ac1b365d7279fb7f603af530685ca088ddc79594d35348eaa22e8427ee6e0bc7d3bfdb467902a55682fdace678c72562c1f8dff38bf34585aa8b7febf1f86aa8eab12e86a9e37e54376d88679e7d0e467c472f6d010da76a1e1c44be30914aa1a8dde5a5a6e18cc6a0553d0e2a71c54555522aba4d02c450e21160104c44e4f90fb5e28ddc1857f4dacebacae4ed768530f43dc5ae887943b1c895a9ce3cddaba9f76ecf8e9295651f50361a60b58cc663e84d6290a2b818a4d95ad908cd9362d3b43afcd48151ddad1a3d74a9acf54680da3135fa474d2ab53a55f0c10d2e1bff8e7178cdd52426c6b1236ec47b5408bacd1c9767d8c90cfec032b506dba3bd35e9bfdb3579ede764e4609b98db67dd7aaca40ba43dfb7586bc057d1edea8b89bad4c1ad8c5c6f24cd17a99f168cc5a4a8fa7cb43ce811042547327a9dfae1f17a84a6d578f12ca5811393d697db47e8bac3038b95e81b951ec809f87b05685538562e51741c025a0c863d3ccce7b90778a453ab016f5dd888ff4f2f8b018bbb5d99da44479f2dd67b32972c85c696f1bb0294bc5f3054b87f4c2cf31b49f12291310df01901b5afc81313b7dc9025696ae12b58751249e404bc81de7da6031305bb9c8b744b74002a466fbcf592925a6ee4c64e5db08ef94f4e5e0623f833c9a5f450832f1600ca1fa58c5cb20a5e8f5ff57cc7ca1eb3334200da22ce9df53ef7f7731e8a57227fac2d23975bae85ba0fb210c0c7c10625ea80be19081cdd438e5abb4f7e71503827b0f459c767c411db37dba1ef9df143400adb30e06e90e8b0f85b26198278700cbd8ba02aa1efe027f068f358e96e1b5b51c7c611a225099b1f9a2a2b4dde1f4572ce8fc2849345cf91a4638603c624424e05241c8964f5042c0be3d556d88db35767dba1e12eab495cd199789ffad68d79f2b7b22f544104a36d33f44474cb9105c513c300b0b69487021dca90a3967414f61dcc86abb248c43c9970427c4f38d59f29fad2fb5935b0606db7ba5a96172b4a330a45228eb896c287d4ddfe3be5fcfcadde8c4c430d824e390ac3521c537941702a8cc4fe054ced65f1206fa836a4a7e67a9b0433c2ce207e490be170145abeb07092dbc0fdbf7f59d5e49cd8c8c1cb58e95c84eae6a2ba5fc4511ca3de87bd052ca927bcf8f2c3b9f431095c5577f722e621f93cba796ed8b3aa516574380df85b65744d7c25a3c092375fbd62650a557c8e79d0d3dcdade0ae3a54adf9c44bc7a4d0d4e19913f31c0f527943bebee1cb1e22d0cf081e148cce75bfdd4e5d104d683d3a82fef31498ba5457ce9214f8992f9180e04072f031c0fda93949bfd40192c56e90dc3d9773acdeaaf1db151c304858e24579b703d08cd1b054f87052a2a868d58f20ff5a70ce590d6c8ae57d0faa137de904d5321b728957d8712ef18f7cfaedd751a72683bbf731b3067311d014ff52fdf31a562783a047464b882248c7eae0aef5f5995cabe0c0bb68416b44203ed49a5c30ddd0964deec2627c7ee511c262ade3725e976c51b3c496ae46f0f8b3887b174ba8dd7a7644c5d3099c6c0db5ff0342e98f930d62afe9297cf69a6e02084ff8ce56a81985c493d217e12715ad2082a8f2c584f5a1bcdfad4f60b243e5ee985f5332fceb139689f161cce8a42cbde054ca8fbca445868ba6086fba6c564fb9997e28a32fac0a1cdb1e7602bb702b32e9f325b50fb2e1f05622abfc4ad71267bb1265f7a01f12dfe23d66e4c697b9350627f4593e05ace5cb663a70c5831d6b5c4a96d4707bb1e4fbb660a004ee23c82fe8147662cf327834c26b319a886436577383df9de56e7302685fea4ac013df31cca16a5f48a3d4904e17df688d8e3bb50cc114f2454233701b721f96591a6e0674be1ba079fc4e823d5a57b9d5f33ac2d7130acc8e16fb68adb0efcd4893ed39fdaabae464f9bf104161461c40f22be54ace10511463f58514740fc82a11e437fe6bb4f1d71250b0879676ff645b9abe4eef1aa6cfef955b8d923b54bfb57dc49ae2760d80e8fdf973902f0837f865773255ba51ca9cca1c859e1611a12e1213c5774c291b72306d80764efa587d68f087d3c3ef6450ebc4a1fa40dd2fc8ab8bae2e755a2962d18ec3f87507a756c1432ab4c2defde2fb42dbb392be00061c6e60d34128c84a53f9f44f803185de743b2019d5740bf87c2808d40df6f9193063eef730be38e739981ea8a8433d058d96359d3e4c0f9d9c44f2e0c0384e1cbf3b0f8d9f6e0fa1dd28fd1b1c2314322f33488020a508527d6d83bcc75297bd44e1f96adef1fe311d7e7a8dc5ef203696f780252e6b2bab4547329a3930fcfff8118ea76a0121dfdc36e058a44e9cc46e2515cef1f2d0a984cd3f7cb84952024f1d1cd65b6c6a847643927e9aeeed3accc97d786cec5246cbf785dfade4f74b3b4ef6d5531d01a3c64713200c2819f126e07a7d90d1fdbf44484ea79bfc2aeb265bc61cc965ac440e2b25644e26cbb8280ebeab1988e0a364335bbc9c91c587ab8bc2d7590865798903b2961ff8fdb99f8a971402fd32d5156270070b006cb8b87760d5299855fc5eaec4051ee50960d452d9d6975fc108d966fef37f3ffc621bb59a9edb43f8e569027f63b64355b968f9c1d3fe1b1ff4ad83899d100a56dc621757cef2efe770874fd8b5474fc6de14c875d8f8c460714385de54d886030f7853a8fa74771ef04b835f1202c6bf28a4f4d29399bf43555fe7b90ffefd58facad2d3217f7bff1f2bb22797269e4c8cd5163017a2d97365ed13f4823be382ca64ca64385cd1d611571d68dbebfed71330860d17266780f728eacb12e8264a0e29254c2f7f77f44e7fdbeec5a6f047b5a9754ad0b38945419f8bcd50b90ddc398cb2e124a89a71ee9cd7d37ab4d48a3b0eedd18d3913a53f861ea1c8b7c1270fcd6501e34d2e6f7342a5e8cf01637dc5b9304b34c49de941b100a904e24eadb4ec82814f30b0b29297ad6f640b1696cda5367a6d7dc926f43844b61211b6596227d9dd130cc65563ee91d319dea5d8db1782313d32fee863989013d6bc4069073203cfa68731bbaa09522e76a8059b90a5bdf0e7367414bb453e741f4a50e36e63a48261f1a961108e4d02d533033f883e036303c677ce6c8caf6eeef9ce5b817ede810f19a11a90d467a1ba616c2a19c1f4ef92a3888d1b5899a7a20cd8eedf24bf2d771858475d2e19336f5184eaa8234ef44e225011791baf48970f090286d2b64b963d1e1dbb85220a584f9638a902fa3b5e010ae13dd622a7816fbc1fb57a05c3249a3ac77b76993eadf0d1b25df037e2a2c53aedb3bb814d74bb2c5ea4217f5d149a60d1e76ce664f73bae06c5b39b2daad8115416d5e36a0c05c09e4249780dc375d342bff7eadac60b1f7ff8fcbefdd0004fab7ad66ea8de1a3b6e814278675ac598fb37125c9532bbc5a13d6a1bea56f6584", @generic="8459db69467b756305ccc2b2f697db", @typed={0x8, 0x73, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x34, 0x0, 0x0, @pid=r11}, @generic="260ad636722982fd71c384b4efe937046df403b871cf99c2b21f05641bc26d43adfeb733c67521ab9895d8f9a56f47502e1f8197c5010adefa271732a472df517e78388a4cfc64559fff0feb96e1ed09ffb9d301af546e71b02d8ce99a39297222f3d6dfea23afe7fb2ee10cf2daa41980117c18dad2bf8aedabc37bb618771697a9dbfeb6b1b17b8fad232706c40b44d521cedc0adca95421391b263d6b3e0bc02322635488546c2858ca07721b8c8b854e723d0b30564dc0170e5c"]}]}, 0x112c}], 0x2, &(0x7f00000006c0)=[@rights={{0x18, 0x1, 0x1, [r13, r14]}}], 0x18, 0x4000000}, 0x20040014) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, &(0x7f0000000180), &(0x7f0000000280)=0x4) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18:28:27 executing program 1: semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:27 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x0, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 407.878288][T10131] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 407.902165][ T5136] usb 3-1: new high-speed USB device number 44 using dummy_hcd 18:28:27 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x136a84c2, 0x4) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100026bd7000ffdbdf25090000000800b181", @ANYRES32=r5, @ANYBLOB="0c009900008000001b0000000800090001ac0f0009000700fb8b0799a800000008003700010000000a00060008021100000100000a00060008021100000000000a000600080211000001000011000700067ee62924883992be5022d198000000"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffecf, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="14ff0f0000000000005eee2fb66132bbea000000"], 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r9 = accept$alg(r1, 0x0, 0x0) (async, rerun: 32) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x2, r10) (async) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x7fff, 0x20000ffff, 0x80000100, 0x134, r10}) r11 = syz_clone3(&(0x7f0000000e40)={0x2000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xe}, &(0x7f0000000cc0)=""/156, 0x9c, &(0x7f0000000d80)=""/161, &(0x7f0000000600)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6}, 0x58) (async) r12 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r13, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (async) r14 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r14, 0xc01864c6, &(0x7f0000000240)={0x0}) (async) sendmsg$netlink(r7, &(0x7f0000002000)={&(0x7f0000000500)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40008020}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000740)={0x56c, 0x2e, 0x1, 0x70bd2a, 0x2, "", [@nested={0xe1, 0x87, 0x0, 0x1, [@generic="6c90b2c013de3391dfd596b06a25d5573f5875f28ba8bf02855985018747d0ffc36b98", @generic="bab709cede35dd07ea4a16a968c42349552bc35393876f83562d0d900203e4ca23869dad136af0ffc2ef39eca1e76c538de8cfe83f3d", @typed={0x8, 0x6c, 0x0, 0x0, @fd=r7}, @generic="b1d4f67dc05c8f59422b7cc4de7c6b611e4f060c8d43d6f080b1eca6e778bf4e9269c67cf3dd4041195b5dd829becdb8c077e7374429eda7297f0250b61a2d6cb29eb15f142271bf5a8c1661d4cf23d2078a09f02588234e25f4a4de23f448cbf300efe521571e1efaa9732515a3e674", @typed={0xc, 0x7d, 0x0, 0x0, @u64=0x7f}]}, @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x3}, @generic="d924bd15dd3ea1c66819e4d03f3e9a0ebe25f5cdfdafd887eb386c12b2dc394c55fa5f0350058b01bcfd73481afd86455130", @generic="0301aca7c73b6aeb2bc10601039031dd15df076a7c3e310d42d31d8f0eb3dbb8d3868f8e94e9ea6cd48d1a2470cd3559d8cb4390e34197cfec370e36eba9fa8c9c893919d8313b3a9e06046402073eab43ee36ceeb1d4264c942b9dbb945ddade204c7e73a896af94060a81d8b3710", @nested={0x201, 0x92, 0x0, 0x1, [@typed={0x4, 0x3d}, @typed={0x33, 0x94, 0x0, 0x0, @binary="076ef167de80b38ac88d76c2af13398ffd28d5ba5ae684cd00d1d0ec4cc80696cddd5c407719940371e5af9d241c09"}, @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@loopback}, @generic="94599c3560157f25ec47faea4bb668f980a35a534e05bf5a8255879be4a33db6e2f9ec6e5ec3abf77930f4e326eba31bce9ae8341f5ec72d5fa707c9d41330f2af8939e44b5a1e2810d5043300816fb92a901d649f21a9b33f78d8b11012de04802092aa6f59e7a025f8", @generic="9b36db5d60775287f605ec6cc9b0e4d7b333a2defb7a9166615997eb718a94d8517f38d2d0e866eb66efcc45a9459f9c1cf168cfa6dcf7e20f49e75b988d872a78ae479a21e3ec9a5336338232ed9469c4e00068ae453813f6", @generic="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"]}, @generic="7dbf8a1ea2ddb832a4e9e33e175ba137381ad0539b5f11dc3ad935064455018440167a90c0c5c91b06308e256c2ca5643e811bfb2812f4ba91d35f9af3e1f3ccd2512e6563dfda92c84da700ab3b0be18b68ebd7b7ceac25f53909ede525fd23de04faec5ced64c3d0e992b1423eecb496ad02f860b4d0cb8db4b5698806031d7e0a36c250e959a0fbcda4775d2ab4be4ee34f6c60275f9949979451d3a3218ae010fff83cc16a2bf84d1e61be08612431a85a2bc74fe1105d0131338fb42811f40c6f06357626cf38da9ad3a0f9a7dd37af0dc716750984172d3300", @typed={0x8, 0x75, 0x0, 0x0, @u32=0x40}, @generic="722c04302ba6e463830a6c9d59b2ca974b02894965f2008479c62896f6eb8c62973d5145bbb4ac35504598af4712c1cdf321d3d432e1c4a0c49cf5119babc9e0b39682299570f8fd129d6e54873ef2c5ab94a96fac169d7e6eb3d1266326ba66bbf246634789d700619d9edb367b6ef0cd7cfd75c62190b9c38336238866bb6afed87cee899b1194aea1cb6f6bb12a1d815186b5f84887d0365f04ecb8f1f8b641a36c5ed623aa9f7462d78fce237b1e2b2db1a79ce4186fef438c466eecf5d04417a2a6aad0f1aabf8b6026d6098f5c2ab3", @nested={0x10, 0x25, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @u32=0x7fffffff}, @typed={0x4, 0x29}]}]}, 0x56c}, {&(0x7f0000000ec0)={0x112c, 0x3f, 0x220, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x111b, 0x58, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x91, 0x0, 0x0, @u32=0x9}, @typed={0x4, 0x2b}, @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@loopback}, @generic="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", @generic="8459db69467b756305ccc2b2f697db", @typed={0x8, 0x73, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x34, 0x0, 0x0, @pid=r11}, @generic="260ad636722982fd71c384b4efe937046df403b871cf99c2b21f05641bc26d43adfeb733c67521ab9895d8f9a56f47502e1f8197c5010adefa271732a472df517e78388a4cfc64559fff0feb96e1ed09ffb9d301af546e71b02d8ce99a39297222f3d6dfea23afe7fb2ee10cf2daa41980117c18dad2bf8aedabc37bb618771697a9dbfeb6b1b17b8fad232706c40b44d521cedc0adca95421391b263d6b3e0bc02322635488546c2858ca07721b8c8b854e723d0b30564dc0170e5c"]}]}, 0x112c}], 0x2, &(0x7f00000006c0)=[@rights={{0x18, 0x1, 0x1, [r13, r14]}}], 0x18, 0x4000000}, 0x20040014) (async) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, &(0x7f0000000180), &(0x7f0000000280)=0x4) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18:28:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xf00, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 407.943333][T10133] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 408.008211][ T23] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 408.159831][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 408.197720][ T5140] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 408.267622][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 408.277794][ T5136] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 408.289357][ T5136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 408.299486][ T5136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.309484][ T5136] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.322909][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 408.332026][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.388344][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 408.399577][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 408.411200][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.421301][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.434493][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 408.437613][ T5140] usb 2-1: Using ep0 maxpacket: 8 [ 408.443593][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.568226][ T5140] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 408.579517][ T5140] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 408.589803][ T5140] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.602113][ T5136] usb 3-1: GET_CAPABILITIES returned 0 [ 408.607879][ T5140] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.620987][ T5136] usbtmc 3-1:16.0: can't read capabilities [ 408.633203][ T5140] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 408.642397][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.728512][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 408.734144][ T23] usbtmc 5-1:16.0: can't read capabilities [ 408.817650][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.826814][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.835891][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.844987][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.854064][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.863142][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.872220][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.881320][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.890406][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.899513][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.908592][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.917680][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.926789][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.935910][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.937486][ T5136] usb 5-1: USB disconnect, device number 29 [ 408.945018][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.960079][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 408.993421][ T23] usb 3-1: USB disconnect, device number 44 [ 409.014946][ T5140] usb 2-1: GET_CAPABILITIES returned 0 [ 409.020689][ T5140] usbtmc 2-1:16.0: can't read capabilities [ 409.214259][ T5136] usb 2-1: USB disconnect, device number 62 18:28:29 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(r3, r4, 0x0) 18:28:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x1c00, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:29 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:29 executing program 2: semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x136a84c2, 0x4) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100026bd7000ffdbdf25090000000800b181", @ANYRES32=r5, @ANYBLOB="0c009900008000001b0000000800090001ac0f0009000700fb8b0799a800000008003700010000000a00060008021100000100000a00060008021100000000000a000600080211000001000011000700067ee62924883992be5022d198000000"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffecf, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="14ff0f0000000000005eee2fb66132bbea000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = accept$alg(r1, 0x0, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x2, r10) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x7fff, 0x20000ffff, 0x80000100, 0x134, r10}) r11 = syz_clone3(&(0x7f0000000e40)={0x2000, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0xe}, &(0x7f0000000cc0)=""/156, 0x9c, &(0x7f0000000d80)=""/161, &(0x7f0000000600)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6}, 0x58) r12 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r13, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) r14 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r14, 0xc01864c6, &(0x7f0000000240)={0x0}) sendmsg$netlink(r7, &(0x7f0000002000)={&(0x7f0000000500)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40008020}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000740)={0x56c, 0x2e, 0x1, 0x70bd2a, 0x2, "", [@nested={0xe1, 0x87, 0x0, 0x1, [@generic="6c90b2c013de3391dfd596b06a25d5573f5875f28ba8bf02855985018747d0ffc36b98", @generic="bab709cede35dd07ea4a16a968c42349552bc35393876f83562d0d900203e4ca23869dad136af0ffc2ef39eca1e76c538de8cfe83f3d", @typed={0x8, 0x6c, 0x0, 0x0, @fd=r7}, @generic="b1d4f67dc05c8f59422b7cc4de7c6b611e4f060c8d43d6f080b1eca6e778bf4e9269c67cf3dd4041195b5dd829becdb8c077e7374429eda7297f0250b61a2d6cb29eb15f142271bf5a8c1661d4cf23d2078a09f02588234e25f4a4de23f448cbf300efe521571e1efaa9732515a3e674", @typed={0xc, 0x7d, 0x0, 0x0, @u64=0x7f}]}, @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x3}, @generic="d924bd15dd3ea1c66819e4d03f3e9a0ebe25f5cdfdafd887eb386c12b2dc394c55fa5f0350058b01bcfd73481afd86455130", @generic="0301aca7c73b6aeb2bc10601039031dd15df076a7c3e310d42d31d8f0eb3dbb8d3868f8e94e9ea6cd48d1a2470cd3559d8cb4390e34197cfec370e36eba9fa8c9c893919d8313b3a9e06046402073eab43ee36ceeb1d4264c942b9dbb945ddade204c7e73a896af94060a81d8b3710", @nested={0x201, 0x92, 0x0, 0x1, [@typed={0x4, 0x3d}, @typed={0x33, 0x94, 0x0, 0x0, @binary="076ef167de80b38ac88d76c2af13398ffd28d5ba5ae684cd00d1d0ec4cc80696cddd5c407719940371e5af9d241c09"}, @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@loopback}, @generic="94599c3560157f25ec47faea4bb668f980a35a534e05bf5a8255879be4a33db6e2f9ec6e5ec3abf77930f4e326eba31bce9ae8341f5ec72d5fa707c9d41330f2af8939e44b5a1e2810d5043300816fb92a901d649f21a9b33f78d8b11012de04802092aa6f59e7a025f8", @generic="9b36db5d60775287f605ec6cc9b0e4d7b333a2defb7a9166615997eb718a94d8517f38d2d0e866eb66efcc45a9459f9c1cf168cfa6dcf7e20f49e75b988d872a78ae479a21e3ec9a5336338232ed9469c4e00068ae453813f6", @generic="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"]}, @generic="7dbf8a1ea2ddb832a4e9e33e175ba137381ad0539b5f11dc3ad935064455018440167a90c0c5c91b06308e256c2ca5643e811bfb2812f4ba91d35f9af3e1f3ccd2512e6563dfda92c84da700ab3b0be18b68ebd7b7ceac25f53909ede525fd23de04faec5ced64c3d0e992b1423eecb496ad02f860b4d0cb8db4b5698806031d7e0a36c250e959a0fbcda4775d2ab4be4ee34f6c60275f9949979451d3a3218ae010fff83cc16a2bf84d1e61be08612431a85a2bc74fe1105d0131338fb42811f40c6f06357626cf38da9ad3a0f9a7dd37af0dc716750984172d3300", @typed={0x8, 0x75, 0x0, 0x0, @u32=0x40}, @generic="722c04302ba6e463830a6c9d59b2ca974b02894965f2008479c62896f6eb8c62973d5145bbb4ac35504598af4712c1cdf321d3d432e1c4a0c49cf5119babc9e0b39682299570f8fd129d6e54873ef2c5ab94a96fac169d7e6eb3d1266326ba66bbf246634789d700619d9edb367b6ef0cd7cfd75c62190b9c38336238866bb6afed87cee899b1194aea1cb6f6bb12a1d815186b5f84887d0365f04ecb8f1f8b641a36c5ed623aa9f7462d78fce237b1e2b2db1a79ce4186fef438c466eecf5d04417a2a6aad0f1aabf8b6026d6098f5c2ab3", @nested={0x10, 0x25, 0x0, 0x1, [@typed={0x8, 0x2b, 0x0, 0x0, @u32=0x7fffffff}, @typed={0x4, 0x29}]}]}, 0x56c}, {&(0x7f0000000ec0)={0x112c, 0x3f, 0x220, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x111b, 0x58, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x91, 0x0, 0x0, @u32=0x9}, @typed={0x4, 0x2b}, @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @typed={0x14, 0x72, 0x0, 0x0, @ipv6=@loopback}, @generic="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", @generic="8459db69467b756305ccc2b2f697db", @typed={0x8, 0x73, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x34, 0x0, 0x0, @pid=r11}, @generic="260ad636722982fd71c384b4efe937046df403b871cf99c2b21f05641bc26d43adfeb733c67521ab9895d8f9a56f47502e1f8197c5010adefa271732a472df517e78388a4cfc64559fff0feb96e1ed09ffb9d301af546e71b02d8ce99a39297222f3d6dfea23afe7fb2ee10cf2daa41980117c18dad2bf8aedabc37bb618771697a9dbfeb6b1b17b8fad232706c40b44d521cedc0adca95421391b263d6b3e0bc02322635488546c2858ca07721b8c8b854e723d0b30564dc0170e5c"]}]}, 0x112c}], 0x2, &(0x7f00000006c0)=[@rights={{0x18, 0x1, 0x1, [r13, r14]}}], 0x18, 0x4000000}, 0x20040014) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, &(0x7f0000000180), &(0x7f0000000280)=0x4) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18:28:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x3f00, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:29 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 409.595480][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 18:28:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x6000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:29 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xec02, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:29 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x3, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 409.838483][ T23] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 409.869267][ T5141] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 410.037925][ T5140] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 410.117865][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 410.157697][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 410.237942][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 410.251048][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 410.261419][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.271477][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.277812][ T5140] usb 2-1: Using ep0 maxpacket: 8 [ 410.284519][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.298800][ T5141] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 410.313560][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.321685][ T5141] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 410.333006][ T5141] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.354322][ T5141] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.369134][ T5141] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.384282][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.408037][ T5140] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 410.419472][ T5140] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 410.429850][ T5140] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.440120][ T5140] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.453244][ T5140] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.464065][ T5140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.597972][ T23] usb 5-1: usb_control_msg returned -71 [ 410.603590][ T23] usbtmc 5-1:16.0: can't read capabilities [ 410.621417][ T23] usb 5-1: USB disconnect, device number 30 [ 410.668113][ T5141] usb 3-1: GET_CAPABILITIES returned 0 [ 410.673775][ T5141] usbtmc 3-1:16.0: can't read capabilities [ 410.727878][ T5140] usb 2-1: GET_CAPABILITIES returned 0 [ 410.733442][ T5140] usbtmc 2-1:16.0: can't read capabilities [ 410.872261][ T5140] usb 3-1: USB disconnect, device number 45 [ 410.934676][ T5136] usb 2-1: USB disconnect, device number 63 18:28:30 executing program 5: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000020c0)=0xffffffffffffffff, 0x4) 18:28:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x30000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:30 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(r3, r4, 0x0) 18:28:31 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x3, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:31 executing program 5: nanosleep(&(0x7f0000000140)={0x77359400}, 0x0) 18:28:31 executing program 2: semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xf0ffff, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x1000000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:31 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 411.460076][ T5136] usb 5-1: new high-speed USB device number 31 using dummy_hcd 18:28:31 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x3, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x2000000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x3000000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x4000000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:31 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x0, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 411.709343][ T5140] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 411.717005][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 411.799134][ T5138] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 411.838046][ T5136] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 411.851491][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 411.861616][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 411.871591][ T5136] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 411.884661][ T5136] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 411.893745][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.967616][ T5140] usb 3-1: Using ep0 maxpacket: 8 [ 412.047982][ T5138] usb 2-1: Using ep0 maxpacket: 8 [ 412.088230][ T5140] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 412.099948][ T5140] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 412.110078][ T5140] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 412.120388][ T5140] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.134934][ T5140] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 412.145897][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.157838][ T5136] usb 5-1: usb_control_msg returned -71 [ 412.163488][ T5136] usbtmc 5-1:16.0: can't read capabilities [ 412.177778][ T5138] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 412.190335][ T5138] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 412.205469][ T5136] usb 5-1: USB disconnect, device number 31 [ 412.219603][ T5138] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 412.230166][ T5138] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.251079][ T5138] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 412.272003][ T5138] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.427988][ T5140] usb 3-1: GET_CAPABILITIES returned 0 [ 412.433557][ T5140] usbtmc 3-1:16.0: can't read capabilities [ 412.537741][ T5138] usb 2-1: GET_CAPABILITIES returned 0 [ 412.543302][ T5138] usbtmc 2-1:16.0: can't read capabilities 18:28:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x5000000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:32 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x0, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:32 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x101c42, 0x0) [ 412.634302][ T5141] usb 3-1: USB disconnect, device number 46 [ 412.746488][ T5138] usb 2-1: USB disconnect, device number 64 18:28:32 executing program 5: sched_rr_get_interval(0x0, 0x0) nanosleep(&(0x7f0000000140)={0x77359400}, &(0x7f0000000180)) nanosleep(&(0x7f0000000300), 0x0) 18:28:32 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(r3, r4, 0x0) 18:28:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x6000000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:33 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x0, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:33 executing program 2: semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:33 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x7000000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x8000000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:33 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x0, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x9000000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xe000000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:33 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x0, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 413.518977][ T5138] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 413.597645][ T5140] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 413.618548][ T5136] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 413.757647][ T5138] usb 5-1: Using ep0 maxpacket: 8 [ 413.837680][ T5140] usb 3-1: Using ep0 maxpacket: 8 [ 413.857921][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 413.877824][ T5138] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 413.893594][ T5138] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 413.904154][ T5138] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 413.916241][ T5138] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 413.930559][ T5138] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 413.939788][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.967853][ T5140] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 413.979285][ T5140] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 413.993669][ T5136] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 18:28:33 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) [ 414.010409][ T5140] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 414.020647][ T5136] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 414.030847][ T5140] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.043920][ T5136] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 414.054656][ T5136] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.067821][ T5140] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 414.076900][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.085106][ T5136] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 414.115181][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.208033][ T5138] usb 5-1: usb_control_msg returned -71 [ 414.213747][ T5138] usbtmc 5-1:16.0: can't read capabilities [ 414.233891][ T5138] usb 5-1: USB disconnect, device number 32 [ 414.367768][ T5140] usb 3-1: GET_CAPABILITIES returned 0 [ 414.373318][ T5140] usbtmc 3-1:16.0: can't read capabilities [ 414.401350][ T5136] usb 2-1: GET_CAPABILITIES returned 0 [ 414.406939][ T5136] usbtmc 2-1:16.0: can't read capabilities [ 414.572757][ T5138] usb 3-1: USB disconnect, device number 47 [ 414.606729][ T23] usb 2-1: USB disconnect, device number 65 18:28:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xf000000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:34 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(r3, r4, 0x0) 18:28:34 executing program 5: syz_open_dev$usbfs(&(0x7f0000000700), 0x0, 0x0) 18:28:34 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x0, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:34 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}, {}], 0x2, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, 0x48) 18:28:34 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x1c000000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x3f000000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:35 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:35 executing program 5: openat$rfkill(0xffffffffffffff9c, &(0x7f0000006b00), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000006cc0), 0x2, 0x0) 18:28:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x60000000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x9effffff, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:35 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(r3, r4, 0x0) 18:28:35 executing program 5: socket(0x11, 0xa, 0x793e) 18:28:35 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 415.458310][ T5136] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 415.563684][ T23] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 415.697627][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 415.807628][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 415.827827][ T5136] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 415.840350][ T5136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 415.850673][ T5136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.860956][ T5136] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.874153][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 415.883337][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.947963][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 415.959293][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 415.969484][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.979471][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.992555][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 416.001707][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.147799][ T5136] usb 3-1: GET_CAPABILITIES returned 0 [ 416.153398][ T5136] usbtmc 3-1:16.0: can't read capabilities [ 416.287801][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 416.293374][ T23] usbtmc 2-1:16.0: can't read capabilities [ 416.367617][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.377001][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.386081][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.395180][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.404267][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.413341][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.422449][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.431551][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.440644][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.449741][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.458866][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.467986][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.477090][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.486212][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.495303][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.504416][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 416.527711][ T5131] usb 3-1: USB disconnect, device number 48 18:28:38 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}, {}], 0x2, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xec020000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:38 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 18:28:38 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(r3, r4, 0x0) 18:28:38 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:38 executing program 2: semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 418.208706][ T27] usb 2-1: USB disconnect, device number 66 18:28:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xf0ffffff, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:38 executing program 5: getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, 0x0, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 18:28:38 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x3, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xfcffffff, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:38 executing program 5: syz_clone(0xe0620100, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') 18:28:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 418.548189][ T5136] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 418.727911][ T27] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 418.787771][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 418.907901][ T5136] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 418.919175][ T5136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 418.929605][ T5136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.939786][ T5136] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.952933][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 418.963660][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.987690][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 419.119096][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 419.130279][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 419.141013][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 419.151388][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.164827][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 419.174010][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.238280][ T5136] usb 3-1: GET_CAPABILITIES returned 0 [ 419.244030][ T5136] usbtmc 3-1:16.0: can't read capabilities [ 419.441646][ T27] usb 2-1: GET_CAPABILITIES returned 0 [ 419.452335][ T27] usbtmc 2-1:16.0: can't read capabilities [ 419.459174][ T5141] usb 3-1: USB disconnect, device number 49 18:28:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xffffff7f, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:41 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x3, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:41 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) 18:28:41 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r4, 0x0) 18:28:41 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}, {}], 0x2, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:41 executing program 2: semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 421.297765][ T5136] usb 2-1: USB disconnect, device number 67 18:28:41 executing program 5: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, r0/1000+10000}) 18:28:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xffffff9e, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:41 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x3, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xfffffff0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xfffffffc, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xffffffff, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:41 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0xf, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x14, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 421.672381][ T27] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 421.688224][ T5140] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 421.847676][ T5136] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 421.927725][ T5140] usb 5-1: Using ep0 maxpacket: 8 [ 421.937819][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 422.047699][ T5140] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 422.059478][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 422.067894][ T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 422.071753][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.083903][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 422.092642][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 422.102533][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.111790][ T5140] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.117237][ T27] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.130637][ T5140] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.152934][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.154382][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.175083][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.248545][ T5136] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 422.260417][ T5136] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 422.271239][ T5136] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 422.281449][ T5136] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 422.297697][ T5136] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 422.306775][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.417791][ T5140] usb 5-1: GET_CAPABILITIES returned 0 [ 422.423434][ T5140] usbtmc 5-1:16.0: can't read capabilities [ 422.438068][ T27] usb 3-1: GET_CAPABILITIES returned 0 [ 422.443635][ T27] usbtmc 3-1:16.0: can't read capabilities [ 422.567930][ T5136] usb 2-1: GET_CAPABILITIES returned 0 [ 422.573559][ T5136] usbtmc 2-1:16.0: can't read capabilities [ 422.622657][ T5136] usb 5-1: USB disconnect, device number 33 [ 422.637621][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.646768][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.655888][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.664997][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.674085][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.683165][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.692299][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.701416][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.710507][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.719624][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.728715][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.737840][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.746983][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.756093][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.765180][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.774310][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 422.795348][ T27] usb 3-1: USB disconnect, device number 50 18:28:43 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r4, 0x0) [ 423.659698][ T23] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 423.907615][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 424.027816][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 424.039057][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 424.049365][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 424.059317][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.072385][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 424.081784][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:28:44 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 424.347783][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 424.353326][ T23] usbtmc 5-1:16.0: can't read capabilities 18:28:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x68, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:44 executing program 2: semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:44 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:44 executing program 5: clock_settime(0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x20, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xe0}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x0, 0xf4}}]}}}]}}]}}, 0x0) select(0x40, &(0x7f0000000100), 0x0, 0x0, 0x0) [ 424.394297][ T23] usb 2-1: USB disconnect, device number 68 18:28:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x71, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 424.537704][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.546837][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.555957][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.565093][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.574201][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.583294][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.592424][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.601576][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.610698][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.619833][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.628963][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 18:28:44 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 424.638094][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.647216][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.656566][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.665669][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 424.674757][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 18:28:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x140, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 424.712059][ T5141] usb 5-1: USB disconnect, device number 34 18:28:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0xec0, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:44 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 424.769800][ T5131] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 424.778201][ T27] usb 3-1: new high-speed USB device number 51 using dummy_hcd 18:28:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x33fe0, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 424.858477][ T23] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 425.028804][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 425.097604][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 425.147949][ T5131] usb 6-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 425.162877][ T27] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 425.174170][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 425.189675][ T5131] usb 6-1: config 1 interface 0 has no altsetting 0 18:28:45 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r4, 0x0) [ 425.196523][ T27] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 425.206485][ T27] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.220655][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 425.229788][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.238131][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 425.258040][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 425.268709][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 425.278866][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.296854][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 425.307423][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.377838][ T5131] usb 6-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.40 [ 425.386911][ T5131] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.395159][ T5131] usb 6-1: Product: syz [ 425.399929][ T5131] usb 6-1: Manufacturer: syz [ 425.404551][ T5131] usb 6-1: SerialNumber: syz [ 425.507728][ T27] usb 3-1: GET_CAPABILITIES returned 0 [ 425.513263][ T27] usbtmc 3-1:16.0: can't read capabilities [ 425.579354][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 425.584927][ T23] usbtmc 2-1:16.0: can't read capabilities [ 425.637924][ T5140] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 425.717892][ T23] usb 3-1: USB disconnect, device number 51 [ 425.782805][ T27] usb 2-1: USB disconnect, device number 69 [ 425.897838][ T5140] usb 5-1: Using ep0 maxpacket: 8 [ 426.028081][ T5140] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 426.039311][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 426.049847][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.061293][ T5140] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.076195][ T5140] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.085714][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:28:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0xfffffdef, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:46 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:46 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:46 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 426.358226][ T5140] usb 5-1: GET_CAPABILITIES returned 0 [ 426.370176][ T5140] usbtmc 5-1:16.0: can't read capabilities [ 426.564107][ T5140] usb 5-1: USB disconnect, device number 35 [ 426.657614][ T27] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 426.687783][ T5136] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 426.899345][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 426.947853][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 427.017843][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 427.029214][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 427.039607][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 427.049953][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.065699][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 427.076185][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.093322][ T5136] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 427.112522][ T5136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 427.123211][ T5136] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 427.133605][ T5136] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.147599][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 427.156659][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.339800][ T27] usb 2-1: GET_CAPABILITIES returned 0 [ 427.345337][ T27] usbtmc 2-1:16.0: can't read capabilities 18:28:47 executing program 5: mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xb3ff531187a49171, 0xffffffffffffffff, 0x0) 18:28:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x68, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 427.408289][ T5136] usb 3-1: GET_CAPABILITIES returned 0 [ 427.413834][ T5136] usbtmc 3-1:16.0: can't read capabilities 18:28:47 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:47 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) semget(0x2, 0x3, 0x288) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) dup3(r3, r5, 0x0) [ 427.500782][ T5131] usbhid 6-1:1.0: couldn't find an input interrupt endpoint 18:28:47 executing program 5: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x8001, 0x0, 0x0, 0x537}]}) getpgid(0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) 18:28:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x71, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 427.544959][ T5131] usb 6-1: USB disconnect, device number 20 [ 427.577615][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.586884][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.596505][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.605667][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.614824][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.623976][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.633145][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 18:28:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 427.642287][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.651447][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.660587][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.669731][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.678874][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 18:28:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:47 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 427.688031][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.697182][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.706343][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 427.715501][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 18:28:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x3, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 427.777314][ T5136] usb 2-1: USB disconnect, device number 70 [ 428.027750][ T27] usb 5-1: new high-speed USB device number 36 using dummy_hcd 18:28:48 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 428.267641][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 428.387989][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 428.401729][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 428.412380][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 428.422530][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.440863][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 428.449993][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.609397][ T23] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 428.718084][ T27] usb 5-1: GET_CAPABILITIES returned 0 [ 428.723716][ T27] usbtmc 5-1:16.0: can't read capabilities [ 428.857633][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 428.938854][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 428.948005][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 428.957088][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 428.966155][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 428.975234][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 428.984316][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 428.993414][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.002505][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.011607][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.020696][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.029871][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.039005][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.048113][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.057216][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.066325][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.075514][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.127758][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 429.144813][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 429.154924][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 429.165153][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 429.178362][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 429.187478][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:28:49 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:49 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:49 executing program 5: clock_gettime(0x0, &(0x7f0000000180)={0x0}) select(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x7}, 0x0, &(0x7f00000001c0)={r0}) [ 429.338753][ T5141] usb 3-1: USB disconnect, device number 52 [ 429.462436][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 429.468221][ T23] usbtmc 2-1:16.0: can't read capabilities [ 429.477642][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.486809][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.495922][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.505033][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.514171][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.523291][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.532485][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.541629][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.550930][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.560041][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.569163][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.578359][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.587528][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.597028][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.606519][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.615645][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 429.977688][ T5141] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 430.217730][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 430.337749][ T5141] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 430.349093][ T5141] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 430.359255][ T5141] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.369423][ T5141] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.385196][ T5141] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 430.394353][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:28:50 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) dup3(r3, r5, 0x0) 18:28:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x5, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:50 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x400, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 18:28:50 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 430.526630][ T5136] usb 5-1: USB disconnect, device number 36 18:28:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x6, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 18:28:50 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 430.672976][ T5141] usb 3-1: GET_CAPABILITIES returned 0 [ 430.698648][ T5141] usbtmc 3-1:16.0: can't read capabilities [ 430.807664][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.816810][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.825888][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.834970][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.844075][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.853185][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.862266][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.871348][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.880432][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.889516][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.898601][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.907694][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.916771][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.925939][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.935016][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 430.944097][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 431.179429][ T5136] usb 5-1: new high-speed USB device number 37 using dummy_hcd 18:28:51 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 431.289862][ T5139] usb 2-1: USB disconnect, device number 71 [ 431.457586][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 431.587759][ T5136] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 431.598968][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 431.611567][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 431.621735][ T5136] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 431.637186][ T5136] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 431.646664][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.787622][ T5139] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 431.910856][ T5136] usb 5-1: GET_CAPABILITIES returned 0 [ 431.916424][ T5136] usbtmc 5-1:16.0: can't read capabilities [ 432.037611][ T5139] usb 2-1: Using ep0 maxpacket: 8 [ 432.127599][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.136762][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.145957][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.155072][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.164144][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.173226][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.182360][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.191458][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.200532][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.209613][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.218711][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.227802][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.236933][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.246020][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.255115][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.264308][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.309727][ T5139] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 432.321609][ T5139] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 432.333062][ T5139] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 432.343243][ T5139] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.356464][ T5139] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 432.365789][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:28:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0x1) 18:28:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x7, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:52 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:52 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 432.417719][ T5141] usb 3-1: USB disconnect, device number 53 [ 432.627783][ T5139] usb 2-1: GET_CAPABILITIES returned 0 [ 432.633614][ T5139] usbtmc 2-1:16.0: can't read capabilities [ 432.917613][ T5141] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 433.157796][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 433.278930][ T5141] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 433.290481][ T5141] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 433.301008][ T5141] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 433.311020][ T5141] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.324102][ T5141] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 433.335810][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:28:53 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r3, 0x0) 18:28:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x8, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:53 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 433.595950][ T5136] usb 5-1: USB disconnect, device number 37 [ 433.616093][ T5141] usb 3-1: GET_CAPABILITIES returned 0 [ 433.633572][ T5141] usbtmc 3-1:16.0: can't read capabilities 18:28:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x9, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:53 executing program 5: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 433.727608][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.736902][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.746069][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.755257][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.764431][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.773579][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.782729][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.791895][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.801157][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.810312][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 18:28:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4e23}}}, 0x4c}}, 0x0) [ 433.819472][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.828638][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.837774][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.846869][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.855980][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.865262][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 433.938184][T10483] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 434.207944][ T5136] usb 5-1: new high-speed USB device number 38 using dummy_hcd 18:28:54 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:54 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe00}}}, 0x4c}}, 0x0) [ 434.338826][ T5131] usb 2-1: USB disconnect, device number 72 [ 434.378126][T10485] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 434.457626][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 434.588075][ T5136] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 434.600577][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 434.611601][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.621879][ T5136] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.635153][ T5136] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.644490][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.847647][ T5131] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 434.908204][ T5136] usb 5-1: GET_CAPABILITIES returned 0 [ 434.913732][ T5136] usbtmc 5-1:16.0: can't read capabilities [ 435.092464][ T5131] usb 2-1: Using ep0 maxpacket: 8 [ 435.137603][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.147007][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.156090][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.165276][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.174393][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.183582][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.192752][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.201877][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.211016][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.220149][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.229238][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.238314][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.247390][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.256474][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.265672][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.274872][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 435.357987][ T5131] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 435.369974][ T5131] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 435.380072][ T5131] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.392649][ T5131] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.411372][ T5131] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 435.420479][ T5131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:28:55 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 435.502770][ T5139] usb 3-1: USB disconnect, device number 54 [ 435.688497][ T5131] usb 2-1: GET_CAPABILITIES returned 0 [ 435.694056][ T5131] usbtmc 2-1:16.0: can't read capabilities [ 435.937605][ T5139] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 436.199785][ T5139] usb 3-1: Using ep0 maxpacket: 8 [ 436.329439][ T5139] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 436.340697][ T5139] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 436.351238][ T5139] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.361203][ T5139] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.374230][ T5139] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 436.383333][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:28:56 executing program 4: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r3, 0x0) 18:28:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) ioprio_set$uid(0x3, 0xee01, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x33fe0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x4c}, 0x4c}}, 0x0) 18:28:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xf, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:56 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 436.651267][ T5139] usb 3-1: GET_CAPABILITIES returned 0 [ 436.656905][ T5139] usbtmc 3-1:16.0: can't read capabilities [ 436.680325][ T5131] usb 5-1: USB disconnect, device number 38 18:28:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="000001"], 0x33fe0}}, 0x0) 18:28:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x1c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:56 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 436.856790][ T5139] usb 3-1: USB disconnect, device number 55 [ 437.217860][ T5131] usb 5-1: new high-speed USB device number 39 using dummy_hcd 18:28:57 executing program 5: syz_open_dev$video(&(0x7f0000000140), 0xfffff000, 0x80443) 18:28:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x60, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:57 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:57 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:57 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 437.421396][ T5141] usb 2-1: USB disconnect, device number 73 [ 437.475181][ T5131] usb 5-1: Using ep0 maxpacket: 8 [ 437.608192][ T5131] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 437.623736][ T5131] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 437.634942][ T5131] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 437.647735][ T5131] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.661172][ T5131] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 437.670332][ T5131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.779536][ T23] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 437.907733][ T5141] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 437.938135][ T5131] usb 5-1: GET_CAPABILITIES returned 0 [ 437.943719][ T5131] usbtmc 5-1:16.0: can't read capabilities [ 438.037662][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 438.157648][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.166781][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.175863][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.184939][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.194034][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.203117][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.212201][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.221287][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.230364][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.239451][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.248538][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.257714][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.266793][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.275870][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.284953][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.294033][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.317791][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 438.329117][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 438.339197][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.349183][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.363870][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 438.372999][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.383099][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 438.528159][ T5141] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 438.543560][ T5141] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 438.553663][ T5141] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.566091][ T5141] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.579690][ T5141] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 438.588913][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.658117][ T23] usb 3-1: GET_CAPABILITIES returned 0 [ 438.663698][ T23] usbtmc 3-1:16.0: can't read capabilities [ 438.857986][ T5141] usb 2-1: GET_CAPABILITIES returned 0 [ 438.863709][ T5141] usbtmc 2-1:16.0: can't read capabilities [ 438.868119][ T5135] usb 3-1: USB disconnect, device number 56 [ 438.877639][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.886820][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.895987][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.905161][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.914317][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.923460][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.932610][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.941705][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.950800][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.959885][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.968971][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.978067][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.987244][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 438.996350][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.005447][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.014561][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.067747][ T5141] usb 2-1: USB disconnect, device number 74 [ 439.077627][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.086766][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.095853][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.104977][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.114094][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.123176][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.132259][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.141350][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.150432][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.159499][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.168619][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.177759][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.186889][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.195984][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.205072][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 439.214183][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 18:28:59 executing program 4: semget$private(0x0, 0x5, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:59 executing program 5: syz_open_dev$video(&(0x7f00000000c0), 0x7ff, 0x86000) 18:28:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:59 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:28:59 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:28:59 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 439.751279][ T23] usb 5-1: USB disconnect, device number 39 18:28:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x4c}, 0xf}}, 0x0) 18:28:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x2ec, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:59 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x0, 0x0, 0x2}, 0x9a) 18:28:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x300, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:28:59 executing program 5: bpf$MAP_CREATE(0x23, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 18:28:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x500, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 440.118167][ T5135] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 440.118525][ T9244] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 440.269516][ T23] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 440.357585][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 440.380716][ T9244] usb 3-1: Using ep0 maxpacket: 8 [ 440.479907][ T5135] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 440.491091][ T5135] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 440.501394][ T5135] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.508156][ T9244] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 440.512297][ T5135] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.512369][ T5135] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 440.512404][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.557060][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 440.562283][ T9244] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 440.572726][ T9244] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.582770][ T9244] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.595818][ T9244] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 440.608150][ T9244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.697917][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 440.711065][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 440.725096][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.736566][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.749639][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 440.757929][ T5135] usb 2-1: GET_CAPABILITIES returned 0 [ 440.758714][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.765093][ T5135] usbtmc 2-1:16.0: can't read capabilities [ 440.867784][ T9244] usb 3-1: GET_CAPABILITIES returned 0 [ 440.873434][ T9244] usbtmc 3-1:16.0: can't read capabilities [ 440.964074][ T5135] usb 2-1: USB disconnect, device number 75 [ 441.037834][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 441.043380][ T23] usbtmc 5-1:16.0: can't read capabilities [ 441.076053][ T23] usb 3-1: USB disconnect, device number 57 [ 441.087621][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.096755][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.105863][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.114973][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.124075][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.133167][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.142225][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.151315][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.160392][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.169479][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.178573][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.187644][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.196722][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.205805][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.214914][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.224065][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 441.252006][ T5141] usb 5-1: USB disconnect, device number 40 18:29:01 executing program 4: semget$private(0x0, 0x5, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x0, 0x0, 0x0, 0x5, 0x1}, 0x48) 18:29:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x600, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:01 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:01 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:01 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x700, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:01 executing program 5: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) 18:29:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x900, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:01 executing program 5: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop0', 0x1, 0x0) 18:29:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xe00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:01 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) [ 442.118619][ T9244] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 442.126238][ T23] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 442.377616][ T9244] usb 5-1: Using ep0 maxpacket: 8 [ 442.382790][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 442.517924][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 442.529419][ T9244] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 442.540708][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 442.550850][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 442.563019][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 442.573286][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 442.585578][ T9244] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.598700][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.613900][ T9244] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 442.623033][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 442.632166][ T9244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.640228][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.918110][ T9244] usb 5-1: GET_CAPABILITIES returned 0 [ 442.925911][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 442.931486][ T9244] usbtmc 5-1:16.0: can't read capabilities [ 442.937600][ T23] usbtmc 2-1:16.0: can't read capabilities [ 443.126904][ T5135] usb 2-1: USB disconnect, device number 76 [ 443.126962][ T9244] usb 5-1: USB disconnect, device number 41 [ 443.137638][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 18:29:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x48) 18:29:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:03 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:03 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, 0x0) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:03 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:03 executing program 4: semget$private(0x0, 0x5, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:03 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9) 18:29:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x1c00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x3f00, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030000001d725be41e8e39"], 0x14}}, 0x0) 18:29:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x6000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x0, 0x0, 0xc, {0xc, 0x0, "02579b0258771b654ebc"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000640)={0x0, 0x0, 0x4, "a92d00bd"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001b40)={0x2c, &(0x7f0000001880)={0x0, 0x0, 0x4, "23ce70df"}, 0x0, 0x0, 0x0, 0x0}) 18:29:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xec02, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 444.090832][ T5141] usb 5-1: new high-speed USB device number 42 using dummy_hcd 18:29:04 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 444.229243][ T5139] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 444.347743][ T5141] usb 5-1: Using ep0 maxpacket: 8 [ 444.467567][ T5139] usb 6-1: Using ep0 maxpacket: 32 [ 444.469404][ T5141] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 444.486233][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 444.496935][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 18:29:04 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, 0x0) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 444.509607][ T5141] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.523069][ T5141] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.532199][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.588013][ T5139] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 444.602740][ T5139] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 444.623620][ T5139] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 444.633041][ T5139] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.645381][ T5139] usb 6-1: config 0 descriptor?? [ 444.670786][T10598] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 444.692076][ T5139] hub 6-1:0.0: USB hub found [ 444.789569][ T5141] usb 5-1: GET_CAPABILITIES returned 0 [ 444.795197][ T5141] usbtmc 5-1:16.0: can't read capabilities [ 444.907752][ T5139] hub 6-1:0.0: 2 ports detected [ 444.993819][ T5141] usb 5-1: USB disconnect, device number 42 [ 445.374389][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.381120][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 18:29:05 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:05 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:05 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:05 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, 0x0) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 445.828148][ T5135] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 445.837728][ T5136] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 446.017654][ T5135] usb 3-1: device descriptor read/64, error -71 [ 446.077933][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 446.197962][ T5136] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 446.210898][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 446.221908][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 446.232106][ T5136] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.247854][ T5136] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 446.257072][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.287661][ T5135] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 446.479648][ T5135] usb 3-1: device descriptor read/64, error -71 [ 446.527715][ T5136] usb 5-1: GET_CAPABILITIES returned 0 [ 446.533315][ T5136] usbtmc 5-1:16.0: can't read capabilities [ 446.599097][ T5135] usb usb3-port1: attempt power cycle [ 446.639369][ T5136] usb 6-1: USB disconnect, device number 21 [ 446.659241][ T5140] usb 6-1-port2: attempt power cycle [ 446.757593][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.767453][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.776902][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.786170][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.795439][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.804605][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.813701][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.822780][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.831981][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.841243][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.850328][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.859407][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.868510][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.877613][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.886731][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.895822][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 446.920818][ T27] usb 5-1: USB disconnect, device number 43 [ 447.007807][ T5135] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 447.097922][ T5135] usb 3-1: device descriptor read/8, error -71 18:29:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 18:29:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:07 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:07 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:07 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) [ 447.367690][ T5135] usb 3-1: new high-speed USB device number 61 using dummy_hcd 18:29:07 executing program 4: semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:07 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x1, 0xfffffffe, 0x500, 0x1}, 0x48) [ 447.467701][ T5135] usb 3-1: device descriptor read/8, error -71 [ 447.587921][ T5135] usb usb3-port1: unable to enumerate USB device [ 447.757591][ T9244] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 448.008384][ T9244] usb 5-1: Using ep0 maxpacket: 8 [ 448.128114][ T9244] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 448.139373][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 448.149451][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.159957][ T9244] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.176522][ T9244] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 448.186988][ T9244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.457732][ T9244] usb 5-1: GET_CAPABILITIES returned 0 [ 448.463316][ T9244] usbtmc 5-1:16.0: can't read capabilities 18:29:08 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) 18:29:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:08 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:08 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:08 executing program 5: r0 = syz_io_uring_setup(0x2eaf, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff]}, 0x1) 18:29:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x6000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4040ae79, 0x0) [ 448.657636][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.666835][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.675958][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.685080][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.694219][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.703342][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.712829][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.721944][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.731146][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.740250][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.749320][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.758388][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.767460][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.776529][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.785683][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 448.794760][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 18:29:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 448.844621][ T5135] usb 5-1: USB disconnect, device number 44 [ 448.898547][ T9244] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 449.099494][ T9244] usb 2-1: device descriptor read/64, error -71 [ 449.189488][ T5136] usb 3-1: new high-speed USB device number 62 using dummy_hcd 18:29:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x400000, 0x2, 0x4, 0x1}, 0x48) 18:29:09 executing program 4: semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 449.374208][ T9244] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 449.377605][ T5136] usb 3-1: device descriptor read/64, error -71 [ 449.579447][ T9244] usb 2-1: device descriptor read/64, error -71 [ 449.667615][ T5136] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 449.667716][ T5141] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 449.708398][ T9244] usb usb2-port1: attempt power cycle [ 449.859386][ T5136] usb 3-1: device descriptor read/64, error -71 [ 449.927684][ T5141] usb 5-1: Using ep0 maxpacket: 8 [ 449.979685][ T5136] usb usb3-port1: attempt power cycle [ 450.068018][ T5141] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 450.079271][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 450.091064][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.101460][ T5141] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.114695][ T5141] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 450.124539][ T9244] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 450.132172][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.227745][ T9244] usb 2-1: device descriptor read/8, error -71 [ 450.387639][ T5136] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 450.399720][ T5141] usb 5-1: GET_CAPABILITIES returned 0 [ 450.408756][ T5141] usbtmc 5-1:16.0: can't read capabilities [ 450.478831][ T5136] usb 3-1: device descriptor read/8, error -71 [ 450.507772][ T9244] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 450.603995][ T5135] usb 5-1: USB disconnect, device number 45 [ 450.608002][ T9244] usb 2-1: device descriptor read/8, error -71 [ 450.740745][ T9244] usb usb2-port1: unable to enumerate USB device [ 450.750982][ T5136] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 450.847685][ T5136] usb 3-1: device descriptor read/8, error -71 [ 450.972551][ T5136] usb usb3-port1: unable to enumerate USB device 18:29:11 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:11 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(0x0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x9000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:11 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x0, 0x2000}, 0x48) 18:29:11 executing program 4: semtimedop(0x0, 0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xe000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc00caee0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) 18:29:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x1c000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:11 executing program 5: mq_open(&(0x7f0000000000)='^+(\x00', 0x2, 0x1d0, &(0x7f0000000040)) 18:29:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x3f000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 452.027959][ T5136] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 452.035736][ T5139] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 452.047603][ T9244] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 452.227759][ T5136] usb 2-1: device descriptor read/64, error -71 [ 452.257600][ T9244] usb 3-1: device descriptor read/64, error -71 [ 452.309298][ T5139] usb 5-1: Using ep0 maxpacket: 8 [ 452.457762][ T5139] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 452.469578][ T5139] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 452.480330][ T5139] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 452.492392][ T5139] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 452.505842][ T5139] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 452.515391][ T5136] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 452.523051][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.533379][ T9244] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 452.727620][ T9244] usb 3-1: device descriptor read/64, error -71 [ 452.727735][ T5136] usb 2-1: device descriptor read/64, error -71 [ 452.807865][ T5139] usb 5-1: GET_CAPABILITIES returned 0 [ 452.813554][ T5139] usbtmc 5-1:16.0: can't read capabilities [ 452.848799][ T9244] usb usb3-port1: attempt power cycle [ 452.857952][ T5136] usb usb2-port1: attempt power cycle [ 453.012585][ T23] usb 5-1: USB disconnect, device number 46 [ 453.258217][ T9244] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 453.267596][ T5136] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 453.347831][ T9244] usb 3-1: device descriptor read/8, error -71 [ 453.357816][ T5136] usb 2-1: device descriptor read/8, error -71 [ 453.617846][ T9244] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 453.627590][ T5136] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 453.707698][ T9244] usb 3-1: device descriptor read/8, error -71 [ 453.717698][ T5136] usb 2-1: device descriptor read/8, error -71 [ 453.828104][ T9244] usb usb3-port1: unable to enumerate USB device [ 453.837811][ T5136] usb usb2-port1: unable to enumerate USB device 18:29:14 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}, 0x0) 18:29:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x60000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:14 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:14 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(0x0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:14 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:14 executing program 5: mq_open(&(0x7f0000000080)='^+(\x00', 0x0, 0x1d1, &(0x7f0000000040)) 18:29:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:14 executing program 5: mq_open(&(0x7f0000000000)='^+(\x00', 0x800, 0x0, &(0x7f00000000c0)) 18:29:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xec020000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:14 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18}, 0xfffffd26) write$FUSE_WRITE(r0, 0x0, 0x0) 18:29:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 455.028415][ T9244] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 455.147631][ T5136] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 455.197594][ T5140] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 455.297612][ T9244] usb 5-1: Using ep0 maxpacket: 8 [ 455.337653][ T5136] usb 3-1: device descriptor read/64, error -71 [ 455.388175][ T5140] usb 2-1: device descriptor read/64, error -71 [ 455.437964][ T9244] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 455.449255][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 455.462675][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 455.473036][ T9244] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.490177][ T9244] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 455.499599][ T9244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.610664][ T5136] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 455.657909][ T5140] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 455.769331][ T9244] usb 5-1: GET_CAPABILITIES returned 0 [ 455.775063][ T9244] usbtmc 5-1:16.0: can't read capabilities [ 455.807652][ T5136] usb 3-1: device descriptor read/64, error -71 [ 455.849596][ T5140] usb 2-1: device descriptor read/64, error -71 [ 455.927965][ T5136] usb usb3-port1: attempt power cycle [ 455.968074][ T5140] usb usb2-port1: attempt power cycle [ 455.987635][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 455.996778][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.005886][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.014993][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.024100][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.033203][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.042296][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.051411][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.060522][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.069723][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.078814][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.087923][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.097020][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.106216][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.115308][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.124393][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.145011][ T5139] usb 5-1: USB disconnect, device number 47 [ 456.427610][ T5140] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 456.435794][ T5136] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 456.517868][ T5140] usb 2-1: device descriptor read/8, error -71 [ 456.527892][ T5136] usb 3-1: device descriptor read/8, error -71 [ 456.788792][ T5140] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 456.797997][ T5136] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 456.903887][ T5136] usb 3-1: device descriptor read/8, error -71 [ 456.910186][ T5140] usb 2-1: device descriptor read/8, error -71 [ 457.038689][ T5140] usb usb2-port1: unable to enumerate USB device [ 457.045248][ T5136] usb usb3-port1: unable to enumerate USB device 18:29:17 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xfcffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:17 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(0x0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:17 executing program 5: mq_open(&(0x7f00000000c0)='%\x00', 0x800, 0x10, &(0x7f0000000100)) 18:29:17 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:17 executing program 4: semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:17 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000002ac0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 18:29:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:17 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0xfffffffffffffffc}], 0x2, 0x0, 0x1a8}, 0x0) 18:29:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:17 executing program 5: ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) unlink(0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000006bc0)='ns/uts\x00') [ 458.138089][ T9244] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 458.189468][ T5136] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 458.289479][ T5140] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 458.377629][ T5136] usb 3-1: device descriptor read/64, error -71 [ 458.387582][ T9244] usb 5-1: Using ep0 maxpacket: 8 [ 458.487684][ T5140] usb 2-1: device descriptor read/64, error -71 [ 458.509699][ T9244] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 458.520947][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 458.535739][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.545735][ T9244] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.559252][ T9244] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 458.568383][ T9244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.648476][ T5136] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 458.757620][ T5140] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 458.837708][ T9244] usb 5-1: GET_CAPABILITIES returned 0 [ 458.845838][ T9244] usbtmc 5-1:16.0: can't read capabilities [ 458.847586][ T5136] usb 3-1: device descriptor read/64, error -71 [ 458.959507][ T5140] usb 2-1: device descriptor read/64, error -71 [ 458.977988][ T5136] usb usb3-port1: attempt power cycle [ 459.044987][ T5139] usb 5-1: USB disconnect, device number 48 [ 459.078080][ T5140] usb usb2-port1: attempt power cycle [ 459.387598][ T5136] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 459.487698][ T5136] usb 3-1: device descriptor read/8, error -71 [ 459.498056][ T5140] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 459.588085][ T5140] usb 2-1: device descriptor read/8, error -71 [ 459.778629][ T5136] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 459.867804][ T5136] usb 3-1: device descriptor read/8, error -71 [ 459.874017][ T5140] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 459.987771][ T5140] usb 2-1: device descriptor read/8, error -71 [ 460.007835][ T5136] usb usb3-port1: unable to enumerate USB device [ 460.107890][ T5140] usb usb2-port1: unable to enumerate USB device 18:29:20 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) 18:29:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:20 executing program 4: semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:20 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:20 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:20 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001340)={r0}) 18:29:20 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:20 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001300)=@generic={&(0x7f00000012c0)='./file0\x00', 0x0, 0x10}, 0x18) 18:29:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:20 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001240)='ns/user\x00') 18:29:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 461.120444][ T5136] usb 5-1: new high-speed USB device number 49 using dummy_hcd 18:29:21 executing program 5: bpf$MAP_GET_NEXT_KEY(0x10, 0x0, 0x0) 18:29:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 461.238337][ T9244] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 461.359007][ T5141] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 461.388245][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 461.437595][ T9244] usb 3-1: device descriptor read/64, error -71 [ 461.528269][ T5136] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 461.542036][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 461.552662][ T5141] usb 2-1: device descriptor read/64, error -71 [ 461.553928][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 461.570428][ T5136] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 461.583519][ T5136] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 461.592634][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.717619][ T9244] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 461.837721][ T5141] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 461.850958][ T5136] usb 5-1: GET_CAPABILITIES returned 0 [ 461.856482][ T5136] usbtmc 5-1:16.0: can't read capabilities [ 461.907755][ T9244] usb 3-1: device descriptor read/64, error -71 [ 462.027873][ T5141] usb 2-1: device descriptor read/64, error -71 [ 462.037774][ T9244] usb usb3-port1: attempt power cycle [ 462.052838][ T5131] usb 5-1: USB disconnect, device number 49 [ 462.152427][ T5141] usb usb2-port1: attempt power cycle [ 462.447761][ T9244] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 462.537867][ T9244] usb 3-1: device descriptor read/8, error -71 [ 462.578168][ T5141] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 462.667708][ T5141] usb 2-1: device descriptor read/8, error -71 [ 462.807783][ T9244] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 462.897679][ T9244] usb 3-1: device descriptor read/8, error -71 [ 462.937617][ T5141] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 463.019086][ T9244] usb usb3-port1: unable to enumerate USB device [ 463.027896][ T5141] usb 2-1: device descriptor read/8, error -71 [ 463.151471][ T5141] usb usb2-port1: unable to enumerate USB device 18:29:23 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:23 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x10, 0x0) 18:29:23 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:23 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:23 executing program 4: semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:23 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 18:29:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:23 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x0, 0x1, &(0x7f00000017c0)=@raw=[@jmp], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 18:29:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x5, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:23 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@cgroup, 0xffffffffffffffff, 0x23}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000040), 0xfffffffffffffffe, 0x0) 18:29:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x6, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 464.277858][ T5141] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 464.289044][ T5139] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 464.417637][ T27] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 464.527640][ T5139] usb 3-1: Using ep0 maxpacket: 8 [ 464.537867][ T5141] usb 5-1: Using ep0 maxpacket: 8 [ 464.607615][ T27] usb 2-1: device descriptor read/64, error -71 [ 464.657834][ T5141] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 464.669300][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 464.677922][ T5139] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 464.681043][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 464.693874][ T5139] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 464.711857][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.717969][ T5141] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.735398][ T5141] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 464.744938][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.877839][ T27] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 465.007894][ T5141] usb 5-1: GET_CAPABILITIES returned 0 [ 465.013467][ T5141] usbtmc 5-1:16.0: can't read capabilities [ 465.067692][ T27] usb 2-1: device descriptor read/64, error -71 [ 465.190498][ T27] usb usb2-port1: attempt power cycle [ 465.214574][ T5141] usb 5-1: USB disconnect, device number 50 [ 465.599613][ T27] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 465.688314][ T27] usb 2-1: device descriptor read/8, error -71 [ 465.959614][ T27] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 466.057974][ T27] usb 2-1: device descriptor read/8, error -71 [ 466.179683][ T27] usb usb2-port1: unable to enumerate USB device 18:29:26 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:26 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={0x0, 0x0, 0x4010}, 0x18) 18:29:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x7, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:26 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 466.873162][ T5139] usb 3-1: USB disconnect, device number 82 18:29:26 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:26 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:26 executing program 5: mkdir(&(0x7f0000001480)='./file0\x00', 0x0) 18:29:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:26 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000840)={r0}) 18:29:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x9, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:27 executing program 5: openat$ppp(0xffffffffffffff9c, 0x0, 0x434641, 0x0) 18:29:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 467.357984][ T5139] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 467.365656][ T5136] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 467.477596][ T9244] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 467.607865][ T5139] usb 3-1: Using ep0 maxpacket: 8 [ 467.613189][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 467.717795][ T9244] usb 2-1: Using ep0 maxpacket: 8 [ 467.727879][ T5139] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 467.740320][ T5136] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 467.752190][ T5139] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 467.761603][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.773341][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 467.784938][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 467.798225][ T5136] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 467.813432][ T5136] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 467.822762][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.838792][ T9244] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 467.853798][ T9244] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 467.863995][ T9244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.097723][ T5136] usb 5-1: GET_CAPABILITIES returned 0 [ 468.103250][ T5136] usbtmc 5-1:16.0: can't read capabilities [ 468.407602][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.416748][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.425827][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.434908][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.443996][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.453176][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.462291][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.471379][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.480542][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.489614][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.498703][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.507793][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.516889][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.525974][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.535057][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 468.544137][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 18:29:29 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001280), 0x4) 18:29:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xf, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:29 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 469.962259][ T5139] usb 3-1: USB disconnect, device number 83 [ 470.058349][ T5140] usb 5-1: USB disconnect, device number 51 18:29:29 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8903, &(0x7f0000000840)) 18:29:29 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x1c, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:29 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 470.116010][ T9244] usb 2-1: USB disconnect, device number 101 18:29:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x60, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x0, 0x880, 0x1}, 0x48) 18:29:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xf0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@base={0x1e, 0x0, 0x3, 0x5}, 0x48) [ 470.429344][ T5139] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 470.617611][ T5139] usb 3-1: device descriptor read/64, error -71 [ 470.628161][ T5140] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 470.657598][ T9244] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 470.869453][ T5140] usb 5-1: Using ep0 maxpacket: 8 [ 470.887746][ T5139] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 470.919207][ T9244] usb 2-1: Using ep0 maxpacket: 8 [ 470.988073][ T5140] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 470.999390][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 471.009666][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 471.019994][ T5140] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 471.035022][ T5140] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 471.044234][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.058121][ T9244] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 471.073404][ T9244] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 471.082523][ T9244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.087952][ T5139] usb 3-1: device descriptor read/64, error -71 [ 471.208990][ T5139] usb usb3-port1: attempt power cycle [ 471.319021][ T5140] usb 5-1: GET_CAPABILITIES returned 0 [ 471.324631][ T5140] usbtmc 5-1:16.0: can't read capabilities [ 471.617621][ T5139] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 471.708031][ T5139] usb 3-1: device descriptor read/8, error -71 [ 471.717622][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.726774][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.735892][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.745002][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.755766][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.764948][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.774129][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.783218][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.792306][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.801390][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.810577][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.819777][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.828963][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.838046][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.847127][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 471.856215][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 472.019501][ T5139] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 472.107802][ T5139] usb 3-1: device descriptor read/8, error -71 [ 472.227823][ T5139] usb usb3-port1: unable to enumerate USB device 18:29:32 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x2ec, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:32 executing program 5: socketpair(0x1d, 0x0, 0x1005, &(0x7f0000000040)) 18:29:32 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:32 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) [ 473.137567][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.146752][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.155928][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.165143][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.174261][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.183461][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.192561][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.201680][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.210865][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.220051][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.229137][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.238212][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.247289][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.256370][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.265456][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 473.274616][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 18:29:33 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x300, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:33 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 18:29:33 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 473.327279][ T23] usb 2-1: USB disconnect, device number 102 [ 473.346563][ T5139] usb 5-1: USB disconnect, device number 52 18:29:33 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003700)={0x6, 0x5, &(0x7f0000003540)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x5}]}, &(0x7f0000003580)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x3b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000035c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000003600)={0x2, 0x3, 0xffff0000, 0x85}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000036c0)=[{0x4, 0x4, 0x5, 0x3}], 0x10, 0x7426b896}, 0x90) 18:29:33 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x3, 0x0) 18:29:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x500, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 473.587653][ T27] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 473.777631][ T27] usb 3-1: device descriptor read/64, error -71 [ 473.837624][ T23] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 473.977583][ T5139] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 474.027798][ T23] usb 2-1: device descriptor read/64, error -71 [ 474.047678][ T27] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 474.237724][ T27] usb 3-1: device descriptor read/64, error -71 [ 474.247573][ T5139] usb 5-1: Using ep0 maxpacket: 8 [ 474.297667][ T23] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 474.357761][ T27] usb usb3-port1: attempt power cycle [ 474.370498][ T5139] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 474.381795][ T5139] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 474.392116][ T5139] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.402249][ T5139] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.417638][ T5139] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 474.426709][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.487622][ T23] usb 2-1: device descriptor read/64, error -71 [ 474.609933][ T23] usb usb2-port1: attempt power cycle [ 474.697745][ T5139] usb 5-1: GET_CAPABILITIES returned 0 [ 474.705286][ T5139] usbtmc 5-1:16.0: can't read capabilities [ 474.768214][ T27] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 474.857961][ T27] usb 3-1: device descriptor read/8, error -71 [ 475.019270][ T23] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 475.107921][ T23] usb 2-1: device descriptor read/8, error -71 [ 475.127955][ T27] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 475.217706][ T27] usb 3-1: device descriptor read/8, error -71 [ 475.340267][ T27] usb usb3-port1: unable to enumerate USB device [ 475.377626][ T23] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 475.487915][ T23] usb 2-1: device descriptor read/8, error -71 [ 475.607853][ T23] usb usb2-port1: unable to enumerate USB device 18:29:35 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:35 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 18:29:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x600, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:35 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:35 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000040)=@abs, 0x6e, 0x0}, 0x0) [ 476.217583][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.226833][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.235942][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.245040][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.254174][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.263298][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.272432][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.281551][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.290656][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.299759][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.308907][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.318135][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.327239][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.336355][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.345457][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 476.354558][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 18:29:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x700, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:36 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:36 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 476.465166][ T5136] usb 5-1: USB disconnect, device number 53 18:29:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x900, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xe00, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 476.608095][ T5139] usb 3-1: new high-speed USB device number 92 using dummy_hcd 18:29:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x1c00, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 476.807597][ T5139] usb 3-1: device descriptor read/64, error -71 [ 476.899522][ T5140] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 476.917979][ T5136] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 477.078011][ T5139] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 477.088114][ T5140] usb 2-1: device descriptor read/64, error -71 [ 477.167614][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 477.267727][ T5139] usb 3-1: device descriptor read/64, error -71 [ 477.290322][ T5136] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 477.303030][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 477.313325][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 477.323285][ T5136] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 477.336316][ T5136] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 477.345423][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.368145][ T5140] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 477.390123][ T5139] usb usb3-port1: attempt power cycle [ 477.559484][ T5140] usb 2-1: device descriptor read/64, error -71 [ 477.607892][ T5136] usb 5-1: GET_CAPABILITIES returned 0 [ 477.613528][ T5136] usbtmc 5-1:16.0: can't read capabilities [ 477.678774][ T5140] usb usb2-port1: attempt power cycle [ 477.797585][ T5139] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 477.813858][ T27] usb 5-1: USB disconnect, device number 54 [ 477.887704][ T5139] usb 3-1: device descriptor read/8, error -71 [ 478.088202][ T5140] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 478.158101][ T5139] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 478.179613][ T5140] usb 2-1: device descriptor read/8, error -71 [ 478.247716][ T5139] usb 3-1: device descriptor read/8, error -71 [ 478.369796][ T5139] usb usb3-port1: unable to enumerate USB device [ 478.447781][ T5140] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 478.539823][ T5140] usb 2-1: device descriptor read/8, error -71 [ 478.659677][ T5140] usb usb2-port1: unable to enumerate USB device 18:29:39 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x3f00, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:39 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 18:29:39 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x6000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:39 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:39 executing program 5: bpf$BPF_PROG_QUERY(0x4, 0x0, 0x0) syz_clone(0x40000000, &(0x7f0000000e40)="a39f6a48978bbab73539dfba6173d91f2d6a95d3303c5a8c8e702bbf77cab8fe2ed4cc8326c2a56048623317dfdbbc95c3e74ecfdd02930eb25d227d06f1c72934d84607a84d886a13f769edb91532aa1cf19f0aa7f58e43cbdb2eab92ffb699dc0bd91b42f1acd5c9b37292665d9638441ca98a652468ff86d7eec8c08bb36dba967e21144e821238d3d6b6eaa56e7fedd70570a318350861edee374d648222af53889521ee2491971de9d6c8abd0c750c560fc0b3921f2370f4859829e1ad94afd2642df0d54b165b1498c7f8e40ad473dcdf524e02add96e1ff8d50cf6c722b788f3de0ddd275034746b0cdcc1510d89dbdb0a61508838520696e1eebf93a87fbb5c54498be911792e8e218a751a387832025e6c0fc04c61f655c00a02e33884a620d2ee8fcb18aa4b7574985e905d6a4a167bc4639496d6197e3aa7d44aba8e9369fbb0fcaf1b13cbc648da5b5945c3a12857a5355b1771604e9db6b2be68b4537b4f1eb9bee30f240a94331fd5a7f5390c32738a56ebbb1a6e232b1622364d6f9b46ca65b3dc8bb94e25fb9931dd7338483dfe8c0ded477e6b52ca48ff3c7736e137cf3fb690b502a964f6900ce3ef1ea87e0b0116c725edacff138c14610ed4564030a708f7391392e33017e5487c14aaf6ece6dcdb76a3af42daa054ad24f2b8395938fa5466d3660bc29fff469e1b91fbc28f471e7a977059afba04ff0299726219af95b467fa09ceaf7702873bd88ecb6d7cc59ab6b6a0d34184cc4af78d1f8ebee3158858897350c829a030247dfcf5339dbc06929adbeefb1466237b847370bf8db36bdba3ba0e65a2ec8dadf856adf6c71e4b099748d06ab825933c782a911350b8aea56d0655db48a5851201867f14b78295f5cb2b873fb2f2c2e4cd6b686cc99edd1eec985beee47260bb2a5d6b600b50d9aea399bd426e3c7f51d3a2dd16852d4d53e649fca5f4eace5667d16090b36c64539fbbc950602dcd9180c2c788c86da1fe5f0402d87710563ba77aa896c09f666615afab9e76f38eb05e25efdf1e0a5a08d2024999b2af321d8c0ce9cca9cf09235a483c53e4bae48f277db0de0ba8c8fd07f3fb16ac3f0155126a35f428d316b8fd9233a05d0bb25990068f90b88320af4f7ea9b75c693027c6ef5d916cbc73a8416e70579f4c57c9285bfad25afde08b0da7b8b04c21e00f569ed4d147b61572628598be094b6c390a4ca039dfd8977987b8d34584f0adc54ec696a0d3ad2aa4fb3d0068ce813a3b42e4650edfd02cd17b3fc3d5d0106d1d0b393fdc016064f68d27303029aef0f415160e680f1674a574ec7408aba400208a3b5802619c9ebda273f0af645d9f11d1b6e01a4fa66b985e23eed9360823069dc34651dfb428bc5c822f290abd5db5d6ee451e4a9d2b2fb44b9b34d04466b6f88c247becfb51c86424dc8298ff16690ec3dc19733a741bdccf4ecc60c8a9f3279578b1f4d2cea69a0717872b1d3dd5ab62aadcfd100c2a5bd0d24b859577d6f496e3666d93f9c45e92594a1bf99e32d00038969bb123470e5d210046d5ea735b142e8a197968780b675772b53b348971b8a884670c2e1f8c31351fc0808734c7c5ba1cff7a9f5e1a6b0a6811dfe82ae4cd8589b65bf5a4285bf53a08feb5b828382802bae672c7bd5a2ae84bf39be1808be8bd8f6d3c18a08b8cd32ca75ce95ac31cc5765a201bfe45573c2e4ee0785b1b4eb8cb10320bc3f84f4944f97fa0a840dba79ce5ac26c3e563a1dc08fce06206301fe0bcc31554b861139b6b688803325e407f244bcec9619e09714fa64a69c592a9993a5f381250dac17d57458e3a6f549f85e78e03c7962faefa3e6a3ac5ff1e412f96c12dbaacef9ea77158e55054096b7c638621d9f77f494f0455d5fce475f160c79cdbd6982c0bf94e071a4fb9ccd255a4e47d9f3ab105cb3b5501e11bf23a22d276707bf67df3a1b69046f3a7bcc1578dc51ba1bfd1822b72da173b475672901029dedcc41256d151f7bf0a326ef2462a04370298a3848660b7de04130a8300ab71707f760a670a3bf2e270655d306394efae9e3949962e88e057360afcecae1dc3a7c4d19adc2ccc142f4ef1bc2255e5b53d38d4510dda8f24b2950d5fab87b9c7176687cb43b23915f81991d2318055a3503c84f88ab29c6f7dae119a6d56e3c9c0bb4d6a39bd71702085b1d8043637e7f1ac03004f2f0c6917452a79a435f18fec37a67f55a71d3507fe0c50fdf548532dafe9c5ea4c05372fd39562440897833a7d753c4f9da5cb4e62115052fcb2900100a32ab50b1fa715de2bd3401cc9b0b13cde0711de652e8ca769cde70cf1791087938da910ef9c3bb99e84a9e163a810fc740b6727a349ceae1eadc40699e47861260e2e406f84d7bf42d8faa36971029433a8fa6a60d412f232ad140c79137ce7c6f8bfa23ec5749b28e9c43c81b46bdfc3590a16a5bda81ce017ec573d6bee02df49acbc14f6f8fcc47b728e5b99dd893e0e6a0c80375cfacd101a91fa718461816007474e2a9673f24f61aebc6e43ebc96815320f85ca30bae710b776ffc806027998789de9cb4bd47a93146833bbf9fb5c45389ebd116810d21689e22843d1ab585b6e93fd971e3e2c31aab85da7d610fd6155a49d4a5221d5d17844665c9c0b7ead9f33f0250404baf99d4bfaa261eb74981c409de17522bb5927aadd78575c7cf14048aff47bb5aafd8dce1f33bd6722352a69d4fc8fb309f11d679582086bbd5a7b7d7946b314101e8ba375bb109d32077c5779d4818c152e9f97d7004d45397425cf72b52ee46ccff672e99f7365caaa764285b92c57ea4141f1ad562bb155747cf0bcf8ef7352b80c711c38a225361afea3c4012b5bb6b19c8282ac762cc284cab45e4b6ff54010b6137af0fa6bf87a334a20aafbc122b3068e6b0c8d255f96ae1256bbc52d97853e8b2ec49990eea6548ccd28bd07f6d088d9957c805b0926c46d51422ec7cc59c050f98edb9cef0a94749c0728f06fac975e189a3cde9bbffdc5123b5bfc8f3cc53205119a06452c1f0f6475d6dc08f121754da6b5622a93a48567e31bfed6f14aa787052ec6b2241e7540ae00ccb3a045d0ebcf1d83516e3a5189a881f207029890a202f744ab5af036bbdb6803770cd11ba4866e3b523d17137d480064dc31f8405913de546717e9544c1a2efcdb69b17f937123010edb8a027e3f57a101dba4fa0299ca37187d17c6cf6b179d376951f0f98d6eb053867a838b834404566a1b0d8526d02f273cf59ed7407e1d195c89d98052b7e32baaa8f8becbc3e5856f44baea4adfd62f763c6bba73abdd19feb29a6931a3d33d9abb5b85b9fd387a752c12b72eba8eb505a70bba4c0f3ed26e4441d56b004b942658bf1b000978520e690591f45394f3cdbf738f42e6331d46a3b50a1b24139ebdca08dab04a517f2d596521479201b763326196d003ee1560d372fb58a0772210c80c1c6edc2d0e5e68a388c1d01ae4a702c7abebda67d37f56fefd4e1e65e23a9ee05bcfd022fd0458cbbe0661e2d36e8db504f27acbcdf3dcc5c8a0605b55a7508948c7dfd9ea5937d0a350d8553629456eff0df251a21f434a7c1b05878183fa810d727f27abb30cc7bc0a1a90b7cfddf4580d0f6922f601f21dd26c19935cfc7853f634dadd1fdf736903b8729d91ed2eb1eb13be26c760e20115fc255aac66f954a9e70e95167fded31b56d9ee3c4e7f5cb115b3ea0707bebf2d5b7d138fca05472a415f5f8871bf32cfd6f8b5d760896a16d13c2b689cc4122f19b32b91d0163f44708dc84bc1d28993bc02b9f34a872197b84121f7f6fee1b192ab388bc083a3b597c047d5b1dcf1c6f59f71b6955413355f3bd9a5ac713db5a06bcae26c250307e8699498b16c00874453820149f36632abd9142e89a66263788c8687f3e59810e151bd08ab63dae777228f642ca1274994837a303a239fc0d429b3708acf17810ff9643abfe55d635fa0d281bab66c7585e6347cceb14e1a457ccddee34b4c6871db9b2b465b05fc26c3217ca1489282f300449e8f62e49c04c75e27a45b6e099c2589dbb1638bdb4d14a2626326647c371e67e707695c31dbaa5068bfc9f290b57c1df5148cd59f5c72ba191ea155b5375aabd9520211fab2f2935ec02f452dfc56ab7013770ee2053929680d9a89db218a8c8ae63b042d7", 0xb9a, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="fc5a") 18:29:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xec02, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 479.477925][ T5140] usb 5-1: new high-speed USB device number 55 using dummy_hcd 18:29:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xf000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 479.657654][ T5139] usb 3-1: new high-speed USB device number 96 using dummy_hcd 18:29:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 479.731151][ T5140] usb 5-1: Using ep0 maxpacket: 8 [ 479.857926][ T5140] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 479.869147][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 479.879445][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.889504][ T5140] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.902611][ T5140] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.911741][ T5139] usb 3-1: Using ep0 maxpacket: 8 [ 479.917228][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.949190][ T5139] usb 3-1: no configurations [ 479.953829][ T5139] usb 3-1: can't read configurations, error -22 [ 479.977627][ T5135] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 480.107664][ T5139] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 480.169292][ T5135] usb 2-1: device descriptor read/64, error -71 [ 480.187733][ T5140] usb 5-1: GET_CAPABILITIES returned 0 [ 480.193268][ T5140] usbtmc 5-1:16.0: can't read capabilities [ 480.347764][ T5139] usb 3-1: Using ep0 maxpacket: 8 [ 480.393285][ T5139] usb 3-1: no configurations [ 480.401781][ T5139] usb 3-1: can't read configurations, error -22 [ 480.412562][ T5136] usb 5-1: USB disconnect, device number 55 [ 480.419045][ T5139] usb usb3-port1: attempt power cycle [ 480.427631][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.436875][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.445998][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.455150][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.464278][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.473404][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.482538][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.491657][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.500807][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.509901][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.519010][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.528096][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.537295][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.546382][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.555471][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.564563][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 480.583926][ T5135] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 480.777794][ T5135] usb 2-1: device descriptor read/64, error -71 [ 480.899693][ T5135] usb usb2-port1: attempt power cycle [ 481.007761][ T5139] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 481.107895][ T5139] usb 3-1: Using ep0 maxpacket: 8 [ 481.149097][ T5139] usb 3-1: no configurations [ 481.153821][ T5139] usb 3-1: can't read configurations, error -22 [ 481.307580][ T5139] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 481.317615][ T5135] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 481.397746][ T5139] usb 3-1: Using ep0 maxpacket: 8 [ 481.408112][ T5135] usb 2-1: device descriptor read/8, error -71 [ 481.437736][ T5139] usb 3-1: no configurations [ 481.442414][ T5139] usb 3-1: can't read configurations, error -22 [ 481.449214][ T5139] usb usb3-port1: unable to enumerate USB device [ 481.677824][ T5135] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 481.767835][ T5135] usb 2-1: device descriptor read/8, error -71 [ 481.888367][ T5135] usb usb2-port1: unable to enumerate USB device 18:29:42 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:42 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) 18:29:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:42 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:42 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:42 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 482.578214][ T9244] usb 5-1: new high-speed USB device number 56 using dummy_hcd 18:29:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x6000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x7000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 482.731963][ T5135] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 482.847663][ T9244] usb 5-1: Using ep0 maxpacket: 8 [ 482.977565][ T5135] usb 3-1: Using ep0 maxpacket: 8 [ 482.977758][ T9244] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 482.996030][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 483.008612][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 483.018170][ T5135] usb 3-1: no configurations [ 483.018822][ T9244] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.023124][ T5135] usb 3-1: can't read configurations, error -22 [ 483.040242][ T9244] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 483.043236][ T5136] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 483.055602][ T9244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.208029][ T5135] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 483.297562][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 483.337747][ T9244] usb 5-1: GET_CAPABILITIES returned 0 [ 483.340329][ T5136] usb 2-1: no configurations [ 483.343404][ T9244] usbtmc 5-1:16.0: can't read capabilities [ 483.348806][ T5136] usb 2-1: can't read configurations, error -22 [ 483.448147][ T5135] usb 3-1: Using ep0 maxpacket: 8 [ 483.487786][ T5135] usb 3-1: no configurations [ 483.492429][ T5135] usb 3-1: can't read configurations, error -22 [ 483.500318][ T5135] usb usb3-port1: attempt power cycle [ 483.517835][ T5136] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 483.548082][ T9244] usb 5-1: USB disconnect, device number 56 [ 483.778012][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 483.828975][ T5136] usb 2-1: no configurations [ 483.833659][ T5136] usb 2-1: can't read configurations, error -22 [ 483.841280][ T5136] usb usb2-port1: attempt power cycle [ 483.907779][ T5135] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 484.017864][ T5135] usb 3-1: Using ep0 maxpacket: 8 [ 484.061530][ T5135] usb 3-1: no configurations [ 484.066189][ T5135] usb 3-1: can't read configurations, error -22 [ 484.217574][ T5135] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 484.280556][ T5136] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 484.317929][ T5135] usb 3-1: Using ep0 maxpacket: 8 [ 484.368135][ T5135] usb 3-1: no configurations [ 484.372847][ T5135] usb 3-1: can't read configurations, error -22 [ 484.379709][ T5135] usb usb3-port1: unable to enumerate USB device [ 484.397774][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 484.440947][ T5136] usb 2-1: no configurations [ 484.445598][ T5136] usb 2-1: can't read configurations, error -22 [ 484.607639][ T5136] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 484.717867][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 484.767876][ T5136] usb 2-1: no configurations [ 484.772522][ T5136] usb 2-1: can't read configurations, error -22 [ 484.779118][ T5136] usb usb2-port1: unable to enumerate USB device 18:29:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:45 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x41, &(0x7f00000001c0)=@string={0x41, 0x3, "0edb147417e752f26aae1bdf3c403f3cc0851d0c8593fca28fed6149f038e828d98283523a8d7830f8b725900873dc3273ce56739cb1eb1e23f669970901db"}}]}) 18:29:45 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:29:45 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:45 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x9000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:45 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xe000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 485.617833][ T5135] usb 6-1: new high-speed USB device number 26 using dummy_hcd 18:29:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x1c000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x3f000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x60000000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x9effffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 485.817856][ T5136] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 485.879497][ T5135] usb 6-1: Using ep0 maxpacket: 16 [ 486.017991][ T5135] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.029113][ T5135] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.038981][ T5135] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 486.047737][ T9244] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 486.048988][ T5135] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 486.066296][ T5135] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 486.076184][ T5135] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 486.109314][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 486.149162][ T5136] usb 3-1: no configurations [ 486.153813][ T5136] usb 3-1: can't read configurations, error -22 [ 486.259225][ T5135] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.268763][ T5135] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.276800][ T5135] usb 6-1: Product: syz [ 486.283344][ T5135] usb 6-1: Manufacturer: 琔깪䀼㰿藀ఝ鎅ꋼ䥡㣰⣨苙劃贺へ럸逥猈㋜칳獖놜ừ革ĉ [ 486.287730][ T9244] usb 2-1: Using ep0 maxpacket: 8 [ 486.295256][ T5135] usb 6-1: SerialNumber: syz [ 486.307656][ T5136] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 486.339716][ T9244] usb 2-1: no configurations [ 486.344440][ T9244] usb 2-1: can't read configurations, error -22 [ 486.497783][ T9244] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 486.587854][ T5135] cdc_ncm 6-1:1.0: bind() failure [ 486.594406][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 486.605055][ T5135] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 486.612472][ T5135] cdc_ncm 6-1:1.1: bind() failure [ 486.624023][ T5135] usb 6-1: USB disconnect, device number 26 [ 486.648108][ T5136] usb 3-1: no configurations [ 486.652756][ T5136] usb 3-1: can't read configurations, error -22 [ 486.659584][ T5136] usb usb3-port1: attempt power cycle [ 486.737623][ T9244] usb 2-1: Using ep0 maxpacket: 8 [ 486.777878][ T9244] usb 2-1: no configurations [ 486.782575][ T9244] usb 2-1: can't read configurations, error -22 [ 486.790651][ T9244] usb usb2-port1: attempt power cycle 18:29:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xec020000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:46 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 487.087891][ T5136] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 487.207647][ T9244] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 487.227693][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 487.267760][ T5136] usb 3-1: no configurations [ 487.272417][ T5136] usb 3-1: can't read configurations, error -22 [ 487.297852][ T9244] usb 2-1: Using ep0 maxpacket: 8 [ 487.339161][ T9244] usb 2-1: no configurations [ 487.343820][ T9244] usb 2-1: can't read configurations, error -22 [ 487.427959][ T5136] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 487.497676][ T9244] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 487.527988][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 487.579507][ T5136] usb 3-1: no configurations [ 487.584207][ T5136] usb 3-1: can't read configurations, error -22 [ 487.588080][ T9244] usb 2-1: Using ep0 maxpacket: 8 [ 487.590832][ T5136] usb usb3-port1: unable to enumerate USB device [ 487.637778][ T9244] usb 2-1: no configurations [ 487.643705][ T9244] usb 2-1: can't read configurations, error -22 [ 487.651101][ T9244] usb usb2-port1: unable to enumerate USB device 18:29:48 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000002740)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000001240)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000002600)=[@rights, @rights, @rights, @cred, @rights, @rights, @cred], 0xe8}, 0x0) 18:29:48 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:48 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, 0x0) dup3(r1, r2, 0x0) 18:29:48 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xf0ffffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:48 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:48 executing program 5: mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0xe02) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/161, 0xa1}], 0x1) 18:29:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xfcffffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) getsockname$unix(r0, 0x0, 0x0) 18:29:48 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) writev(r0, &(0x7f0000000ac0)=[{&(0x7f0000000880)="f1d04494fbd638c4a64a81279a1852e73bdaf3c18e5bbe5fcd2b8db6344888f35297505600a7da639ec3c56a4c6b02784d905d82cd22a520a26b7a6ccbf8ac288b25", 0x42}, {&(0x7f0000000900)="fd05a6fc71de2a44ba35cda39338a27e713c2d9b8e54e02e8fa70bae66b149a8958e856caf95bee9c1fb23d8f4aea3111ea44e75a8f2b7dfaccb60aa8861dd4011c8df07aa24d2fe02c1f6eccb344b", 0x4f}], 0x2) 18:29:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xfffff000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:48 executing program 5: getrusage(0x0, &(0x7f0000000240)) 18:29:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 488.847581][ T9244] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 489.099099][ T9244] usb 3-1: Using ep0 maxpacket: 8 [ 489.127661][ T5136] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 489.218173][ T9244] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.228981][ T9244] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 489.239465][ T9244] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 489.250049][ T9244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.265514][ T9244] usb 3-1: config 0 descriptor?? [ 489.377942][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 489.425556][ T5136] usb 2-1: no configurations [ 489.430226][ T5136] usb 2-1: can't read configurations, error -22 [ 489.587588][ T5136] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 489.837570][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 489.889702][ T5136] usb 2-1: no configurations [ 489.894325][ T5136] usb 2-1: can't read configurations, error -22 [ 489.901040][ T5136] usb usb2-port1: attempt power cycle [ 490.317700][ T5136] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 490.428000][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 490.467991][ T5136] usb 2-1: no configurations [ 490.472685][ T5136] usb 2-1: can't read configurations, error -22 [ 490.647627][ T5136] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 490.747850][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 490.793089][ T5136] usb 2-1: no configurations [ 490.797774][ T5136] usb 2-1: can't read configurations, error -22 [ 490.806074][ T5136] usb usb2-port1: unable to enumerate USB device 18:29:51 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:51 executing program 5: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x20043, 0x0) [ 491.418282][ T5136] usb 3-1: USB disconnect, device number 108 18:29:51 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xffffff9e, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:51 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:51 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, 0x0) dup3(r1, r2, 0x0) 18:29:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2}}) 18:29:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xfffffff0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:51 executing program 5: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000080)) 18:29:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 491.838797][ T5136] usb 3-1: new high-speed USB device number 109 using dummy_hcd 18:29:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:51 executing program 5: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) getresgid(&(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)) [ 492.037948][ T5135] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 492.088548][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 492.157575][ T9244] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 492.218168][ T5136] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.230128][ T5136] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 492.239319][ T5135] usb 5-1: device descriptor read/64, error -71 [ 492.245807][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 492.254962][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.266478][ T5136] usb 3-1: config 0 descriptor?? [ 492.397570][ T9244] usb 2-1: Using ep0 maxpacket: 8 [ 492.517582][ T5135] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 492.517716][ T9244] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.540936][ T9244] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 492.551296][ T9244] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 492.561803][ T9244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.572498][ T9244] usb 2-1: config 0 descriptor?? [ 492.717585][ T5135] usb 5-1: device descriptor read/64, error -71 [ 492.838727][ T5135] usb usb5-port1: attempt power cycle [ 493.247637][ T5135] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 493.337824][ T5135] usb 5-1: device descriptor read/8, error -71 [ 493.607649][ T5135] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 493.701124][ T5135] usb 5-1: device descriptor read/8, error -71 [ 493.819021][ T5135] usb usb5-port1: unable to enumerate USB device 18:29:54 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 494.466220][ T5136] usb 3-1: USB disconnect, device number 109 18:29:54 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:54 executing program 5: ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000004c0)={0x0}) pipe2$watch_queue(&(0x7f0000000980), 0x80) 18:29:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:54 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, 0x0) dup3(r1, r2, 0x0) 18:29:54 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 494.769821][ T27] usb 2-1: USB disconnect, device number 127 18:29:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, &(0x7f0000000880)=@hci, &(0x7f0000000900)=0x80) 18:29:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x6}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 494.889147][ T5136] usb 3-1: new high-speed USB device number 110 using dummy_hcd 18:29:54 executing program 5: shmget(0x1, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_usbip_server_init(0x2) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) 18:29:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 495.009378][T11069] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 495.015967][T11069] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 495.025840][T11069] vhci_hcd vhci_hcd.0: Device attached [ 495.042256][T11070] vhci_hcd: connection closed [ 495.042576][ T42] vhci_hcd: stop threads [ 495.052835][ T42] vhci_hcd: release socket [ 495.057443][ T42] vhci_hcd: disconnect device [ 495.149258][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 495.247604][ T9244] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 495.267685][ T5136] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.267708][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 495.278054][ T5136] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 495.278116][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 495.305133][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.315622][ T5136] usb 3-1: config 0 descriptor?? [ 495.437586][ T9244] usb 5-1: device descriptor read/64, error -71 [ 495.537742][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 495.667933][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.678868][ T27] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 495.687966][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 495.697025][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.709984][ T27] usb 2-1: config 0 descriptor?? [ 495.717787][ T9244] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 495.928651][ T9244] usb 5-1: device descriptor read/64, error -71 [ 496.047848][ T9244] usb usb5-port1: attempt power cycle [ 496.457599][ T9244] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 496.547677][ T9244] usb 5-1: device descriptor read/8, error -71 [ 496.817570][ T9244] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 496.929465][ T9244] usb 5-1: device descriptor read/8, error -71 [ 497.057875][ T9244] usb usb5-port1: unable to enumerate USB device 18:29:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:57 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 497.523769][ T5136] usb 3-1: USB disconnect, device number 110 18:29:57 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:29:57 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000580)={{0x80}, 'port0\x00'}) 18:29:57 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) 18:29:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:29:57 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 497.883113][ T5139] usb 2-1: USB disconnect, device number 2 18:29:57 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) 18:29:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0xb}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 497.981926][ T5136] usb 3-1: new high-speed USB device number 111 using dummy_hcd 18:29:57 executing program 5: semtimedop(0x0, &(0x7f0000000000)=[{}, {}], 0x2, &(0x7f0000000080)) 18:29:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14}, 0x14}}, 0x0) sendmmsg(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="569b87dca7507174b754e56e6e5b93ad9dfdbc6b26dd5b28ef66b7fb4569d2adfe77bdb1bb93db9b662b7d42a9370f64f4a2819861ad00bf4a43a8a37720da521b57b004a12405", 0x47}, {&(0x7f0000000100)="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", 0xe7a}], 0x2}}, {{&(0x7f00000012c0)=@tipc, 0x80, &(0x7f0000001880)=[{&(0x7f0000001340)='\'', 0x1}], 0x1, &(0x7f0000001900)=[{0x28, 0x0, 0x0, "8a34eac00f8d09b05b8c96a4c2e66f1320"}], 0x28}}], 0x2, 0x0) 18:29:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 498.248191][ T9244] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 498.277916][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 498.367703][ T5139] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 498.400477][ T5136] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 498.412494][ T5136] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 498.421811][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 498.430902][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.440253][ T9244] usb 5-1: device descriptor read/64, error -71 [ 498.617634][ T5139] usb 2-1: Using ep0 maxpacket: 8 [ 498.727620][ T9244] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 498.737647][ T5139] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.752244][ T5139] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 498.761450][ T5139] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 498.772965][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.785524][ T5139] usb 2-1: config 0 descriptor?? [ 498.919533][ T9244] usb 5-1: device descriptor read/64, error -71 [ 499.038135][ T9244] usb usb5-port1: attempt power cycle [ 499.447643][ T9244] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 499.537952][ T9244] usb 5-1: device descriptor read/8, error -71 [ 499.807688][ T9244] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 499.897950][ T9244] usb 5-1: device descriptor read/8, error -71 [ 500.020265][ T9244] usb usb5-port1: unable to enumerate USB device 18:30:00 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:00 executing program 5: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) clock_gettime(0x2, &(0x7f0000000040)) [ 500.575322][ T23] usb 3-1: USB disconnect, device number 111 18:30:00 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0xe}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:00 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) 18:30:00 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 500.994434][ T5136] usb 2-1: USB disconnect, device number 3 [ 500.997625][ T23] usb 3-1: new high-speed USB device number 112 using dummy_hcd 18:30:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0xf}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x10}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x13}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 501.277804][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 501.378287][ T5138] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 501.399811][ T23] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 501.412666][ T23] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 501.424175][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 501.433297][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.469238][ T5136] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 501.579188][ T5138] usb 5-1: device descriptor read/64, error -71 [ 501.707584][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 501.827671][ T5136] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 501.838007][ T5136] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 501.848350][ T5138] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 501.855979][ T5136] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 501.865861][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.047782][ T5138] usb 5-1: device descriptor read/64, error -71 [ 502.168495][ T5138] usb usb5-port1: attempt power cycle [ 502.579593][ T5138] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 502.688945][ T5138] usb 5-1: device descriptor read/8, error -71 [ 502.976208][ T5138] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 503.087694][ T5138] usb 5-1: device descriptor read/8, error -71 [ 503.209291][ T5138] usb usb5-port1: unable to enumerate USB device 18:30:03 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 503.621382][ T5138] usb 3-1: USB disconnect, device number 112 18:30:03 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:03 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) 18:30:03 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0xfffffffc}, 0x8) 18:30:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x16}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:03 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 504.085287][ T27] usb 2-1: USB disconnect, device number 4 [ 504.097983][ T5138] usb 3-1: new high-speed USB device number 113 using dummy_hcd 18:30:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f00000002c0)) 18:30:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x17}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000080)="9a7d7ab4a122901348d04e953fd5c90207f21f0a8347972866a6e59030bfc832583aa1b9a61cd8fcf2a42eaac306980bbe868d5916fd34a7533a6098f85ca63bf57d3b83101faf3a2bce0994d3f82ca5d2b8a7589b631066d793cd414e8127871ae99ccf1e0597c032b8915c14d47b0b70952f2eab3f62b640954659dbc024ca74d9f8462d80f5b8344fd30167921b1a68144af28c6c28c40290c252707571ef71a0676eb37a402777286f3ea3", 0xad}, {&(0x7f0000000140)="26805299db35b050518fe8bda61d499067f99c86a8f1704f008ae49624433f4993a599f3a3810550ed6540902aa5fcc62e076c3337890d846ebe0d43cb0ef354c468d7ad0ea50063e222bf7729df9adcecc59178543f4c55a3604e512e4bd758c0726dffac8e00cca61a29b3e8a5fceeada0a9e1ae2450085d99321bc6f6142edff1644d481a530cc0c651cc0245dd2afd81f56b0b487207af7fc1125900c2436888", 0xa2}, {&(0x7f0000000200)="ec2d2ab2b7af4383085b477a5d4970223ba213d9bb08947b542b02fe9f9bfe1a219d060b25e31de4277be3af2aabff74d8215e0c755d4c8d1488569c8546fed1c8f764e4cb19751450cb349d8fa1ae286668ed0b8be463e653b304462dc10366e4c9fa116558fd4e154dfe7a43a987ad1bee5a7c449e0c", 0x77}, {&(0x7f0000000280)="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", 0xc36}, {&(0x7f0000001280)="deda33355ffd870ff5b8dcce6e8f8411a264d3cb71013550ff90a05226741fce3718f8dea95a384aef2ac220993bb21e7a83967f73e7ac4d009bf10e801c46603881e46c139a74bb74b8e115ddb6e5cf5e13fa288a5cc57778e51caa2df7c4b56b8b948999e3498ba40687333e7696cc457cb057574e3d7b7758e580eee18e257702377c199eb90515229c715892e9ed358297794d596a446cea95d6df0b9f22eecf92a244e5647c4d32728f4681ac478fe218185eb75915bedac8cbd1bcaab48f0b74e62d66", 0xc6}], 0x5}}], 0x1, 0x0) 18:30:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 504.369349][ T5138] usb 3-1: Using ep0 maxpacket: 8 [ 504.488744][ T5138] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 504.500458][ T5138] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 504.511270][ T5138] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 504.520514][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.538789][ T23] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 504.617637][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 504.727619][ T23] usb 5-1: device descriptor read/64, error -71 [ 504.857700][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 504.979852][ T27] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 504.990310][ T27] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 505.005446][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 505.014806][ T23] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 505.024197][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.217629][ T23] usb 5-1: device descriptor read/64, error -71 [ 505.338973][ T23] usb usb5-port1: attempt power cycle [ 505.757580][ T23] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 505.849638][ T23] usb 5-1: device descriptor read/8, error -71 [ 506.117644][ T23] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 506.207649][ T23] usb 5-1: device descriptor read/8, error -71 [ 506.330846][ T23] usb usb5-port1: unable to enumerate USB device 18:30:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) 18:30:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x1a}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 506.671379][ T23] usb 3-1: USB disconnect, device number 113 [ 506.822142][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.829698][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 18:30:07 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:07 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:07 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00), 0xc0880, 0x0) r1 = syz_io_uring_setup(0x7798, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x2, &(0x7f0000000440)=r0, 0x1) 18:30:07 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, 0xffffffffffffffff, 0x0) 18:30:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x1b}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:07 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 507.208458][ T5135] usb 2-1: USB disconnect, device number 5 18:30:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x1c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:07 executing program 5: socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8991, &(0x7f00000000c0)={'vxcan1\x00'}) 18:30:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x1d}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:07 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x801c581f, 0x0) 18:30:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x21}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:07 executing program 5: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic) [ 507.548536][ T5138] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 507.587585][ T5141] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 507.717772][ T5135] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 507.777582][ T5141] usb 5-1: device descriptor read/64, error -71 [ 507.807701][ T5138] usb 3-1: Using ep0 maxpacket: 8 [ 507.927904][ T5138] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 507.938466][ T5138] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 507.947610][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.968865][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 508.048212][ T5141] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 508.089145][ T5135] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 508.100566][ T5135] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 508.110807][ T5135] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 508.120627][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.247677][ T5141] usb 5-1: device descriptor read/64, error -71 [ 508.369485][ T5141] usb usb5-port1: attempt power cycle [ 508.777577][ T5141] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 508.867665][ T5141] usb 5-1: device descriptor read/8, error -71 [ 509.149390][ T5141] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 509.257809][ T5141] usb 5-1: device descriptor read/8, error -71 [ 509.380977][ T5141] usb usb5-port1: unable to enumerate USB device [ 510.274838][ T5138] usb 3-1: USB disconnect, device number 114 18:30:10 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040)) 18:30:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x25}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:10 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, 0xffffffffffffffff, 0x0) 18:30:10 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:10 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 510.324332][ T5135] usb 2-1: USB disconnect, device number 6 18:30:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x26}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 18:30:10 executing program 5: r0 = syz_io_uring_setup(0x7798, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x15, 0x0, 0x1) 18:30:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x27}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:10 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc08c5335, &(0x7f0000000100)) 18:30:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x28}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 510.707767][ T5136] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 510.817570][ T5135] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 510.825142][ T5138] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 510.947996][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 511.067886][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 511.072978][ T5138] usb 3-1: Using ep0 maxpacket: 8 [ 511.078805][ T5136] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 511.089353][ T5136] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 511.098484][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.207728][ T5138] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 511.218521][ T5135] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 511.230558][ T5138] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 511.239826][ T5135] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 511.249037][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.257129][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.383677][ T5135] usb 5-1: USB disconnect, device number 81 [ 513.417274][ T5136] usb 3-1: USB disconnect, device number 115 18:30:13 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x2b}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:13 executing program 5: socketpair(0xa, 0x0, 0x1000, &(0x7f0000000100)) 18:30:13 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, 0xffffffffffffffff, 0x0) 18:30:13 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:13 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 513.453149][ T27] usb 2-1: USB disconnect, device number 7 18:30:13 executing program 5: syz_open_dev$mouse(&(0x7f0000000280), 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x2}, &(0x7f0000000180), &(0x7f00000001c0), 0x0) 18:30:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:13 executing program 5: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='id_legacy\x00', 0x0) 18:30:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x2e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:13 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x140, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, 0x0) 18:30:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x30}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 513.907573][ T5136] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 513.927652][ T5135] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 513.977623][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 514.147573][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 514.167998][ T5135] usb 5-1: Using ep0 maxpacket: 8 [ 514.238259][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 514.268141][ T5136] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 514.278684][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 514.288570][ T5135] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 514.298850][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.310720][ T5135] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 514.320037][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.378082][ T27] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 514.394574][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 514.405301][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.528977][ T23] usb 3-1: USB disconnect, device number 116 [ 516.543616][ T27] usb 5-1: USB disconnect, device number 82 18:30:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x31}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:16 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x86240, 0x0) 18:30:16 executing program 3: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f00000000c0)={0x0}) 18:30:16 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r1, 0x0) 18:30:16 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:16 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 516.597079][ T5135] usb 2-1: USB disconnect, device number 8 18:30:16 executing program 3: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)='g', 0x1}], 0xfffff, 0x0) 18:30:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x32}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:16 executing program 5: bpf$PROG_LOAD(0x18, 0x0, 0x0) 18:30:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1e, 0x5, 0x0, 0x0, 0x88, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) 18:30:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x34}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:16 executing program 5: write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000000)={0x10}, 0x10) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1004, &(0x7f0000000600)) 18:30:16 executing program 5: socket(0x22, 0x0, 0xfffffff8) 18:30:16 executing program 3: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) 18:30:16 executing program 5: bpf$PROG_LOAD(0x9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) [ 517.048243][ T23] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 517.077868][ T27] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 517.127622][ T5135] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 517.287835][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 517.317746][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 517.367567][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 517.408419][ T23] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 517.420006][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 517.431932][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.457757][ T27] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 517.469051][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 517.479630][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.488484][ T5135] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 517.499305][ T5135] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 517.509482][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.701564][ T27] usb 3-1: USB disconnect, device number 117 18:30:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x35}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 519.679787][ T23] usb 5-1: USB disconnect, device number 83 18:30:19 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r1, 0x0) 18:30:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x0, 0xa}, 0x48) 18:30:19 executing program 5: keyctl$instantiate_iov(0x7, 0x0, 0x0, 0x0, 0x0) 18:30:19 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r1, 0x0) 18:30:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x36}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:19 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 519.723174][ T5139] usb 2-1: USB disconnect, device number 9 18:30:19 executing program 3: bpf$PROG_LOAD(0x13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 18:30:19 executing program 5: mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 18:30:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x37}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:19 executing program 3: arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x2003, 0x0) 18:30:19 executing program 5: add_key$fscrypt_v1(&(0x7f0000000900), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone3(&(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:30:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 520.117591][ T27] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 520.167767][ T5139] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 520.197676][ T23] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 520.357568][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 520.427958][ T5139] usb 2-1: Using ep0 maxpacket: 8 [ 520.437725][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 520.477723][ T27] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 520.492468][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 520.501600][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.558331][ T5139] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 520.567731][ T23] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 520.569473][ T5139] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 520.588387][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.588464][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 520.588505][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.620303][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.639810][ T23] usbtmc 5-1:16.0: bulk endpoints not found [ 520.753175][ T5139] usb 3-1: USB disconnect, device number 118 [ 520.873339][ T23] usb 2-1: USB disconnect, device number 10 18:30:21 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r1, 0x0) 18:30:21 executing program 3: add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) 18:30:21 executing program 5: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x4001, 0x0) 18:30:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:21 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r1, 0x0) [ 521.727563][ T5139] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 521.737982][ T5138] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 521.967900][ T5139] usb 2-1: Using ep0 maxpacket: 8 [ 521.977588][ T5138] usb 3-1: Using ep0 maxpacket: 8 [ 522.087722][ T5139] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 522.098253][ T5138] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 522.108821][ T5139] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 522.118877][ T5138] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 522.128764][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.138323][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.395135][ T5135] usb 2-1: USB disconnect, device number 11 [ 522.409996][ T5138] usb 3-1: USB disconnect, device number 119 18:30:22 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}}) 18:30:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x3a}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288d", 0x4) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x7000000}}], 0xe10d, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) sendfile(r3, r0, &(0x7f0000004f00), 0x5) [ 522.811627][ T5138] usb 5-1: USB disconnect, device number 84 18:30:22 executing program 3: write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000000)={0x10}, 0x10) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1003, &(0x7f0000000600)) 18:30:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x3b}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:22 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r1, 0x0) 18:30:22 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:22 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x38}, 0x18) sendto$phonet(0xffffffffffffffff, &(0x7f0000000180)="84", 0x1, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) 18:30:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x3e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:22 executing program 3: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xffffffff) [ 523.317768][ T5138] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 523.326640][ T5136] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 523.337616][ T5135] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 523.567651][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 523.572798][ T5138] usb 5-1: Using ep0 maxpacket: 8 [ 523.618226][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 523.700498][ T5138] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 523.710872][ T5136] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 523.725071][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 523.734427][ T5138] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.747772][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.756982][ T5138] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 523.768384][ T5135] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 523.780804][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.788999][ T5135] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 523.800038][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.850608][ T5138] usbtmc 5-1:16.0: bulk endpoints not found [ 524.062850][ T5135] usb 2-1: USB disconnect, device number 12 18:30:25 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:25 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 18:30:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x41}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:25 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f00000005c0)="6570d43b952f6da7ff") 18:30:25 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 525.890804][ T5136] usb 5-1: USB disconnect, device number 85 18:30:25 executing program 3: pipe2$9p(&(0x7f0000000140), 0x4800) 18:30:25 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000440)=@raw=[@initr0, @alu={0x7}], &(0x7f0000000480)='GPL\x00', 0x1, 0x7c, &(0x7f00000004c0)=""/124, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b80), 0x10) 18:30:25 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:25 executing program 5: syz_io_uring_setup(0x274ae, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0xc0000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"197663a52f31296e049e6b62451ede5d", 0x0, 0x0, {0x1, 0x540}, {0x81, 0x7}, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x6, 0xad, 0x4, 0x7fffffffffffffff, 0x80000001, 0x9, 0xf511, 0x7fffffff]}) 18:30:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x43}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:25 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[], 0xad) [ 526.072018][ T23] usb 3-1: USB disconnect, device number 120 18:30:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x44}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 526.164086][T11373] QAT: Invalid ioctl -1060596699 [ 526.287616][ T5135] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 526.367610][ T5136] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 526.527582][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 526.557778][ T23] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 526.607576][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 526.677901][ T5135] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 526.688421][ T5135] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 526.699331][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.748161][ T5136] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 526.762995][ T5136] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.776142][ T5136] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 526.785268][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.797897][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 526.829719][ T5136] usbtmc 5-1:16.0: bulk endpoints not found [ 526.917827][ T23] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 526.929832][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 526.942511][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:30:28 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x45}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:28 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000000140)={0x90, 0x0, r2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0x90) 18:30:28 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x2, 0x0) [ 528.950961][ T23] usb 5-1: USB disconnect, device number 86 18:30:28 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:28 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x440, 0x0) fcntl$getownex(r0, 0x40a, 0x0) 18:30:28 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) [ 529.047872][ T5135] usb 2-1: USB disconnect, device number 13 18:30:29 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000680)=""/112, 0x70) 18:30:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x49}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:29 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)={0x98, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0xd}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "48a96d6936c4191527cc1f752d5405ffef4847ff55daa5a11b7962d165f465b3"}]}]}]}, 0x98}}, 0x0) [ 529.182026][ T27] usb 3-1: USB disconnect, device number 121 18:30:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x4a}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 529.437588][ T23] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 529.568130][ T5135] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 529.629762][ T27] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 529.679297][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 529.797724][ T23] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 529.811868][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 529.823046][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 529.827547][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 529.836349][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 529.851192][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 529.860283][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.877595][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 529.909105][ T23] usbtmc 5-1:16.0: bulk endpoints not found [ 529.958977][ T5135] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 529.969396][ T5135] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 529.979329][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.998207][ T27] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 530.009901][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 530.021399][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:30:31 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)={0x70, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x54, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a12d6fa5b97889795325a5c4b79991047d4927e907f9989da35a9d226fa9b2f6"}]}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x70}}, 0x0) 18:30:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x4b}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:31 executing program 5: syz_clone3(&(0x7f0000000440)={0x30000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 532.028888][ T27] usb 5-1: USB disconnect, device number 87 18:30:32 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x20, r1, 0x1, 0x0, 0x0, {0xd}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 18:30:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x4c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:32 executing program 3: socketpair(0xf, 0x3, 0x0, &(0x7f0000000100)) [ 532.168742][ T5135] usb 2-1: USB disconnect, device number 14 18:30:32 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x30}]}) 18:30:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x4f}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:32 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 532.288470][ T23] usb 3-1: USB disconnect, device number 122 18:30:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r1, 0x12be04cf192e5eb1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x40}}, 0x0) [ 532.517774][ T27] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 532.607624][ T5135] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 532.777656][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 532.783062][ T23] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 532.847836][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 532.909996][ T27] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 532.923764][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 532.935375][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 532.945432][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 532.959697][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 532.968842][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.970932][ T5135] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 532.991710][ T5135] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 533.002100][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.020312][ T27] usbtmc 5-1:16.0: bulk endpoints not found [ 533.047605][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 533.177735][ T23] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 533.192067][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 533.201417][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:30:34 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x51}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:34 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4d}]}) 18:30:34 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="c9", 0x1}], 0x1}, 0x0) [ 535.092385][ T5135] usb 5-1: USB disconnect, device number 88 18:30:35 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:35 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000002480)={0x2020}, 0x2020) 18:30:35 executing program 3: syz_clone3(&(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:30:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x52}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 535.251245][ T5136] usb 2-1: USB disconnect, device number 15 18:30:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x53}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:35 executing program 5: pselect6(0x40, &(0x7f0000000000)={0x80000000}, 0x0, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8}) 18:30:35 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 535.383951][ T23] usb 3-1: USB disconnect, device number 123 18:30:35 executing program 3: syz_open_dev$hiddev(&(0x7f0000000580), 0x0, 0x284902) [ 535.567899][ T5135] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 535.717988][ T5136] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 535.827563][ T5135] usb 5-1: Using ep0 maxpacket: 8 [ 535.857756][ T23] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 535.947669][ T5135] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 535.958143][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 535.963251][ T5135] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 535.974571][ T5135] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 535.984625][ T5135] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 535.997869][ T5135] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 536.006951][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.059454][ T5135] usbtmc 5-1:16.0: bulk endpoints not found [ 536.097685][ T5136] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 536.107994][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 536.113338][ T5136] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 536.122459][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.247742][ T23] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 536.260790][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 536.273318][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:30:38 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:38 executing program 3: r0 = epoll_create1(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 18:30:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x54}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:38 executing program 5: eventfd(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) [ 538.175175][ T5136] usb 5-1: USB disconnect, device number 89 18:30:38 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:38 executing program 3: setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr, @empty}, 0xffffffffffffff11) 18:30:38 executing program 5: capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000280)) 18:30:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x55}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 538.323894][ T5135] usb 2-1: USB disconnect, device number 16 18:30:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x57}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:38 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000003c0)={0x1}, 0x4) 18:30:38 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:38 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x5450, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f000000ab40)=0x1, 0x4) [ 538.490025][ T5141] usb 3-1: USB disconnect, device number 124 [ 538.647659][ T5136] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 538.847583][ T5135] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 538.897705][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 538.929440][ T5141] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 539.018869][ T5136] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 539.031734][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 539.041938][ T5136] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 539.052580][ T5136] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.065795][ T5136] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.074909][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.087580][ T5135] usb 2-1: Using ep0 maxpacket: 8 [ 539.119573][ T5136] usbtmc 5-1:16.0: bulk endpoints not found [ 539.167576][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 539.228272][ T5135] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 539.238592][ T5135] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.251229][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.290043][ T5141] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 539.301780][ T5141] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.311243][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:30:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x59}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:41 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x2, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 18:30:41 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x801c581f, 0x0) [ 541.245413][ T27] usb 5-1: USB disconnect, device number 90 18:30:41 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x5a}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:41 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) 18:30:41 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f000000ab40)=0x1, 0x4) [ 541.412114][ T5136] usb 2-1: USB disconnect, device number 17 18:30:41 executing program 3: syz_io_uring_setup(0x6ab5, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0x0, 0x0) 18:30:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 18:30:41 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x5c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000000c0)={@mcast2}, 0x14) 18:30:41 executing program 5: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) [ 541.595307][ T5139] usb 3-1: USB disconnect, device number 125 [ 541.729001][ T27] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 541.967604][ T5136] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 541.988587][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 542.087618][ T5139] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 542.119677][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 542.130969][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 542.141501][ T27] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 542.152102][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.165125][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 542.174497][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.207578][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 542.229218][ T27] usbtmc 5-1:16.0: bulk endpoints not found [ 542.327678][ T5136] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 542.337978][ T5139] usb 3-1: Using ep0 maxpacket: 8 [ 542.343167][ T5136] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 542.352277][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.457672][ T5139] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 542.468086][ T5139] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 542.477163][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:30:44 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:44 executing program 5: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) [ 544.335182][ T27] usb 5-1: USB disconnect, device number 91 18:30:44 executing program 3: set_mempolicy(0x0, &(0x7f0000000040), 0x9) 18:30:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x5d}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:44 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 544.499908][ T9244] usb 2-1: USB disconnect, device number 18 18:30:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x5e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:44 executing program 3: socket(0x3, 0x0, 0x8001) 18:30:44 executing program 3: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 18:30:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x5f}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:44 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 544.689657][ T5141] usb 3-1: USB disconnect, device number 126 18:30:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x60}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 544.757930][ T27] usb 5-1: new high-speed USB device number 92 using dummy_hcd 18:30:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x62}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 544.977721][ T9244] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 545.007575][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 545.127767][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 545.139025][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 545.149128][ T27] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 545.159756][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.174177][ T5141] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 545.182412][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 545.197441][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.237755][ T9244] usb 2-1: Using ep0 maxpacket: 8 [ 545.249701][ T27] usbtmc 5-1:16.0: bulk endpoints not found [ 545.357697][ T9244] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 545.371001][ T9244] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 545.380339][ T9244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.427969][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 545.547816][ T5141] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 545.558394][ T5141] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 545.567460][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:30:47 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:47 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002000)={0x2020}, 0x2020) 18:30:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 18:30:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x63}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 547.394596][ T5139] usb 5-1: USB disconnect, device number 92 18:30:47 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:47 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsn(&(0x7f0000000ac0), 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x200100) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x751280) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) memfd_create(&(0x7f0000000140)='\x00', 0x7) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000340)={"7d4faf26fbff098f5c6e73272d89df51", r3, 0x0, {0x8000}, {0x100000001, 0x9}, 0x1, [0x1000, 0xe1c, 0x8000000000000001, 0x8000000000000001, 0x40, 0x8000000000000000, 0x3, 0x3, 0xf2d, 0x7, 0x1, 0x4, 0x7, 0x6, 0x8, 0x3]}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x200100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) 18:30:47 executing program 5: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010000000010580419500000001900010902"], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 18:30:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x64}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 547.584921][ T9244] usb 2-1: USB disconnect, device number 19 18:30:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x65}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:47 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:47 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8913, &(0x7f00000020c0)={'wg1\x00'}) 18:30:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x66}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 547.757020][ T27] usb 3-1: USB disconnect, device number 127 [ 547.897720][ T5139] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 547.907601][ T5136] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 548.087599][ T9244] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 548.137569][ T5139] usb 5-1: Using ep0 maxpacket: 8 [ 548.147668][ T5136] usb 6-1: Using ep0 maxpacket: 16 [ 548.189835][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 548.257794][ T5139] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 548.269583][ T5136] usb 6-1: config 0 has no interfaces? [ 548.275214][ T5139] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 548.285558][ T5139] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 548.295658][ T5139] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 548.305551][ T5139] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 548.318857][ T5139] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 548.328219][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.340367][ T9244] usb 2-1: Using ep0 maxpacket: 8 [ 548.367792][ T5136] usb 6-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 548.377022][ T5136] usb 6-1: New USB device strings: Mfr=0, Product=25, SerialNumber=0 [ 548.385547][ T5136] usb 6-1: Product: syz [ 548.391194][ T5139] usbtmc: probe of 5-1:16.0 failed with error -22 [ 548.400952][ T5136] usb 6-1: config 0 descriptor?? [ 548.457743][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 548.478004][ T9244] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 548.488784][ T9244] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 548.497988][ T9244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.597944][ T27] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 548.608700][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 548.617815][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.671486][ T5136] usb 6-1: USB disconnect, device number 27 18:30:50 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:50 executing program 3: recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0xc0010003) 18:30:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x67}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:50 executing program 5: clock_gettime(0x0, &(0x7f00000013c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000016c0)) [ 550.472981][ T27] usb 5-1: USB disconnect, device number 93 18:30:50 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:50 executing program 3: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x8) 18:30:50 executing program 5: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x3, &(0x7f0000000b00)=@framed, &(0x7f0000000b40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000b80)={0x7}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000c40)=[{0x4, 0x0, 0xa}]}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001040)=@assoc_value, &(0x7f0000001080)=0x8) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) 18:30:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x6b}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 550.677846][ T5141] usb 2-1: USB disconnect, device number 20 18:30:50 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x89e1, &(0x7f00000020c0)={'wg1\x00'}) 18:30:50 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000001680)) 18:30:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x6c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:50 executing program 3: socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000001e80)) socketpair(0x0, 0x0, 0x0, &(0x7f0000001ec0)) [ 550.833266][ T5139] usb 3-1: USB disconnect, device number 2 [ 550.968817][ T27] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 551.167707][ T5141] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 551.217566][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 551.338260][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 551.349516][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 551.359821][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 551.369738][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 551.379692][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.392947][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 551.402102][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.417580][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 551.453659][ T27] usbtmc: probe of 5-1:16.0 failed with error -22 [ 551.537762][ T5141] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 551.552393][ T5141] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 551.561776][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:30:53 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:30:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x6d}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:53 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, 0x0) dup3(r0, r2, 0x0) 18:30:53 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) [ 553.573058][ T5141] usb 5-1: USB disconnect, device number 94 18:30:53 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, 0x0) dup3(r0, r2, 0x0) 18:30:53 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000080)) 18:30:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x72}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:53 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) [ 553.780121][ T5139] usb 2-1: USB disconnect, device number 21 18:30:53 executing program 5: pselect6(0x40, &(0x7f0000001d40), 0x0, &(0x7f0000001dc0)={0x7}, &(0x7f0000001e00)={0x0, 0x3938700}, 0x0) 18:30:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x73}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002640)={0x0, 0xb, &(0x7f0000001400)=@raw=[@cb_func, @exit, @exit, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000001480)='syzkaller\x00', 0x7, 0x1000, &(0x7f00000014c0)=""/4096, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000024c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000002500)={0x1, 0x8, 0x3ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000025c0)=[0xffffffffffffffff], &(0x7f0000002600)=[{}]}, 0x90) [ 553.877968][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd 18:30:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x74}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 553.998625][ T5141] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 554.127561][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 554.237571][ T5141] usb 5-1: Using ep0 maxpacket: 8 [ 554.247708][ T27] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 554.258596][ T27] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 554.267742][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.307842][ T5139] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 554.357822][ T5141] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 554.369963][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 554.382281][ T5141] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 554.393416][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 554.403313][ T5141] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 554.416412][ T5141] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 554.425642][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.470226][ T5141] usbtmc: probe of 5-1:16.0 failed with error -22 [ 554.567752][ T5139] usb 2-1: Using ep0 maxpacket: 8 [ 554.717665][ T5139] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 554.729951][ T5139] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 554.739455][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:30:56 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r1, 0x0) 18:30:56 executing program 3: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x20282, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000001c0)) 18:30:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x75}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:56 executing program 5: socket$inet(0x2, 0x0, 0xffffffe1) [ 556.642938][ T5139] usb 3-1: USB disconnect, device number 3 [ 556.656416][ T9244] usb 5-1: USB disconnect, device number 95 18:30:56 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, 0x0) dup3(r0, r2, 0x0) 18:30:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f0000000040)) 18:30:56 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, 0x0) dup3(r0, r2, 0x0) 18:30:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x76}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:56 executing program 3: mq_open(&(0x7f0000000000)=')][&{-,\\-%}@*-:)\',}#(,-%}&+\x00', 0x0, 0x0, 0x0) [ 556.856954][ T5141] usb 2-1: USB disconnect, device number 22 18:30:56 executing program 5: syz_open_dev$dri(&(0x7f00000001c0), 0x8000000000000001, 0x288142) 18:30:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x77}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}, @NFQA_CFG_FLAGS={0x8}]}, 0x24}}, 0x0) [ 557.137601][ T9244] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 557.169967][ T5139] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 557.367647][ T5141] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 557.377613][ T9244] usb 5-1: Using ep0 maxpacket: 8 [ 557.419549][ T5139] usb 3-1: Using ep0 maxpacket: 8 [ 557.497714][ T9244] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 557.510146][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 557.520246][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 557.530221][ T9244] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.543274][ T9244] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 557.554791][ T9244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.557787][ T5139] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 557.576399][ T5139] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 557.585803][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.607877][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 557.727721][ T5141] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 557.739064][ T5141] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 557.748189][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.829764][ T9244] usb 5-1: usb_control_msg returned -71 [ 557.835428][ T9244] usbtmc 5-1:16.0: can't read capabilities [ 557.855209][ T9244] usb 5-1: USB disconnect, device number 96 18:30:58 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r1, 0x0) 18:30:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x891d, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 18:30:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}, @CTA_ZONE={0x6}]}, 0x20}}, 0x0) 18:30:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x7a}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 558.677715][ T5141] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 558.927557][ T5141] usb 5-1: Using ep0 maxpacket: 8 [ 559.049851][ T5141] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 559.062378][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 559.072732][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 559.082804][ T5141] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 559.097150][ T5141] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 559.107207][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.379683][ T5141] usb 5-1: usb_control_msg returned -71 [ 559.385305][ T5141] usbtmc 5-1:16.0: can't read capabilities [ 559.409795][ T5141] usb 5-1: USB disconnect, device number 97 [ 559.902763][ T9244] usb 3-1: USB disconnect, device number 4 18:30:59 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, 0x0) dup3(r0, r2, 0x0) 18:30:59 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) 18:30:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8922, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) 18:30:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:59 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r1, 0x0) 18:30:59 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, 0x0) dup3(r0, r2, 0x0) [ 559.978375][ T5136] usb 2-1: USB disconnect, device number 23 18:30:59 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0x5452, &(0x7f00000000c0)=ANY=[]) [ 560.054851][T11681] ip6tnl0: mtu less than device minimum 18:30:59 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x1, &(0x7f0000000040)=@raw=[@jmp], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 18:30:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:30:59 executing program 3: openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x12180, 0x0) 18:31:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x50}}, 0x0) 18:31:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x24}}, 0x0) [ 560.331350][ T5139] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 560.457739][ T5136] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 560.477741][ T9244] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 560.597588][ T5139] usb 5-1: Using ep0 maxpacket: 8 [ 560.697795][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 560.719527][ T9244] usb 3-1: Using ep0 maxpacket: 8 [ 560.747993][ T5139] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 560.759672][ T5139] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 560.770637][ T5139] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 560.784435][ T5139] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 560.797516][ T5139] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 560.806582][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.838223][ T9244] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 560.848579][ T9244] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 560.858021][ T5136] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 560.858217][ T9244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.873459][ T5136] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 560.885748][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.077691][ T5139] usb 5-1: usb_control_msg returned -71 [ 561.083306][ T5139] usbtmc 5-1:16.0: can't read capabilities [ 561.097359][ T5139] usb 5-1: USB disconnect, device number 98 18:31:02 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) 18:31:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:02 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:31:02 executing program 3: syz_clone3(&(0x7f0000003000)={0x10010c400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002f80)=[0x0], 0x1}, 0x58) 18:31:02 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 563.055337][ T5136] usb 2-1: USB disconnect, device number 24 [ 563.068570][ T9244] usb 3-1: USB disconnect, device number 5 18:31:02 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) 18:31:03 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 18:31:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x4c, r1, 0x2fb, 0x0, 0x0, {0x4c}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) 18:31:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x3}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:03 executing program 3: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)) 18:31:03 executing program 5: syz_clone3(&(0x7f0000000580)={0x40080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1}, 0x58) 18:31:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x4}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 563.477818][ T5139] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 563.579694][ T5136] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 563.619745][ T9244] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 563.757870][ T5139] usb 5-1: Using ep0 maxpacket: 8 [ 563.837537][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 563.860342][ T9244] usb 3-1: Using ep0 maxpacket: 8 [ 563.907918][ T5139] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 563.919580][ T5139] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 563.931290][ T5139] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 563.941321][ T5139] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 563.954491][ T5139] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 563.963839][ T5139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.972201][ T5136] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 563.980556][ T9244] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 563.985875][ T5136] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 563.995845][ T9244] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 564.014937][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.020145][ T9244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.249342][ T5139] usb 5-1: usb_control_msg returned -71 [ 564.254956][ T5139] usbtmc 5-1:16.0: can't read capabilities [ 564.274293][ T5139] usb 5-1: USB disconnect, device number 99 18:31:06 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) 18:31:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017"], 0x24}}, 0x0) 18:31:06 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x0, 0x2, &(0x7f0000002140)=@raw=[@cb_func], &(0x7f0000002180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) 18:31:06 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 566.207373][ T9244] usb 2-1: USB disconnect, device number 25 18:31:06 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) [ 566.273163][ T5141] usb 3-1: USB disconnect, device number 6 18:31:06 executing program 5: socketpair(0x29, 0x2, 0x6, &(0x7f0000000040)) [ 566.318504][T11730] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 18:31:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x6}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:06 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 18:31:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_LINK={0x4}]}, 0x24}}, 0x0) 18:31:06 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz1'}, 0x4) 18:31:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x7}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 566.587851][ T27] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 566.737781][ T9244] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 566.817560][ T5141] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 566.828070][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 566.948260][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 566.961409][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 566.975252][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 566.985259][ T9244] usb 2-1: Using ep0 maxpacket: 8 [ 566.990377][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 567.003545][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 567.014898][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.057653][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 567.117998][ T9244] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 567.131472][ T9244] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 567.141014][ T9244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.181289][ T5141] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 567.194826][ T5141] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 567.206114][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.277765][ T27] usb 5-1: usb_control_msg returned -71 [ 567.285948][ T27] usbtmc 5-1:16.0: can't read capabilities [ 567.306447][ T27] usb 5-1: USB disconnect, device number 100 [ 568.253332][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.261363][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 18:31:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x300}, 0x0) 18:31:09 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map=0x1, 0xffffffffffffffff, 0x22}, 0x10) 18:31:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:09 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:09 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) [ 569.347857][ T5141] usb 2-1: USB disconnect, device number 26 18:31:09 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) 18:31:09 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x801c581f, 0x0) [ 569.419992][ T5139] usb 3-1: USB disconnect, device number 7 18:31:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x9}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:09 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800007dc9b1c5ce00000000000000cacab196f79f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={0x0}, 0x18) 18:31:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0xe}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:09 executing program 3: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x38) 18:31:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}}, 0x0) 18:31:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x2c}}, 0x0) 18:31:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0xf}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:09 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) [ 569.760300][ T27] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 569.867607][ T5141] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 569.927765][ T5139] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 570.037561][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 570.117860][ T5141] usb 2-1: Using ep0 maxpacket: 8 [ 570.167663][ T5139] usb 3-1: Using ep0 maxpacket: 8 [ 570.167877][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 570.184232][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 570.194316][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 570.204476][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.217947][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 570.227030][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.267703][ T5141] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 570.278030][ T5141] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 570.287104][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.287723][ T5139] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 570.313149][ T5139] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 570.322301][ T5139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.508806][ T27] usb 5-1: usb_control_msg returned -71 [ 570.514895][ T27] usbtmc 5-1:16.0: can't read capabilities [ 570.527573][ T27] usb 5-1: USB disconnect, device number 101 18:31:10 executing program 3: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000016c0), 0x2, 0x0) 18:31:12 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000fc0)) [ 572.447998][ T5139] usb 2-1: USB disconnect, device number 27 18:31:12 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, 0xffffffffffffffff, 0x0) 18:31:12 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x1c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:12 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, 0xffffffffffffffff, 0x0) 18:31:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000780)) 18:31:12 executing program 5: socket$kcm(0x29, 0x500, 0x0) [ 572.564337][ T5135] usb 3-1: USB disconnect, device number 8 18:31:12 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={0x0, 0x0, 0x30}, 0x18) 18:31:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x60}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:12 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r1, 0x0) 18:31:12 executing program 3: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 572.947576][ T5136] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 573.020004][ T5139] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 573.107877][ T5138] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 573.137849][ T5140] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 573.146679][ T5135] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 573.207623][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 573.287898][ T5139] usb 2-1: Using ep0 maxpacket: 8 [ 573.327832][ T5136] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 573.339588][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 573.349796][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 573.361613][ T5136] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.375103][ T5136] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 573.384799][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.392888][ T5138] usb 6-1: Using ep0 maxpacket: 8 [ 573.398242][ T5140] usb 4-1: Using ep0 maxpacket: 8 [ 573.407592][ T5135] usb 3-1: Using ep0 maxpacket: 8 [ 573.427953][ T5139] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 573.440125][ T5139] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 573.452628][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.538156][ T5138] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 573.549625][ T5140] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 573.560264][ T5135] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 573.571075][ T5140] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 573.582242][ T5138] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 573.592552][ T5135] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 573.603402][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.611709][ T5138] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 573.621943][ T5135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.636457][ T5138] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.656581][ T5138] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 573.676055][ T5136] usb 5-1: usb_control_msg returned -71 [ 573.691132][ T5136] usbtmc 5-1:16.0: can't read capabilities [ 573.699546][ T5138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.746708][ T5136] usb 5-1: USB disconnect, device number 102 [ 574.032632][ T5138] usb 6-1: usb_control_msg returned -71 [ 574.040532][ T5138] usbtmc 6-1:16.0: can't read capabilities [ 574.054865][ T5138] usb 6-1: USB disconnect, device number 28 [ 575.672556][ T9244] usb 2-1: USB disconnect, device number 28 18:31:15 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, 0xffffffffffffffff, 0x0) 18:31:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x3}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x37}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:15 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:15 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, 0xffffffffffffffff, 0x0) [ 575.714468][ T5136] usb 3-1: USB disconnect, device number 9 18:31:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x4}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:15 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x5}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:15 executing program 3: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 575.874998][ T27] usb 4-1: USB disconnect, device number 30 18:31:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x6}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x7}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 576.008473][ T23] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 576.137557][ T9244] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 576.177795][ T5138] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 576.227704][ T5136] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 576.247916][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 576.317626][ T27] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 576.369176][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 576.383302][ T9244] usb 2-1: Using ep0 maxpacket: 8 [ 576.388767][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 576.400787][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 576.411927][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.425144][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 576.434614][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.437599][ T5138] usb 6-1: Using ep0 maxpacket: 8 [ 576.499271][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 576.510019][ T9244] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 576.520569][ T9244] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 576.531883][ T9244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.557596][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 576.598407][ T5138] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 576.611370][ T5138] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 576.621018][ T5138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.648123][ T5136] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 576.658547][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 576.672002][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.680185][ T27] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 576.702846][ T23] usb 5-1: usb_control_msg returned -32 [ 576.715797][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 576.725270][ T23] usbtmc 5-1:16.0: can't read capabilities [ 576.733669][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.747216][ T23] usb 5-1: USB disconnect, device number 103 [ 578.767194][ T23] usb 2-1: USB disconnect, device number 29 18:31:18 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, 0xffffffffffffffff, 0x0) 18:31:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x9}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:18 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:18 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, 0xffffffffffffffff, 0x0) [ 578.833800][ T5136] usb 3-1: USB disconnect, device number 10 18:31:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0xe}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:18 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 578.938097][ T5140] usb 6-1: USB disconnect, device number 29 18:31:18 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:31:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0xf}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 578.999444][ T9244] usb 4-1: USB disconnect, device number 31 18:31:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x1c}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:18 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:31:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x60}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 579.138479][ T27] usb 5-1: new high-speed USB device number 104 using dummy_hcd 18:31:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0xf0}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 579.269224][ T23] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 579.358839][ T5136] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 579.388297][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 579.457581][ T5140] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 579.507554][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 579.532357][ T27] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 579.543563][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 579.553729][ T27] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 579.563919][ T27] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 579.578606][ T27] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 579.589018][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.601140][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 579.657713][ T23] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 579.668112][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 579.679768][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.698168][ T5140] usb 6-1: Using ep0 maxpacket: 8 [ 579.718371][ T5136] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 579.728812][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 579.738512][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.817668][ T5140] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 579.828200][ T5140] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 579.837263][ T5140] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.868131][ T27] usb 5-1: usb_control_msg returned -71 [ 579.880151][ T27] usbtmc 5-1:16.0: can't read capabilities [ 579.898117][ T27] usb 5-1: USB disconnect, device number 104 [ 581.880844][ T27] usb 2-1: USB disconnect, device number 30 18:31:21 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:31:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x2ec}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:21 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:21 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:31:21 executing program 2: semtimedop(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 581.935501][ T23] usb 3-1: USB disconnect, device number 11 18:31:21 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:21 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x3, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:31:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x300}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:21 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 582.077042][ T9244] usb 6-1: USB disconnect, device number 30 18:31:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x500}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0xfffff000, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x600}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:22 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x0, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, &(0x7f0000000140)) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) [ 582.268074][ T5140] usb 5-1: new high-speed USB device number 105 using dummy_hcd 18:31:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x700}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 582.479353][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 582.507788][ T5140] usb 5-1: Using ep0 maxpacket: 8 [ 582.547583][ T9244] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 582.627737][ T5140] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 582.639312][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 582.650269][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 582.662116][ T5140] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.675179][ T5140] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 582.684284][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.728175][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 582.789521][ T9244] usb 6-1: Using ep0 maxpacket: 8 [ 582.861532][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 582.873341][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 582.883942][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 582.895242][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.908648][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 582.917774][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.937679][ T9244] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 582.948964][ T5140] usb 5-1: GET_CAPABILITIES returned 0 [ 582.949038][ T5140] usbtmc 5-1:16.0: can't read capabilities [ 582.962824][ T9244] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 582.985066][ T9244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.154804][ T5138] usb 5-1: USB disconnect, device number 105 [ 583.190806][ T23] usb 3-1: GET_CAPABILITIES returned 0 [ 583.196348][ T23] usbtmc 3-1:16.0: can't read capabilities [ 583.403628][ T9244] usb 3-1: USB disconnect, device number 12 18:31:23 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:23 executing program 1: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x900}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 583.980627][ T9244] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 583.999802][ T23] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 584.227531][ T9244] usb 5-1: Using ep0 maxpacket: 8 [ 584.247960][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 584.347777][ T9244] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 584.359027][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 584.369538][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 584.382463][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 584.394671][ T9244] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.407748][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 584.420970][ T9244] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 584.430112][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 584.440164][ T9244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.449768][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.464023][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 584.475074][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.727813][ T9244] usb 5-1: GET_CAPABILITIES returned 0 [ 584.733382][ T9244] usbtmc 5-1:16.0: can't read capabilities [ 584.751059][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 584.758276][ T23] usbtmc 2-1:16.0: can't read capabilities [ 584.936158][ T5138] usb 5-1: USB disconnect, device number 106 [ 584.974091][ T23] usb 2-1: USB disconnect, device number 31 18:31:24 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) (fail_nth: 1) 18:31:24 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) (fail_nth: 1) 18:31:24 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) semtimedop(0x0, &(0x7f00000000c0)=[{0x1, 0x24, 0x1800}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0x2, 0x1800}, {0x2, 0xae, 0x1800}], 0x5, &(0x7f0000000140)={r1, r2+10000000}) semget(0x2, 0x3, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x401]) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r3, 0xffffffffffffffff, 0x0) 18:31:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0xe00}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 585.129999][ T5136] usb 6-1: USB disconnect, device number 31 18:31:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0xf00}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x1c00}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x3f00}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0x6000}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0xec02}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0xf000}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 585.447827][ T5138] usb 3-1: new high-speed USB device number 13 using dummy_hcd 18:31:25 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:25 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) (fail_nth: 1) [ 585.508623][ T23] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 585.629354][T11937] FAULT_INJECTION: forcing a failure. [ 585.629354][T11937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.642996][ T5136] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 585.651142][T11937] CPU: 1 PID: 11937 Comm: syz-executor.1 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 585.661433][T11937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 585.671499][T11937] Call Trace: [ 585.674797][T11937] [ 585.677750][T11937] dump_stack_lvl+0x125/0x1b0 [ 585.682484][T11937] should_fail_ex+0x496/0x5b0 [ 585.687244][T11937] _copy_to_user+0x30/0xb0 [ 585.691684][T11937] simple_read_from_buffer+0xd0/0x150 [ 585.697083][T11937] proc_fail_nth_read+0x1b0/0x290 [ 585.702159][T11937] ? proc_sessionid_read+0x290/0x290 [ 585.707485][T11937] ? security_file_permission+0xdc/0x100 [ 585.713198][T11937] ? proc_sessionid_read+0x290/0x290 [ 585.718556][T11937] vfs_read+0x1ce/0x930 [ 585.722732][T11937] ? kernel_read+0x1b0/0x1b0 [ 585.727342][T11937] ? __fget_files+0x279/0x410 [ 585.732039][T11937] ksys_read+0x12f/0x250 [ 585.736298][T11937] ? vfs_write+0xe40/0xe40 [ 585.740734][T11937] ? rcu_is_watching+0x12/0xb0 [ 585.745515][T11937] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 585.751549][T11937] do_syscall_64+0x38/0xb0 [ 585.755982][T11937] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 585.761927][T11937] RIP: 0033:0x7f49f227b78c [ 585.766411][T11937] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 585.786060][T11937] RSP: 002b:00007f49f30450c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 585.794488][T11937] RAX: ffffffffffffffda RBX: 00007f49f239c050 RCX: 00007f49f227b78c [ 585.798361][ T5138] usb 3-1: Using ep0 maxpacket: 8 [ 585.802456][T11937] RDX: 000000000000000f RSI: 00007f49f3045130 RDI: 0000000000000004 [ 585.802480][T11937] RBP: 00007f49f3045120 R08: 0000000000000000 R09: 0000000000000000 [ 585.802500][T11937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.831461][T11937] R13: 000000000000006e R14: 00007f49f239c050 R15: 00007f49f24bfa48 [ 585.839462][T11937] [ 585.868216][ T5140] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 585.887749][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 585.947979][ T5138] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 585.958690][ T5138] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 585.967986][ T5136] usb 6-1: Using ep0 maxpacket: 8 [ 585.973160][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.008003][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 586.022242][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 586.033191][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 586.043520][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.057040][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 586.067719][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.097802][ T5136] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 586.109384][ T5140] usb 5-1: Using ep0 maxpacket: 8 [ 586.114574][ T5136] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 586.125314][ T5136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.238606][ T5140] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 586.250343][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 586.260715][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 586.270699][ T5140] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.283751][ T5140] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 586.292959][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.358192][ T23] usb 4-1: GET_CAPABILITIES returned 0 [ 586.363772][ T23] usbtmc 4-1:16.0: can't read capabilities [ 586.570200][ T5140] usb 5-1: GET_CAPABILITIES returned 0 [ 586.572884][ T5141] usb 4-1: USB disconnect, device number 32 [ 586.576001][ T5140] usbtmc 5-1:16.0: can't read capabilities [ 586.601182][T11938] FAULT_INJECTION: forcing a failure. [ 586.601182][T11938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.617423][T11938] CPU: 0 PID: 11938 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 586.627587][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 586.637691][T11938] Call Trace: [ 586.640998][T11938] [ 586.643945][T11938] dump_stack_lvl+0x125/0x1b0 [ 586.648677][T11938] should_fail_ex+0x496/0x5b0 [ 586.653407][T11938] _copy_to_user+0x30/0xb0 [ 586.657845][T11938] simple_read_from_buffer+0xd0/0x150 [ 586.663239][T11938] proc_fail_nth_read+0x1b0/0x290 [ 586.668309][T11938] ? proc_sessionid_read+0x290/0x290 [ 586.673663][T11938] ? security_file_permission+0xdc/0x100 [ 586.679356][T11938] ? proc_sessionid_read+0x290/0x290 [ 586.684688][T11938] vfs_read+0x1ce/0x930 [ 586.688864][T11938] ? kernel_read+0x1b0/0x1b0 [ 586.693503][T11938] ? __fget_files+0x279/0x410 [ 586.698199][T11938] ksys_read+0x12f/0x250 [ 586.702481][T11938] ? vfs_write+0xe40/0xe40 [ 586.706913][T11938] ? rcu_is_watching+0x12/0xb0 [ 586.711704][T11938] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 586.717737][T11938] do_syscall_64+0x38/0xb0 [ 586.722187][T11938] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 586.728125][T11938] RIP: 0033:0x7ff80e27b78c [ 586.732582][T11938] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 586.752230][T11938] RSP: 002b:00007ff80ef870c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 586.760672][T11938] RAX: ffffffffffffffda RBX: 00007ff80e39c050 RCX: 00007ff80e27b78c [ 586.767567][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.768640][T11938] RDX: 000000000000000f RSI: 00007ff80ef87130 RDI: 0000000000000005 [ 586.777757][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.785636][T11938] RBP: 00007ff80ef87120 R08: 0000000000000000 R09: 0000000000000000 [ 586.794976][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.802699][T11938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.811929][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.819677][T11938] R13: 000000000000006e R14: 00007ff80e39c050 R15: 00007ff80e4bfa48 [ 586.828751][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.836660][T11938] [ 586.845714][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.857907][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.867062][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.876204][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.885323][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.894430][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.903527][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.912616][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.921702][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.930790][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.939886][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 586.959742][T11939] FAULT_INJECTION: forcing a failure. [ 586.959742][T11939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.973018][T11939] CPU: 1 PID: 11939 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 586.983466][T11939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 586.993537][T11939] Call Trace: [ 586.996835][T11939] [ 586.999786][T11939] dump_stack_lvl+0x125/0x1b0 [ 587.004517][T11939] should_fail_ex+0x496/0x5b0 [ 587.009241][T11939] _copy_to_user+0x30/0xb0 [ 587.013690][T11939] simple_read_from_buffer+0xd0/0x150 [ 587.019094][T11939] proc_fail_nth_read+0x1b0/0x290 [ 587.024158][T11939] ? proc_sessionid_read+0x290/0x290 [ 587.029482][T11939] ? security_file_permission+0xdc/0x100 [ 587.035151][T11939] ? proc_sessionid_read+0x290/0x290 [ 587.040471][T11939] vfs_read+0x1ce/0x930 [ 587.044657][T11939] ? kernel_read+0x1b0/0x1b0 [ 587.049278][T11939] ? __fget_files+0x279/0x410 [ 587.053984][T11939] ksys_read+0x12f/0x250 [ 587.058271][T11939] ? vfs_write+0xe40/0xe40 [ 587.062720][T11939] ? rcu_is_watching+0x12/0xb0 [ 587.067511][T11939] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 587.073530][T11939] do_syscall_64+0x38/0xb0 [ 587.077968][T11939] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 587.083880][T11939] RIP: 0033:0x7f830d47b78c [ 587.088311][T11939] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 587.107947][T11939] RSP: 002b:00007f830e2770c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 587.116384][T11939] RAX: ffffffffffffffda RBX: 00007f830d59c050 RCX: 00007f830d47b78c [ 587.124368][T11939] RDX: 000000000000000f RSI: 00007f830e277130 RDI: 0000000000000006 [ 587.132352][T11939] RBP: 00007f830e277120 R08: 0000000000000000 R09: 0000000000000000 [ 587.140341][T11939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.148343][T11939] R13: 000000000000006e R14: 00007f830d59c050 R15: 00007f830d6bfa48 [ 587.156340][T11939] 18:31:27 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{0x68, 0x0, 0xffff}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 587.174739][ T5140] usb 5-1: USB disconnect, device number 107 [ 587.187892][ T5136] usb 3-1: USB disconnect, device number 13 [ 587.225267][ T5138] usb 6-1: USB disconnect, device number 32 18:31:27 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:31:27 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x3, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x208800) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ' \x01\xdf\x86\x11\x86\xc5\x81\xd2\xf3'}, {0x20, '.'}, {0x20, ']/.:'}, {0x20, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0xa, "69fb75e46c18dc2bee2252f2f6116b9e1656d305cd5681b770d0b0dbd2520a61a2619f25fcf421c8607b63d588c7aba91531afd5a2c74cb9a4a33c"}, 0x6b) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, &(0x7f00000002c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}, @rthdrdstopts={{0x18}}], 0x40}, 0x0) 18:31:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x68, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 18:31:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x208800) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ' \x01\xdf\x86\x11\x86\xc5\x81\xd2\xf3'}, {0x20, '.'}, {0x20, ']/.:'}, {0x20, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0xa, "69fb75e46c18dc2bee2252f2f6116b9e1656d305cd5681b770d0b0dbd2520a61a2619f25fcf421c8607b63d588c7aba91531afd5a2c74cb9a4a33c"}, 0x6b) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, &(0x7f00000002c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}, @rthdrdstopts={{0x18}}], 0x40}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x208800) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (async) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ' \x01\xdf\x86\x11\x86\xc5\x81\xd2\xf3'}, {0x20, '.'}, {0x20, ']/.:'}, {0x20, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0xa, "69fb75e46c18dc2bee2252f2f6116b9e1656d305cd5681b770d0b0dbd2520a61a2619f25fcf421c8607b63d588c7aba91531afd5a2c74cb9a4a33c"}, 0x6b) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, &(0x7f00000002c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) (async) sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}, @rthdrdstopts={{0x18}}], 0x40}, 0x0) (async) [ 587.466304][T11952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:27 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x208800) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (async) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ' \x01\xdf\x86\x11\x86\xc5\x81\xd2\xf3'}, {0x20, '.'}, {0x20, ']/.:'}, {0x20, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}], 0xa, "69fb75e46c18dc2bee2252f2f6116b9e1656d305cd5681b770d0b0dbd2520a61a2619f25fcf421c8607b63d588c7aba91531afd5a2c74cb9a4a33c"}, 0x6b) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x4b, &(0x7f00000002c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) (async) sendmsg$inet6(r0, &(0x7f0000000700)={&(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}, @rthdrdstopts={{0x18}}], 0x40}, 0x0) 18:31:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x71, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 587.539889][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 587.603343][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 18:31:27 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, 0x0) dup3(r0, r2, 0x0) 18:31:27 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$incfs(r2, &(0x7f00000000c0)='.pending_reads\x00', 0x101000, 0x81) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000040)={r2, 0x2}) r4 = dup(r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x80000001, 0x3}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x102, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/14, 0xe}], 0x1, &(0x7f0000000100)=""/30, 0x1e}}], 0x1, 0x40000023, 0x0) [ 587.687640][ T5138] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 587.729633][ T5136] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 587.937755][ T5138] usb 6-1: Using ep0 maxpacket: 8 [ 587.978409][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 587.989309][ T5135] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 588.058419][ T5138] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 588.074359][ T5138] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 588.084112][ T5138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.107791][ T5136] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 588.118664][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 588.130160][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.237548][ T5135] usb 5-1: Using ep0 maxpacket: 8 [ 588.357703][ T5135] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 588.369033][ T5135] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 588.380741][ T5135] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 588.391051][ T5135] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.405441][ T5135] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 588.414572][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.697890][ T5135] usb 5-1: GET_CAPABILITIES returned 0 [ 588.703502][ T5135] usbtmc 5-1:16.0: can't read capabilities [ 588.767538][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.776654][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.785728][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.794825][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.804005][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.813100][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.822174][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.831344][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.840454][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.849551][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.858630][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.867803][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.876881][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.885970][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.895058][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.904222][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 588.926330][ T5135] usb 5-1: USB disconnect, device number 108 18:31:30 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x70, 0x7f, [{{0x9, 0x4, 0x0, 0xa0, 0x1, 0x7, 0x1, 0x3, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x10, 0x0, 0x3}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x2, 0x7f, 0x2, 0x40, 0xc1}, 0x3d, &(0x7f0000000140)={0x5, 0xf, 0x3d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x1, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xf, 0x3, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x2, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x4, 0x0, 0x9746, [0xcf, 0xff3f00, 0xff3fc0, 0x0]}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x200a}}, {0x50, &(0x7f0000000240)=@string={0x50, 0x3, "0eb7f99fe4aad4834c12944213b6cb4921adbf04a2cdb89ee892424814ee51ab77aae4f6fe0e5507727560e0e9a9b2e23a672e4c730b38a1eec56fcde5c32c4544f57e4c7350070292d8ff6f9b65"}}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x2, r3}, @void}}}, 0x1c}}, 0x0) 18:31:30 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$incfs(r2, &(0x7f00000000c0)='.pending_reads\x00', 0x101000, 0x81) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (rerun: 64) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000040)={r2, 0x2}) (async) r4 = dup(r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x80000001, 0x3}) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x102, 0x4) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/14, 0xe}], 0x1, &(0x7f0000000100)=""/30, 0x1e}}], 0x1, 0x40000023, 0x0) [ 590.312930][ T5141] usb 6-1: USB disconnect, device number 33 18:31:30 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x4) 18:31:30 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x401]) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000180)=[{0x2, 0x6b, 0x1000}, {0x1, 0x2, 0x1800}, {0x2, 0x6a, 0x8139f6bad9e9e3f4}, {0x5, 0x3f5}], 0x4, &(0x7f0000000200)={r2, r3+60000000}) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r4 = semget$private(0x0, 0x5, 0x0) semtimedop(r4, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semtimedop(r4, &(0x7f0000000100)=[{0x4, 0x0, 0x1800}, {0x1, 0x9}, {0x1, 0x3, 0x1000}], 0x3, &(0x7f0000000140)) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000040)) r7 = semget(0x0, 0x6, 0x204) semop(r7, &(0x7f0000000000)=[{0x4, 0xcb, 0x1000}, {0x2, 0x7, 0x800}, {0x1, 0x8, 0x800}], 0x3) dup3(r5, r6, 0x0) 18:31:30 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, 0x0) dup3(r0, r2, 0x0) 18:31:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x4, r3}, @void}}}, 0x1c}}, 0x0) 18:31:30 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$incfs(r2, &(0x7f00000000c0)='.pending_reads\x00', 0x101000, 0x81) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000040)={r2, 0x2}) (async) r4 = dup(r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x80000001, 0x3}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x102, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmmsg(r0, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/14, 0xe}], 0x1, &(0x7f0000000100)=""/30, 0x1e}}], 0x1, 0x40000023, 0x0) [ 590.460753][ T5138] usb 3-1: USB disconnect, device number 14 18:31:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x5, r3}, @void}}}, 0x1c}}, 0x0) 18:31:30 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r0) 18:31:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x6, r3}, @void}}}, 0x1c}}, 0x0) 18:31:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x8, r3}, @void}}}, 0x1c}}, 0x0) [ 590.688401][T12002] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 590.751020][ T5141] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 590.797914][ T5136] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 590.917719][ T5138] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 591.007590][ T5141] usb 6-1: Using ep0 maxpacket: 8 [ 591.038000][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 591.137727][ T5141] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 591.154492][ T5141] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 591.157865][ T5138] usb 3-1: Using ep0 maxpacket: 8 [ 591.163964][ T5141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.176825][ T5136] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 591.188497][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 591.199372][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 591.210104][ T5136] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.223414][ T5136] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 591.232969][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.307911][ T5138] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 591.320496][ T5138] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 591.330021][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.497771][ T5136] usb 5-1: GET_CAPABILITIES returned 0 [ 591.503442][ T5136] usbtmc 5-1:16.0: can't read capabilities [ 591.704341][ T5136] usb 5-1: USB disconnect, device number 109 [ 591.797251][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.806337][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 18:31:33 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x70, 0x7f, [{{0x9, 0x4, 0x0, 0xa0, 0x1, 0x7, 0x1, 0x3, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x10, 0x0, 0x3}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x2, 0x7f, 0x2, 0x40, 0xc1}, 0x3d, &(0x7f0000000140)={0x5, 0xf, 0x3d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x1, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xf, 0x3, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x2, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x4, 0x0, 0x9746, [0xcf, 0xff3f00, 0xff3fc0, 0x0]}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x200a}}, {0x50, &(0x7f0000000240)=@string={0x50, 0x3, "0eb7f99fe4aad4834c12944213b6cb4921adbf04a2cdb89ee892424814ee51ab77aae4f6fe0e5507727560e0e9a9b2e23a672e4c730b38a1eec56fcde5c32c4544f57e4c7350070292d8ff6f9b65"}}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x70, 0x7f, [{{0x9, 0x4, 0x0, 0xa0, 0x1, 0x7, 0x1, 0x3, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x10, 0x0, 0x3}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x2, 0x7f, 0x2, 0x40, 0xc1}, 0x3d, &(0x7f0000000140)={0x5, 0xf, 0x3d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x1, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xf, 0x3, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x2, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x4, 0x0, 0x9746, [0xcf, 0xff3f00, 0xff3fc0, 0x0]}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x200a}}, {0x50, &(0x7f0000000240)=@string={0x50, 0x3, "0eb7f99fe4aad4834c12944213b6cb4921adbf04a2cdb89ee892424814ee51ab77aae4f6fe0e5507727560e0e9a9b2e23a672e4c730b38a1eec56fcde5c32c4544f57e4c7350070292d8ff6f9b65"}}]}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r2, 0x0) (async) 18:31:33 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, 0x0) dup3(r0, r2, 0x0) 18:31:33 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) (async, rerun: 32) r1 = semget$private(0x0, 0x5, 0x0) (rerun: 32) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x401]) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000180)=[{0x2, 0x6b, 0x1000}, {0x1, 0x2, 0x1800}, {0x2, 0x6a, 0x8139f6bad9e9e3f4}, {0x5, 0x3f5}], 0x4, &(0x7f0000000200)={r2, r3+60000000}) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) (async, rerun: 64) clock_gettime(0x0, 0x0) (rerun: 64) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) (async, rerun: 64) semget(0x2, 0x0, 0x288) (rerun: 64) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) (async) semop(r0, &(0x7f00000000c0), 0x0) (async) r4 = semget$private(0x0, 0x5, 0x0) semtimedop(r4, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) (async, rerun: 64) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)=[0x401]) (rerun: 64) semtimedop(r4, &(0x7f0000000100)=[{0x4, 0x0, 0x1800}, {0x1, 0x9}, {0x1, 0x3, 0x1000}], 0x3, &(0x7f0000000140)) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000040)) (async) r7 = semget(0x0, 0x6, 0x204) semop(r7, &(0x7f0000000000)=[{0x4, 0xcb, 0x1000}, {0x2, 0x7, 0x800}, {0x1, 0x8, 0x800}], 0x3) dup3(r5, r6, 0x0) [ 593.370280][ T5138] usb 6-1: USB disconnect, device number 34 18:31:33 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x1000000) 18:31:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x9, r3}, @void}}}, 0x1c}}, 0x0) 18:31:33 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r0) 18:31:33 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semget$private(0x0, 0x5, 0x0) (async) r1 = semget$private(0x0, 0x5, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x401]) clock_gettime(0x0, &(0x7f00000001c0)) (async) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000180)=[{0x2, 0x6b, 0x1000}, {0x1, 0x2, 0x1800}, {0x2, 0x6a, 0x8139f6bad9e9e3f4}, {0x5, 0x3f5}], 0x4, &(0x7f0000000200)={r2, r3+60000000}) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) (async) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) (async) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) (async) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) semget$private(0x0, 0x5, 0x0) (async) r4 = semget$private(0x0, 0x5, 0x0) semtimedop(r4, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semtimedop(r4, &(0x7f0000000100)=[{0x4, 0x0, 0x1800}, {0x1, 0x9}, {0x1, 0x3, 0x1000}], 0x3, &(0x7f0000000140)) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000040)) r7 = semget(0x0, 0x6, 0x204) semop(r7, &(0x7f0000000000)=[{0x4, 0xcb, 0x1000}, {0x2, 0x7, 0x800}, {0x1, 0x8, 0x800}], 0x3) dup3(r5, r6, 0x0) (async) dup3(r5, r6, 0x0) [ 593.555476][ T5136] usb 3-1: USB disconnect, device number 15 18:31:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0xa, r3}, @void}}}, 0x1c}}, 0x0) 18:31:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0xb, r3}, @void}}}, 0x1c}}, 0x0) 18:31:33 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000100)=""/235) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x101, 0x5, 0x1, 0xc4, 0x3, 0xc000, 0x8, 0x8}, &(0x7f0000000080)={0x7ff, 0xa5, 0x973b, 0x101, 0x8000000000000000, 0x0, 0x80000000, 0x7ff}, &(0x7f0000000200)={0x0, 0x3, 0xfffffffffffffc61, 0x2, 0x1, 0x111fffee, 0x3f, 0xfff}, &(0x7f0000000280)={r1, r2+60000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f0000000340)=[{0x0, 0x101, 0x1800}, {0x1, 0x3, 0x1800}, {0x2, 0x1179}], 0x3) semop(r0, &(0x7f00000000c0), 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r3, 0x0) 18:31:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0xc, r3}, @void}}}, 0x1c}}, 0x0) [ 593.708633][ T5141] usb 5-1: new high-speed USB device number 110 using dummy_hcd 18:31:33 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000103c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000240)=[{r1}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r0) [ 593.788694][ T5138] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 593.987556][ T5141] usb 5-1: Using ep0 maxpacket: 8 [ 594.007903][ T5136] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 594.070193][ T5138] usb 6-1: Using ep0 maxpacket: 8 [ 594.118596][ T5141] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 594.131338][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 594.142315][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 594.152352][ T5141] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.165454][ T5141] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 594.174557][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.188422][ T5138] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 594.198835][ T5138] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 594.208590][ T5138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.274374][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 594.417805][ T5136] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 594.428133][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 594.437252][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.451658][ T5141] usb 5-1: GET_CAPABILITIES returned 0 [ 594.457305][ T5141] usbtmc 5-1:16.0: can't read capabilities [ 594.655823][ T5136] usb 5-1: USB disconnect, device number 110 [ 594.827936][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.836864][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.848430][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.857694][T12046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.863145][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 18:31:34 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x70, 0x7f, [{{0x9, 0x4, 0x0, 0xa0, 0x1, 0x7, 0x1, 0x3, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x10, 0x0, 0x3}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x2, 0x7f, 0x2, 0x40, 0xc1}, 0x3d, &(0x7f0000000140)={0x5, 0xf, 0x3d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x1, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xf, 0x3, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x2, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x4, 0x0, 0x9746, [0xcf, 0xff3f00, 0xff3fc0, 0x0]}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x200a}}, {0x50, &(0x7f0000000240)=@string={0x50, 0x3, "0eb7f99fe4aad4834c12944213b6cb4921adbf04a2cdb89ee892424814ee51ab77aae4f6fe0e5507727560e0e9a9b2e23a672e4c730b38a1eec56fcde5c32c4544f57e4c7350070292d8ff6f9b65"}}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) (async) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) [ 594.866446][T12046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.894656][ T5138] usb 6-1: USB disconnect, device number 35 18:31:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000000de947d0acb0cb1400110077673100"/55], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8a0, 0x200}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x4054}}}}, @IFLA_VFINFO_LIST={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x240000b1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@deltaction={0x130, 0x31, 0x122, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x3c8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa39}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000050) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=@newlink={0x74, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xd2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IGNORE_DF={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x74}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x4000) 18:31:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0xd, r3}, @void}}}, 0x1c}}, 0x0) [ 595.203874][T12057] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 595.317552][ T5138] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 595.577670][ T5138] usb 6-1: Using ep0 maxpacket: 8 [ 595.718282][ T5138] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 595.730115][ T5138] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 595.739492][ T5138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.343230][T12052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.352196][T12052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 18:31:36 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x4000000) 18:31:36 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000100)=""/235) (async) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x101, 0x5, 0x1, 0xc4, 0x3, 0xc000, 0x8, 0x8}, &(0x7f0000000080)={0x7ff, 0xa5, 0x973b, 0x101, 0x8000000000000000, 0x0, 0x80000000, 0x7ff}, &(0x7f0000000200)={0x0, 0x3, 0xfffffffffffffc61, 0x2, 0x1, 0x111fffee, 0x3f, 0xfff}, &(0x7f0000000280)={r1, r2+60000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae}], 0x4, 0x0) semget(0x2, 0x0, 0x288) (async, rerun: 32) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) (async, rerun: 32) semop(r0, &(0x7f0000000340)=[{0x0, 0x101, 0x1800}, {0x1, 0x3, 0x1800}, {0x2, 0x1179}], 0x3) (async) semop(r0, &(0x7f00000000c0), 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(0xffffffffffffffff, r3, 0x0) 18:31:36 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) 18:31:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x10, r3}, @void}}}, 0x1c}}, 0x0) 18:31:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000000de947d0acb0cb1400110077673100"/55], 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8a0, 0x200}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x4054}}}}, @IFLA_VFINFO_LIST={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x240000b1) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@deltaction={0x130, 0x31, 0x122, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x3c8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa39}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000050) (async, rerun: 64) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=@newlink={0x74, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xd2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IGNORE_DF={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x74}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x4000) [ 596.636073][ T5136] usb 3-1: USB disconnect, device number 16 18:31:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x11, r3}, @void}}}, 0x1c}}, 0x0) [ 596.711304][T12064] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 596.720269][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 18:31:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000000de947d0acb0cb1400110077673100"/55], 0x30}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8a0, 0x200}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x4054}}}}, @IFLA_VFINFO_LIST={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x240000b1) (async, rerun: 32) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async, rerun: 32) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) (rerun: 32) openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@deltaction={0x130, 0x31, 0x122, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x3c8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa39}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000050) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=@newlink={0x74, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xd2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IGNORE_DF={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x74}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x4000) 18:31:36 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000100)=""/235) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x101, 0x5, 0x1, 0xc4, 0x3, 0xc000, 0x8, 0x8}, &(0x7f0000000080)={0x7ff, 0xa5, 0x973b, 0x101, 0x8000000000000000, 0x0, 0x80000000, 0x7ff}, &(0x7f0000000200)={0x0, 0x3, 0xfffffffffffffc61, 0x2, 0x1, 0x111fffee, 0x3f, 0xfff}, &(0x7f0000000280)={r1, r2+60000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f0000000340)=[{0x0, 0x101, 0x1800}, {0x1, 0x3, 0x1800}, {0x2, 0x1179}], 0x3) semop(r0, &(0x7f00000000c0), 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r3, 0x0) semget$private(0x0, 0x5, 0x0) (async) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000100)=""/235) (async) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) (async) clock_gettime(0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000240)) (async) pselect6(0x40, &(0x7f0000000000)={0x101, 0x5, 0x1, 0xc4, 0x3, 0xc000, 0x8, 0x8}, &(0x7f0000000080)={0x7ff, 0xa5, 0x973b, 0x101, 0x8000000000000000, 0x0, 0x80000000, 0x7ff}, &(0x7f0000000200)={0x0, 0x3, 0xfffffffffffffc61, 0x2, 0x1, 0x111fffee, 0x3f, 0xfff}, &(0x7f0000000280)={r1, r2+60000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) (async) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae}], 0x4, 0x0) (async) semget(0x2, 0x0, 0x288) (async) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) (async) semop(r0, &(0x7f0000000340)=[{0x0, 0x101, 0x1800}, {0x1, 0x3, 0x1800}, {0x2, 0x1179}], 0x3) (async) semop(r0, &(0x7f00000000c0), 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(0xffffffffffffffff, r3, 0x0) (async) 18:31:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x13, r3}, @void}}}, 0x1c}}, 0x0) [ 596.849486][T12077] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 596.863608][T12077] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 596.967610][ T5138] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 597.117542][ T5136] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 597.207999][ T5138] usb 5-1: Using ep0 maxpacket: 8 [ 597.327730][ T5138] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 597.341140][ T5138] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 597.351786][ T5138] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 597.363960][ T5138] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 597.377010][ T5136] usb 3-1: Using ep0 maxpacket: 8 [ 597.384201][ T5138] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 597.394727][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.497992][ T5136] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 597.510031][ T5136] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 597.519146][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.669675][ T5138] usb 5-1: GET_CAPABILITIES returned 0 [ 597.675236][ T5138] usbtmc 5-1:16.0: can't read capabilities [ 597.873794][ T5136] usb 5-1: USB disconnect, device number 111 18:31:37 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000200)=[{0x4, 0x82a7, 0x800}, {0x1, 0x401, 0x1800}], 0x2, &(0x7f0000000240)={0x0, 0x3938700}) io_pgetevents(0x0, 0x4, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002000010000000000000000000200000000000000000000000de947d0acb0cb1400110077673100"/55], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8a0, 0x200}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x4054}}}}, @IFLA_VFINFO_LIST={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x240000b1) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)=@deltaction={0x130, 0x31, 0x122, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x3c8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa39}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000050) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=@newlink={0x74, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xd2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_IGNORE_DF={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x74}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x4000) 18:31:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x71, r3}, @void}}}, 0x1c}}, 0x0) [ 597.947003][ T5141] usb 6-1: USB disconnect, device number 36 [ 597.989359][T12088] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 598.367601][ T5141] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 598.610584][ T5141] usb 6-1: Using ep0 maxpacket: 8 [ 598.727680][ T5141] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 598.739500][ T5141] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 598.748708][ T5141] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 18:31:39 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x7ff80e27cae9) 18:31:39 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) 18:31:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x117, r3}, @void}}}, 0x1c}}, 0x0) 18:31:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b170100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7ff10000000000002800128009000100766c616e000000001800028006000100a70200000c0002001f000000e33773dd96476584", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) 18:31:39 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) [ 599.724820][ T5138] usb 3-1: USB disconnect, device number 17 18:31:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x146, r3}, @void}}}, 0x1c}}, 0x0) 18:31:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b170100627269646765"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7ff10000000000002800128009000100766c616e000000001800028006000100a70200000c0002001f000000e33773dd96476584", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b170100627269646765"], 0x3c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7ff10000000000002800128009000100766c616e000000001800028006000100a70200000c0002001f000000e33773dd96476584", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) (async) [ 599.794209][T12100] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 599.825863][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 18:31:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0xf}}, 0x0) 18:31:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x14}}, 0x0) [ 599.903755][T12108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 599.914725][T12108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 599.934925][T12108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 600.057598][ T5141] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 600.177591][ T5138] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 600.297540][ T5141] usb 5-1: Using ep0 maxpacket: 8 [ 600.429455][ T5138] usb 3-1: Using ep0 maxpacket: 8 [ 600.437708][ T5141] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 600.450283][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 600.461695][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 600.472660][ T5141] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.486951][ T5141] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 600.496499][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.548461][ T5138] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 600.562319][ T5138] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 600.571599][ T5138] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.757747][ T5141] usb 5-1: GET_CAPABILITIES returned 0 [ 600.763323][ T5141] usbtmc 5-1:16.0: can't read capabilities [ 600.965954][ T5138] usb 5-1: USB disconnect, device number 112 [ 600.977551][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 600.986729][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 600.995898][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.005057][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.007003][ T9244] usb 6-1: USB disconnect, device number 37 [ 601.014223][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.029361][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.038558][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.047724][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.056898][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 18:31:40 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000200)=[{0x4, 0x82a7, 0x800}, {0x1, 0x401, 0x1800}], 0x2, &(0x7f0000000240)={0x0, 0x3938700}) io_pgetevents(0x0, 0x4, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000200)=[{0x4, 0x82a7, 0x800}, {0x1, 0x401, 0x1800}], 0x2, &(0x7f0000000240)={0x0, 0x3938700}) (async) io_pgetevents(0x0, 0x4, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) (async) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r2, 0x0) (async) 18:31:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b170100627269646765"], 0x3c}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7ff10000000000002800128009000100766c616e000000001800028006000100a70200000c0002001f000000e33773dd96476584", @ANYRES32=r6], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) 18:31:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x68}}, 0x0) [ 601.066160][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.075481][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.084768][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.093949][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.103108][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.112242][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.121360][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 601.457566][ T9244] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 601.717626][ T9244] usb 6-1: Using ep0 maxpacket: 8 [ 601.847938][ T9244] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 601.861470][ T9244] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 601.870986][ T9244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.472519][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.481636][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.501839][ T5136] usb 6-1: USB disconnect, device number 38 18:31:42 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x100000000000000) 18:31:42 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) (async) clock_gettime(0x0, 0x0) (async) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) (async) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) (async) semop(r0, &(0x7f00000000c0), 0x0) (async, rerun: 64) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 64) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) 18:31:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x71}}, 0x0) 18:31:42 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) sendto$inet(r2, &(0x7f0000000000)="2fdc807cc5f315556487d1cd647ad6a840757f61efa0334757428e2343c20de3554d48085befb4eb5cfd9da01557b767834193c64ace0751aecdaac18d12e50a349eacb3f189aef74a8b2c07af5c428d4f40a71e7237f16cd94afd39d0f1d58a38718c6e859abe869277ba5a33cf22c601ff45d16b2fe6ea5d6212cf00d2e2554c005f12b73ab606fdb1e9ff77332f1898a824e7545a331b6880f9b8bbcb97cb3efa195e8f3c34b266c56f809db8aaf9f51a95eb9154d3abb85676e37808824832ed47da3ad2761686783757a4b2b82074427d1519fae2f71bda791a3c7c27e2c5e74972d1d9ed91295e8b8064", 0xed, 0x20000080, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) r3 = socket(0x1f, 0x803, 0x7) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={r4, @broadcast, @empty}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 18:31:42 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) dup3(0xffffffffffffffff, r1, 0x0) 18:31:42 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000200)=[{0x4, 0x82a7, 0x800}, {0x1, 0x401, 0x1800}], 0x2, &(0x7f0000000240)={0x0, 0x3938700}) io_pgetevents(0x0, 0x4, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) semtimedop(0xffffffffffffffff, &(0x7f0000000200)=[{0x4, 0x82a7, 0x800}, {0x1, 0x401, 0x1800}], 0x2, &(0x7f0000000240)={0x0, 0x3938700}) (async) io_pgetevents(0x0, 0x4, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x6]}, 0x8}) (async) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r2, 0x0) (async) [ 602.798434][ T23] usb 3-1: USB disconnect, device number 18 18:31:42 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) (async) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(0xffffffffffffffff, r1, 0x0) 18:31:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x140}}, 0x0) 18:31:42 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) sendto$inet(r2, &(0x7f0000000000)="2fdc807cc5f315556487d1cd647ad6a840757f61efa0334757428e2343c20de3554d48085befb4eb5cfd9da01557b767834193c64ace0751aecdaac18d12e50a349eacb3f189aef74a8b2c07af5c428d4f40a71e7237f16cd94afd39d0f1d58a38718c6e859abe869277ba5a33cf22c601ff45d16b2fe6ea5d6212cf00d2e2554c005f12b73ab606fdb1e9ff77332f1898a824e7545a331b6880f9b8bbcb97cb3efa195e8f3c34b266c56f809db8aaf9f51a95eb9154d3abb85676e37808824832ed47da3ad2761686783757a4b2b82074427d1519fae2f71bda791a3c7c27e2c5e74972d1d9ed91295e8b8064", 0xed, 0x20000080, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) r3 = socket(0x1f, 0x803, 0x7) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={r4, @broadcast, @empty}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 18:31:42 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (async) sendto$inet(r2, &(0x7f0000000000)="2fdc807cc5f315556487d1cd647ad6a840757f61efa0334757428e2343c20de3554d48085befb4eb5cfd9da01557b767834193c64ace0751aecdaac18d12e50a349eacb3f189aef74a8b2c07af5c428d4f40a71e7237f16cd94afd39d0f1d58a38718c6e859abe869277ba5a33cf22c601ff45d16b2fe6ea5d6212cf00d2e2554c005f12b73ab606fdb1e9ff77332f1898a824e7545a331b6880f9b8bbcb97cb3efa195e8f3c34b266c56f809db8aaf9f51a95eb9154d3abb85676e37808824832ed47da3ad2761686783757a4b2b82074427d1519fae2f71bda791a3c7c27e2c5e74972d1d9ed91295e8b8064", 0xed, 0x20000080, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) (async) r3 = socket(0x1f, 0x803, 0x7) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={r4, @broadcast, @empty}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 18:31:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0xec0}}, 0x0) 18:31:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x33fe0}}, 0x0) [ 603.148104][ T9244] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 603.167836][ T5136] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 603.319041][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 603.387551][ T9244] usb 6-1: Using ep0 maxpacket: 8 [ 603.407558][ T5136] usb 5-1: Using ep0 maxpacket: 8 [ 603.519788][ T9244] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 603.527907][ T5136] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 603.533781][ T9244] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 603.543288][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 603.554691][ T9244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.561864][ T5136] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 603.580287][ T5136] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.590957][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 603.601552][ T5136] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 603.610772][ T5136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.728680][ T23] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 603.740525][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 603.751189][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.878282][ T5136] usb 5-1: GET_CAPABILITIES returned 0 [ 603.883927][ T5136] usbtmc 5-1:16.0: can't read capabilities [ 604.085263][ T5136] usb 5-1: USB disconnect, device number 113 [ 604.182980][T12162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.191848][T12162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.211256][ T5140] usb 6-1: USB disconnect, device number 39 18:31:45 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x400000000000000) 18:31:45 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x20000000, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000040)="31ea2daf5f85dbb2ceabe2bfee900a5b77d91f86432e7637bca6d790b8c6439234d909986caa33d249e1f03aa7f003d1bea430bfee5601ab615160aeadf7", 0x3e, 0x8000854, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) r2 = socket(0x0, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 18:31:45 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r1, 0x410}, {r2, 0x284}, {r4, 0x4000}], 0x3, &(0x7f00000001c0)={r5, r6+60000000}, &(0x7f0000000200), 0x8) semop(r0, &(0x7f00000000c0), 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) dup3(r7, r8, 0x0) 18:31:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0xfffffdef}}, 0x0) 18:31:45 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x2, 0xbe, {0xbe, 0x6, "ab6789a11f23f1a3cc4c6b4ec5abf14ec5fa9214db8eeb1b30528ee967fba08986ccda30f335e10ff359e48cb6805bf5c78649540c0a62cf6228ba94a6216ac6bc6bdd70014b8c213d718d9069a82184d002923b757e92ce498c599a8fbac823a86f8941946bfb37e19ed8af0ffc6a629c0cdd8467d4e96c39edd5de6633fa973b013cd18092365b2b18ec0175622c239f835e523a84539bf8927ee6b54e256b05fdf633208b08b79ab3649ed8df81e0e758736426de03caba6ba0d9"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0xf, 0x7b, "3bc2a0fae1cdb1b2b6a7d9b1b26d55a47b485546697b2dcb2f5330db9a60730b8dc0166b9b19bacd4002b2693bd2a7906ae9620ead7930d5fbea181994e36d24dceddcab5142ecd07aa272a496d45b1f888febb5441d18d0f7d3ed4159754ed2e079aadbaf5cdc29c00935394b566914d348a3906a4aaf2ca0dc04"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x78}, &(0x7f0000000380)={0x20, 0x81, 0x1, "1c"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, '-'}, &(0x7f0000000400)={0x20, 0x83, 0x1, "a6"}, &(0x7f0000000440)={0x20, 0x84, 0x1, "14"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "a2d956"}}) dup3(r0, r2, 0x0) 18:31:45 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, 0xffffffffffffffff, 0x0) [ 605.897232][ T23] usb 3-1: USB disconnect, device number 19 18:31:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x2}, 0x0) 18:31:45 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) (async, rerun: 64) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async, rerun: 64) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x20000000, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000040)="31ea2daf5f85dbb2ceabe2bfee900a5b77d91f86432e7637bca6d790b8c6439234d909986caa33d249e1f03aa7f003d1bea430bfee5601ab615160aeadf7", 0x3e, 0x8000854, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) r2 = socket(0x0, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet(r0, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 18:31:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x4}, 0x0) 18:31:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x68}, 0x0) 18:31:46 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) openat$damon_kdamond_pid(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) (async) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x20000000, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x20000000, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000040)="31ea2daf5f85dbb2ceabe2bfee900a5b77d91f86432e7637bca6d790b8c6439234d909986caa33d249e1f03aa7f003d1bea430bfee5601ab615160aeadf7", 0x3e, 0x8000854, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) r2 = socket(0x0, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="1b2603927f1f6588b967481241ba7860ac5cf65ac618ded8974895abea13b4834ff922b3f1e0b02bd67aa03059bcecc7a95433a3a07e758044ab4ea6f7ae55d88f5ef93a1a7511bf746bec66ba", 0x4d, 0x0, 0x0, 0x0) 18:31:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x71}, 0x0) [ 606.237545][ T9244] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 606.248402][ T5136] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 606.360790][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 606.477702][ T9244] usb 5-1: Using ep0 maxpacket: 8 [ 606.517607][ T5136] usb 6-1: Using ep0 maxpacket: 8 [ 606.598433][ T9244] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 606.611023][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 606.621110][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 606.627165][ T9244] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 606.637129][ T9244] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 606.640776][ T5136] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 606.650509][ T9244] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 606.663693][ T5136] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 606.669466][ T9244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.687290][ T5136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.758028][ T23] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 606.768569][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 606.777835][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.937749][ T9244] usb 5-1: GET_CAPABILITIES returned 0 [ 606.943357][ T9244] usbtmc 5-1:16.0: can't read capabilities [ 607.149447][ T5136] usb 5-1: USB disconnect, device number 114 [ 607.157567][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.166699][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.175798][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.184865][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.193934][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.203116][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.212201][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.221295][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.230391][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.239481][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.248583][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.257693][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.266874][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.275964][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.285060][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.294140][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 607.309130][T12202] usbtmc: can not find device for minor 0 [ 607.316642][T12202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.336831][T12202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 18:31:48 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0xe9ca270ef87f0000) 18:31:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0xffffff1f}, 0x0) 18:31:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f0000000280), 0xfffffffffffffffb, 0x80801) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200000, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r6, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x6, @multicast1, 0x0, 0x0, 'sh\x00', 0x14, 0x0, 0x5a}, 0x2c) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300), 0x240, 0x0) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) 18:31:48 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) (async) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) (async) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r1, 0x410}, {r2, 0x284}, {r4, 0x4000}], 0x3, &(0x7f00000001c0)={r5, r6+60000000}, &(0x7f0000000200), 0x8) semop(r0, &(0x7f00000000c0), 0x0) (async) semop(r0, &(0x7f00000000c0), 0x0) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) (async) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) dup3(r7, r8, 0x0) 18:31:48 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) (async) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) (async) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x2, 0xbe, {0xbe, 0x6, "ab6789a11f23f1a3cc4c6b4ec5abf14ec5fa9214db8eeb1b30528ee967fba08986ccda30f335e10ff359e48cb6805bf5c78649540c0a62cf6228ba94a6216ac6bc6bdd70014b8c213d718d9069a82184d002923b757e92ce498c599a8fbac823a86f8941946bfb37e19ed8af0ffc6a629c0cdd8467d4e96c39edd5de6633fa973b013cd18092365b2b18ec0175622c239f835e523a84539bf8927ee6b54e256b05fdf633208b08b79ab3649ed8df81e0e758736426de03caba6ba0d9"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0xf, 0x7b, "3bc2a0fae1cdb1b2b6a7d9b1b26d55a47b485546697b2dcb2f5330db9a60730b8dc0166b9b19bacd4002b2693bd2a7906ae9620ead7930d5fbea181994e36d24dceddcab5142ecd07aa272a496d45b1f888febb5441d18d0f7d3ed4159754ed2e079aadbaf5cdc29c00935394b566914d348a3906a4aaf2ca0dc04"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x78}, &(0x7f0000000380)={0x20, 0x81, 0x1, "1c"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, '-'}, &(0x7f0000000400)={0x20, 0x83, 0x1, "a6"}, &(0x7f0000000440)={0x20, 0x84, 0x1, "14"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "a2d956"}}) dup3(r0, r2, 0x0) 18:31:48 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, 0xffffffffffffffff, 0x0) [ 608.964050][ T23] usb 3-1: USB disconnect, device number 20 [ 608.965990][ T5136] usb 6-1: USB disconnect, device number 40 18:31:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x2}, 0x0) 18:31:48 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) (async) clock_gettime(0x0, 0x0) (async) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) (async) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) (async) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r1, 0x410}, {r2, 0x284}, {r4, 0x4000}], 0x3, &(0x7f00000001c0)={r5, r6+60000000}, &(0x7f0000000200), 0x8) (async) semop(r0, &(0x7f00000000c0), 0x0) (async) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r7, r8, 0x0) 18:31:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x3}, 0x0) 18:31:49 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000100)=""/135) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r2, r3, 0x0) [ 609.251673][ T9244] IPVS: starting estimator thread 0... [ 609.317520][ T5138] usb 5-1: new high-speed USB device number 115 using dummy_hcd 18:31:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x4}, 0x0) [ 609.368113][T12230] IPVS: using max 44 ests per chain, 105600 per kthread [ 609.477552][ T5136] usb 6-1: new high-speed USB device number 41 using dummy_hcd 18:31:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x5}, 0x0) [ 609.557937][ T23] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 609.597616][ T5138] usb 5-1: Using ep0 maxpacket: 8 [ 609.720259][ T5138] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 609.737195][ T5138] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 609.747964][ T5136] usb 6-1: Using ep0 maxpacket: 8 [ 609.763785][ T5138] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 609.791228][ T5138] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.804724][ T5138] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 609.815056][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.817591][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 609.867913][ T5136] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 609.888944][ T5136] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 609.910171][ T5136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.977644][ T23] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 610.008574][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 610.020235][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.104384][ T5138] usb 5-1: GET_CAPABILITIES returned 0 [ 610.112290][ T5138] usbtmc 5-1:16.0: can't read capabilities [ 610.315589][ T23] usb 5-1: USB disconnect, device number 115 [ 610.513306][T12217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.522318][T12217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 18:31:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x6}, 0x0) 18:31:51 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000100)=""/135) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r2, r3, 0x0) semget$private(0x0, 0x5, 0x0) (async) semget$private(0x0, 0x5, 0x0) (async) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) (async) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x401]) (async) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000100)=""/135) (async) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) (async) clock_gettime(0x0, 0x0) (async) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) (async) semget(0x2, 0x0, 0x288) (async) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) (async) semop(r0, &(0x7f00000000c0), 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r2, r3, 0x0) (async) 18:31:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)={0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) (async) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f0000000280), 0xfffffffffffffffb, 0x80801) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200000, 0x8) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x200000, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r6, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x6, @multicast1, 0x0, 0x0, 'sh\x00', 0x14, 0x0, 0x5a}, 0x2c) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300), 0x240, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300), 0x240, 0x0) unshare(0x6c060000) (async) unshare(0x6c060000) socket$inet6_tcp(0xa, 0x1, 0x0) 18:31:51 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) semtimedop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x4, 0xbd4, 0x800}, {0x2, 0x6, 0x1000}, {0x0, 0x6, 0x1800}, {0x2, 0x8, 0x800}, {0x3, 0x4000, 0x800}, {0x4, 0xfe00, 0x1000}, {0x0, 0x7ff}, {0x3, 0x401, 0x1000}, {0x1, 0x52}], 0x9, &(0x7f0000000100)={0x0, 0x989680}) 18:31:51 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, 0xffffffffffffffff, 0x0) 18:31:51 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) (rerun: 64) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) (async) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r3, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x2, 0xbe, {0xbe, 0x6, "ab6789a11f23f1a3cc4c6b4ec5abf14ec5fa9214db8eeb1b30528ee967fba08986ccda30f335e10ff359e48cb6805bf5c78649540c0a62cf6228ba94a6216ac6bc6bdd70014b8c213d718d9069a82184d002923b757e92ce498c599a8fbac823a86f8941946bfb37e19ed8af0ffc6a629c0cdd8467d4e96c39edd5de6633fa973b013cd18092365b2b18ec0175622c239f835e523a84539bf8927ee6b54e256b05fdf633208b08b79ab3649ed8df81e0e758736426de03caba6ba0d9"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0xf, 0x7b, "3bc2a0fae1cdb1b2b6a7d9b1b26d55a47b485546697b2dcb2f5330db9a60730b8dc0166b9b19bacd4002b2693bd2a7906ae9620ead7930d5fbea181994e36d24dceddcab5142ecd07aa272a496d45b1f888febb5441d18d0f7d3ed4159754ed2e079aadbaf5cdc29c00935394b566914d348a3906a4aaf2ca0dc04"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x78}, &(0x7f0000000380)={0x20, 0x81, 0x1, "1c"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, '-'}, &(0x7f0000000400)={0x20, 0x83, 0x1, "a6"}, &(0x7f0000000440)={0x20, 0x84, 0x1, "14"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "a2d956"}}) (async) dup3(r0, r2, 0x0) [ 612.075985][ T5138] usb 6-1: USB disconnect, device number 41 [ 612.109224][ T5140] usb 3-1: USB disconnect, device number 21 18:31:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x7}, 0x0) 18:31:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x8}, 0x0) 18:31:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x9}, 0x0) 18:31:52 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semtimedop(r1, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x401]) (async) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x401]) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000100)=""/135) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) (async) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) (async) semop(r0, &(0x7f00000000c0), 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r2, r3, 0x0) (async) dup3(r2, r3, 0x0) 18:31:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xe}, 0x0) [ 612.507534][ T23] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 612.587769][ T5140] usb 3-1: new high-speed USB device number 22 using dummy_hcd 18:31:52 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) r1 = semget(0x2, 0x0, 0x288) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000100)=""/97) semop(r1, &(0x7f0000000000)=[{0x4, 0x9c, 0x800}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r2, r3, 0x0) 18:31:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf}, 0x0) [ 612.637101][ T5138] usb 6-1: new high-speed USB device number 42 using dummy_hcd 18:31:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x1c}, 0x0) [ 612.837524][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 612.897597][ T5140] usb 3-1: Using ep0 maxpacket: 8 [ 612.903154][ T5138] usb 6-1: Using ep0 maxpacket: 8 18:31:52 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) (async, rerun: 32) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 32) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) (async, rerun: 64) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)={0x0, 0x0}) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) sched_setscheduler(0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f0000000280), 0xfffffffffffffffb, 0x80801) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200000, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000240)=r6, 0x4) (async, rerun: 64) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x6, @multicast1, 0x0, 0x0, 'sh\x00', 0x14, 0x0, 0x5a}, 0x2c) (async, rerun: 32) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300), 0x240, 0x0) (rerun: 32) unshare(0x6c060000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) [ 612.987674][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 613.003015][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 613.013792][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 613.024336][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 613.038280][ T5138] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 613.038366][ T5138] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 613.038405][ T5138] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.039369][ T5140] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 613.059409][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 613.089009][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.120956][ T5140] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 613.148238][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.381486][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 613.387078][ T23] usbtmc 5-1:16.0: can't read capabilities [ 613.394918][ T5140] usb 6-1: USB disconnect, device number 42 [ 613.587629][ T5138] usb 5-1: USB disconnect, device number 116 18:31:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000e40)=@nat={'nat\x00', 0x62, 0x5, 0x1458, 0x1b0, 0xe8, 0xffffffff, 0xe8, 0x1b0, 0x13c0, 0x13c0, 0xffffffff, 0x13c0, 0x13c0, 0x5, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, '\x00', 'veth0_to_bond\x00'}, 0x0, 0xb0, 0xe8, 0x0, {0x22e}, [@common=@unspec=@connlimit={{0x40}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast1, @rand_addr, @icmp_id}}}}, {{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'team_slave_0\x00'}, 0x0, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x0, './cgroup/syz1\x00', 0x2, {0x2}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv4=@remote, @port, @icmp_id}}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast}}, @common=@icmp={{0x28}, {0x0, "7a82"}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@loopback, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x14b8) 18:31:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x60}, 0x0) 18:31:55 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r2, 0x0) (async) semtimedop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x4, 0xbd4, 0x800}, {0x2, 0x6, 0x1000}, {0x0, 0x6, 0x1800}, {0x2, 0x8, 0x800}, {0x3, 0x4000, 0x800}, {0x4, 0xfe00, 0x1000}, {0x0, 0x7ff}, {0x3, 0x401, 0x1000}, {0x1, 0x52}], 0x9, &(0x7f0000000100)={0x0, 0x989680}) 18:31:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000e40)=@nat={'nat\x00', 0x62, 0x5, 0x1458, 0x1b0, 0xe8, 0xffffffff, 0xe8, 0x1b0, 0x13c0, 0x13c0, 0xffffffff, 0x13c0, 0x13c0, 0x5, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, '\x00', 'veth0_to_bond\x00'}, 0x0, 0xb0, 0xe8, 0x0, {0x22e}, [@common=@unspec=@connlimit={{0x40}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast1, @rand_addr, @icmp_id}}}}, {{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'team_slave_0\x00'}, 0x0, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x0, './cgroup/syz1\x00', 0x2, {0x2}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv4=@remote, @port, @icmp_id}}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast}}, @common=@icmp={{0x28}, {0x0, "7a82"}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@loopback, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x14b8) 18:31:55 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000100)={0x7, 0x0, {0x51, 0x1f, 0x1, {0x3ff, 0x8}, {0x3ff, 0x7}, @cond=[{0x100, 0x2, 0x7, 0x7, 0x6, 0x101}, {0x46, 0x4, 0x8, 0x4, 0x3, 0x81}]}, {0x55, 0x4, 0x200, {0xe4db, 0x3f}, {0xff00, 0x8}, @period={0x5a, 0x1, 0xfff7, 0x4, 0x0, {0x2, 0x0, 0xd340, 0x3}, 0x1, &(0x7f00000000c0)=[0xfe]}}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r4, 0x0) 18:31:55 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) (async) clock_gettime(0x0, 0x0) (async) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) r1 = semget(0x2, 0x0, 0x288) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000100)=""/97) (async, rerun: 32) semop(r1, &(0x7f0000000000)=[{0x4, 0x9c, 0x800}], 0x1) (async, rerun: 32) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (rerun: 32) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) dup3(r2, r3, 0x0) 18:31:55 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) (fail_nth: 1) 18:31:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf0}, 0x0) [ 615.185707][ T5140] usb 3-1: USB disconnect, device number 22 18:31:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x2ec}, 0x0) 18:31:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000e40)=@nat={'nat\x00', 0x62, 0x5, 0x1458, 0x1b0, 0xe8, 0xffffffff, 0xe8, 0x1b0, 0x13c0, 0x13c0, 0xffffffff, 0x13c0, 0x13c0, 0x5, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, '\x00', 'veth0_to_bond\x00'}, 0x0, 0xb0, 0xe8, 0x0, {0x22e}, [@common=@unspec=@connlimit={{0x40}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast1, @rand_addr, @icmp_id}}}}, {{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'team_slave_0\x00'}, 0x0, 0x10a0, 0x10e8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x1, 0x0, 0x0, './cgroup/syz1\x00', 0x2, {0x2}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv4=@remote, @port, @icmp_id}}}, {{@ip={@empty, @rand_addr, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast}}, @common=@icmp={{0x28}, {0x0, "7a82"}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@loopback, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x14b8) 18:31:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x300}, 0x0) 18:31:55 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open(0x0, 0x20002, 0x1e8) getresuid(&(0x7f0000000000), 0x0, &(0x7f0000000080)=0x0) fstat(r0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) keyctl$get_persistent(0x16, r3, 0xfffffffffffffffb) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0xffffffffffffffa5}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) pivot_root(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_MTU={0x8}]}, 0x2c}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) 18:31:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x500}, 0x0) 18:31:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x600}, 0x0) [ 615.527934][ T23] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 615.537829][ T5134] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 615.677784][ T5140] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 615.768003][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 615.799404][ T5134] usb 6-1: Using ep0 maxpacket: 8 [ 615.927712][ T5134] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 615.928470][ T5140] usb 3-1: Using ep0 maxpacket: 8 [ 615.938121][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 615.954648][ T5134] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 615.965556][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 615.977015][ T5134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.986453][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 616.000296][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.018517][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 616.036151][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.077694][ T5140] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 616.126394][ T5140] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 616.181821][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.317862][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 616.323458][ T23] usbtmc 5-1:16.0: can't read capabilities [ 616.467529][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.476754][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.485873][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.494937][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.503998][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.513056][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.522138][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.531236][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.540357][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.549456][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.558559][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.567702][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.576847][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.583205][T12326] FAULT_INJECTION: forcing a failure. [ 616.583205][T12326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.585940][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.599336][T12326] CPU: 0 PID: 12326 Comm: syz-executor.4 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 616.608201][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.617940][T12326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 616.627145][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.637008][T12326] Call Trace: [ 616.637023][T12326] [ 616.652338][T12326] dump_stack_lvl+0x125/0x1b0 [ 616.657108][T12326] should_fail_ex+0x496/0x5b0 [ 616.661877][T12326] _copy_to_user+0x30/0xb0 [ 616.666352][T12326] simple_read_from_buffer+0xd0/0x150 [ 616.671803][T12326] proc_fail_nth_read+0x1b0/0x290 [ 616.676903][T12326] ? proc_sessionid_read+0x290/0x290 [ 616.682256][T12326] ? security_file_permission+0xdc/0x100 [ 616.687967][T12326] ? proc_sessionid_read+0x290/0x290 [ 616.692204][ T23] usb 3-1: USB disconnect, device number 23 [ 616.693295][T12326] vfs_read+0x1ce/0x930 [ 616.693339][T12326] ? kernel_read+0x1b0/0x1b0 [ 616.707976][T12326] ? __fget_files+0x279/0x410 [ 616.712694][T12326] ksys_read+0x12f/0x250 [ 616.716960][T12326] ? vfs_write+0xe40/0xe40 [ 616.721406][T12326] ? rcu_is_watching+0x12/0xb0 [ 616.726187][T12326] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 616.732212][T12326] do_syscall_64+0x38/0xb0 [ 616.736652][T12326] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 616.742568][T12326] RIP: 0033:0x7f7d0dc7b78c [ 616.746999][T12326] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 18:31:56 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) (async, rerun: 64) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) (async, rerun: 64) dup3(r0, r2, 0x0) (rerun: 64) semtimedop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x4, 0xbd4, 0x800}, {0x2, 0x6, 0x1000}, {0x0, 0x6, 0x1800}, {0x2, 0x8, 0x800}, {0x3, 0x4000, 0x800}, {0x4, 0xfe00, 0x1000}, {0x0, 0x7ff}, {0x3, 0x401, 0x1000}, {0x1, 0x52}], 0x9, &(0x7f0000000100)={0x0, 0x989680}) 18:31:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) [ 616.766626][T12326] RSP: 002b:00007f7d0e9330c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 616.775053][T12326] RAX: ffffffffffffffda RBX: 00007f7d0dd9c050 RCX: 00007f7d0dc7b78c [ 616.783038][T12326] RDX: 000000000000000f RSI: 00007f7d0e933130 RDI: 0000000000000006 [ 616.791030][T12326] RBP: 00007f7d0e933120 R08: 0000000000000000 R09: 0000000000000000 [ 616.799016][T12326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.806995][T12326] R13: 000000000000006e R14: 00007f7d0dd9c050 R15: 00007f7d0debfa48 [ 616.814983][T12326] [ 616.857523][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.866670][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.875801][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.884904][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.894024][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.903117][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.912186][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.921281][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.930348][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.939425][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.948510][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.957609][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.966675][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.975755][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.984850][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 616.993923][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 617.011711][ T5135] usb 5-1: USB disconnect, device number 117 18:31:58 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (async) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000100)={0x7, 0x0, {0x51, 0x1f, 0x1, {0x3ff, 0x8}, {0x3ff, 0x7}, @cond=[{0x100, 0x2, 0x7, 0x7, 0x6, 0x101}, {0x46, 0x4, 0x8, 0x4, 0x3, 0x81}]}, {0x55, 0x4, 0x200, {0xe4db, 0x3f}, {0xff00, 0x8}, @period={0x5a, 0x1, 0xfff7, 0x4, 0x0, {0x2, 0x0, 0xd340, 0x3}, 0x1, &(0x7f00000000c0)=[0xfe]}}}) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r4, 0x0) 18:31:58 executing program 1: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) (async) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) r1 = semget(0x2, 0x0, 0x288) semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000100)=""/97) (async) semop(r1, &(0x7f0000000000)=[{0x4, 0x9c, 0x800}], 0x1) (async) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r2, r3, 0x0) 18:31:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) open(0x0, 0x20002, 0x1e8) getresuid(&(0x7f0000000000), 0x0, &(0x7f0000000080)=0x0) (async) fstat(r0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) keyctl$get_persistent(0x16, r3, 0xfffffffffffffffb) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0xffffffffffffffa5}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) pivot_root(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0\x00') (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_MTU={0x8}]}, 0x2c}}, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) 18:31:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x900}, 0x0) 18:31:58 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x0) 18:31:58 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x1f, 0x1d, 0x4, 0x18f9, 0xffffffff, 0x4]}, &(0x7f0000000280)=0x78) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = dup3(r0, r0, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newneigh={0x4c, 0x1c, 0x20, 0x70bd2c, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0x80, 0x90, 0x7}, [@NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_MASTER={0x8, 0x9, 0x100}, @NDA_VNI={0x8, 0x7, 0xffffff80}, @NDA_PROTOCOL={0x5, 0xc, 0x40}, @NDA_NH_ID={0x8, 0xd, 0x1ff}, @NDA_PORT={0x6, 0x6, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r5, 0x0) [ 618.250844][ T5135] usb 6-1: USB disconnect, device number 43 18:31:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xe00}, 0x0) 18:31:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf00}, 0x0) 18:31:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x1c00}, 0x0) [ 618.567888][ T5138] usb 5-1: new high-speed USB device number 118 using dummy_hcd 18:31:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x3f00}, 0x0) 18:31:58 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open(0x0, 0x20002, 0x1e8) getresuid(&(0x7f0000000000), 0x0, &(0x7f0000000080)=0x0) fstat(r0, 0x0) (async) fstat(r0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) keyctl$get_persistent(0x16, r3, 0xfffffffffffffffb) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0xffffffffffffffa5}], 0x1, 0x44, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0, 0xffffffffffffffa5}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) pivot_root(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x2c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_MTU={0x8}]}, 0x2c}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) 18:31:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x6000}, 0x0) [ 618.647414][ T5141] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 618.727735][ T5135] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 618.817595][ T5138] usb 5-1: Using ep0 maxpacket: 8 [ 618.907602][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 618.937674][ T5138] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 618.963899][ T5138] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 618.979077][ T5135] usb 6-1: Using ep0 maxpacket: 8 [ 618.985527][ T5138] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 618.998027][ T5138] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.011462][ T5138] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 619.021043][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.039424][ T5141] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 619.059929][ T5141] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 619.069616][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.099282][ T5135] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 619.110158][ T5135] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 619.119898][ T5135] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.287959][ T5138] usb 5-1: GET_CAPABILITIES returned 0 [ 619.293603][ T5138] usbtmc 5-1:16.0: can't read capabilities [ 619.507546][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.516652][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.525719][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.534795][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.543873][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.552950][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.562060][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.571207][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.580380][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.589464][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.598562][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.607679][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.616765][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.625838][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.634896][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.643959][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 619.662660][ T5134] usb 5-1: USB disconnect, device number 118 18:32:01 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) (async, rerun: 32) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, &(0x7f0000000100)={0x7, 0x0, {0x51, 0x1f, 0x1, {0x3ff, 0x8}, {0x3ff, 0x7}, @cond=[{0x100, 0x2, 0x7, 0x7, 0x6, 0x101}, {0x46, 0x4, 0x8, 0x4, 0x3, 0x81}]}, {0x55, 0x4, 0x200, {0xe4db, 0x3f}, {0xff00, 0x8}, @period={0x5a, 0x1, 0xfff7, 0x4, 0x0, {0x2, 0x0, 0xd340, 0x3}, 0x1, &(0x7f00000000c0)=[0xfe]}}}) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r4, 0x0) 18:32:01 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) (async) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x1f, 0x1d, 0x4, 0x18f9, 0xffffffff, 0x4]}, &(0x7f0000000280)=0x78) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = dup3(r0, r0, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newneigh={0x4c, 0x1c, 0x20, 0x70bd2c, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0x80, 0x90, 0x7}, [@NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_MASTER={0x8, 0x9, 0x100}, @NDA_VNI={0x8, 0x7, 0xffffff80}, @NDA_PROTOCOL={0x5, 0xc, 0x40}, @NDA_NH_ID={0x8, 0xd, 0x1ff}, @NDA_PORT={0x6, 0x6, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000002c0), &(0x7f0000000300)=0x4) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r5, 0x0) 18:32:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xec02}, 0x0) 18:32:01 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x82) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000010000000ec00001f"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x148, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffff008}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6b8}}]}, 0x148}}, 0x4098) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0xd0, r1, 0x0, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1ff}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0xe8a607a2dc49e705}, 0x40000) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x28, 0x803, 0x2000000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newnexthop={0x11c, 0x68, 0x400, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x1, 0x0, 0x20}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@local}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x69}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9ac7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}]}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x14, 0x1, [{0x2}, {}, {0x89e6, 0x0, 0x1}, {0x8}]}}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x5965}}, @NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3f}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9000}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x478}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x880}, 0x64804) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9829"}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}}, 0x0) 18:32:01 executing program 1: r0 = semget$private(0x0, 0x3, 0xdb) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) clock_gettime(0x0, 0x0) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) semget(0x2, 0x0, 0x288) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r1, r2, 0x0) 18:32:01 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x4) [ 621.344568][ T5141] usb 3-1: USB disconnect, device number 24 [ 621.371014][ T5138] usb 6-1: USB disconnect, device number 44 18:32:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf000}, 0x0) 18:32:01 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x82) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000010000000ec00001f"], 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x148, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffff008}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6b8}}]}, 0x148}}, 0x4098) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0xd0, r1, 0x0, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1ff}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0xe8a607a2dc49e705}, 0x40000) (async) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x28, 0x803, 0x2000000) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newnexthop={0x11c, 0x68, 0x400, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x1, 0x0, 0x20}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@local}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x69}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9ac7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}]}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x14, 0x1, [{0x2}, {}, {0x89e6, 0x0, 0x1}, {0x8}]}}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x5965}}, @NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3f}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9000}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x478}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x880}, 0x64804) (async) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9829"}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}}, 0x0) 18:32:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x30000}, 0x0) 18:32:01 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000380), 0x82) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000010000000ec00001f"], 0x44}}, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x148, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffff008}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6b8}}]}, 0x148}}, 0x4098) (rerun: 32) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0xd0, r1, 0x0, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1ff}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0xe8a607a2dc49e705}, 0x40000) (async, rerun: 64) socket(0x10, 0x3, 0x0) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket(0x28, 0x803, 0x2000000) (rerun: 32) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newnexthop={0x11c, 0x68, 0x400, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x1, 0x0, 0x20}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@local}, @NHA_FDB={0x4}, @NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x2}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x69}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9ac7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}]}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x14, 0x1, [{0x2}, {}, {0x89e6, 0x0, 0x1}, {0x8}]}}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x5965}}, @NHA_RES_GROUP={0x44, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3f}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_RES_GROUP={0x3c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9000}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x478}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x1}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x880}, 0x64804) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xa}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9829"}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x58}}, 0x0) (rerun: 64) 18:32:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0xf0ffff}, 0x0) 18:32:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x1000000}, 0x0) [ 621.737963][ T5140] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 621.837564][ T5141] usb 3-1: new high-speed USB device number 25 using dummy_hcd 18:32:01 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)) r4 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r6, 0xf847000) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r5, 0x0) [ 621.989031][ T5140] usb 5-1: Using ep0 maxpacket: 8 [ 622.107859][ T5140] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 622.119237][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 622.127512][ T5141] usb 3-1: Using ep0 maxpacket: 8 [ 622.130088][ T5140] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 622.144581][ T5140] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 622.157880][ T5140] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 622.169274][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.288011][ T5141] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 622.304448][ T5141] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 622.313799][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.338271][ T23] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 622.437703][ T5140] usb 5-1: GET_CAPABILITIES returned 0 [ 622.443298][ T5140] usbtmc 5-1:16.0: can't read capabilities [ 622.547518][ T23] usb 6-1: device descriptor read/64, error -71 [ 622.577509][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.586636][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.595708][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.604825][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.613888][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.622947][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.632004][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.641091][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.650218][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.659403][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.668470][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.677537][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.686607][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.695669][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.704726][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.713876][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 622.740085][ T5141] usb 5-1: USB disconnect, device number 119 [ 622.868357][ T23] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 623.065336][ T23] usb 6-1: device descriptor read/64, error -71 [ 623.187785][ T23] usb usb6-port1: attempt power cycle [ 623.617582][ T23] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 623.708306][ T23] usb 6-1: device descriptor read/8, error -71 [ 624.007548][ T23] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 624.107830][ T23] usb 6-1: device descriptor read/8, error -71 [ 624.228882][ T23] usb usb6-port1: unable to enumerate USB device 18:32:04 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (async) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x1f, 0x1d, 0x4, 0x18f9, 0xffffffff, 0x4]}, &(0x7f0000000280)=0x78) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = dup3(r0, r0, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newneigh={0x4c, 0x1c, 0x20, 0x70bd2c, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0x80, 0x90, 0x7}, [@NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_MASTER={0x8, 0x9, 0x100}, @NDA_VNI={0x8, 0x7, 0xffffff80}, @NDA_PROTOCOL={0x5, 0xc, 0x40}, @NDA_NH_ID={0x8, 0xd, 0x1ff}, @NDA_PORT={0x6, 0x6, 0x4e22}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) (async, rerun: 64) dup3(r0, r5, 0x0) (rerun: 64) 18:32:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x2000000}, 0x0) 18:32:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b33, &(0x7f0000000000)={'wlan1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/165, 0xa5}], 0x1, 0x7d63, 0x2, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$int_in(r4, 0x0, &(0x7f0000000400)=0x81) sendto$inet6(r4, 0x0, 0x0, 0x2200c851, &(0x7f0000000440)={0xa, 0x2, 0x6, @loopback}, 0x1c) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x406f408, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r3) r7 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0xc0185879, &(0x7f0000000680)={0x3f000000, 0x100004000}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="349a0fa10907dc3ab9ca000400e716", @ANYRESHEX=0x0, @ANYRES32=r5, @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0xdf7b08a3e6c66ea3}, 0x0) r10 = syz_genetlink_get_family_id$tipc(0x0, r8) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r10, 0x20, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0xfff, 0x80000000}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x24040800) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r6, 0x8, 0x70bd2d, 0xffff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d5}, 0x45d0f620d3fe58aa) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, 0x0, 0x40005) r11 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r11, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) 18:32:04 executing program 1: r0 = semget$private(0x0, 0x3, 0xdb) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfff9}, {0x0, 0x7fff}], 0x2, 0x0) (async) clock_gettime(0x0, 0x0) (async) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x24}, {0x1, 0x101, 0x1000}, {0x4, 0x0, 0x1000}, {0x2, 0xae, 0x1800}], 0x4, 0x0) (async) semget(0x2, 0x0, 0x288) (async) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) semop(r0, &(0x7f00000000c0), 0x0) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r1, r2, 0x0) 18:32:04 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff9}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r2, 0x7) [ 624.438501][ T23] usb 3-1: USB disconnect, device number 25 18:32:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x3000000}, 0x0) [ 624.503711][T12412] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 18:32:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b33, &(0x7f0000000000)={'wlan1\x00'}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/165, 0xa5}], 0x1, 0x7d63, 0x2, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) r5 = openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) (async) sendmsg$nl_route_sched(r3, 0x0, 0x0) (async) ioctl$int_in(r4, 0x0, &(0x7f0000000400)=0x81) (async) sendto$inet6(r4, 0x0, 0x0, 0x2200c851, &(0x7f0000000440)={0xa, 0x2, 0x6, @loopback}, 0x1c) (async) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x406f408, 0x0) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r3) (async) r7 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0xc0185879, &(0x7f0000000680)={0x3f000000, 0x100004000}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000002880), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="349a0fa10907dc3ab9ca000400e716", @ANYRESHEX=0x0, @ANYRES32=r5, @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0xdf7b08a3e6c66ea3}, 0x0) r10 = syz_genetlink_get_family_id$tipc(0x0, r8) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r10, 0x20, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0xfff, 0x80000000}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x24040800) (async) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r6, 0x8, 0x70bd2d, 0xffff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d5}, 0x45d0f620d3fe58aa) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, 0x0, 0x40005) r11 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r11, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) 18:32:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x4000000}, 0x0) 18:32:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b33, &(0x7f0000000000)={'wlan1\x00'}) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/165, 0xa5}], 0x1, 0x7d63, 0x2, 0x0) (async, rerun: 32) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) (async) sendmsg$nl_route_sched(r3, 0x0, 0x0) (async) ioctl$int_in(r4, 0x0, &(0x7f0000000400)=0x81) (async) sendto$inet6(r4, 0x0, 0x0, 0x2200c851, &(0x7f0000000440)={0xa, 0x2, 0x6, @loopback}, 0x1c) shutdown(r4, 0x1) (async) splice(r4, 0x0, r3, 0x0, 0x406f408, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r3) (async) r7 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0xc0185879, &(0x7f0000000680)={0x3f000000, 0x100004000}) (async, rerun: 32) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000002880), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="349a0fa10907dc3ab9ca000400e716", @ANYRESHEX=0x0, @ANYRES32=r5, @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0xdf7b08a3e6c66ea3}, 0x0) (async) r10 = syz_genetlink_get_family_id$tipc(0x0, r8) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r10, 0x20, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0xfff, 0x80000000}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x24040800) (async, rerun: 64) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r6, 0x8, 0x70bd2d, 0xffff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d5}, 0x45d0f620d3fe58aa) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, 0x0, 0x40005) r11 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r11, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c1}, 0x0) 18:32:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x5000000}, 0x0) 18:32:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x1c, r1, 0x21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x6000000}, 0x0) [ 624.787539][ T5141] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 624.959530][ T23] usb 3-1: new high-speed USB device number 26 using dummy_hcd 18:32:04 executing program 5: semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)) r4 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r6, 0xf847000) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) dup3(r0, r5, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x7fff}], 0x1, 0x0) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000140)={0x0, 0x0, 0x80800}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)) (async) syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) (async) syz_usb_control_io(r4, 0x0, &(0x7f0000000ec0)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x110, r6, 0xf847000) (async) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) (async) dup3(r0, r5, 0x0) (async) [ 625.027505][ T5141] usb 5-1: Using ep0 maxpacket: 8 [ 625.147706][ T5141] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 625.159272][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 625.169358][ T5141] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 625.179550][ T5141] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.198069][ T5141] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 625.207161][ T5141] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.215280][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 625.337793][ T23] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 625.351742][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 625.360978][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.479656][ T5141] usb 5-1: GET_CAPABILITIES returned 0 [ 625.485187][ T5141] usbtmc 5-1:16.0: can't read capabilities [ 625.550115][ T5135] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 625.627543][ C0] ================================================================== [ 625.635645][ C0] BUG: KASAN: slab-use-after-free in usb_anchor_suspend_wakeups+0x28/0x40 [ 625.644366][ C0] Write of size 4 at addr ffff888018fc4910 by task swapper/0/0 [ 625.651929][ C0] [ 625.654272][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 625.663562][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 625.673629][ C0] Call Trace: [ 625.676928][ C0] [ 625.679792][ C0] dump_stack_lvl+0xd9/0x1b0 [ 625.684416][ C0] print_report+0xc4/0x620 [ 625.688864][ C0] ? __virt_addr_valid+0x5e/0x2d0 [ 625.693929][ C0] ? __phys_addr+0xc6/0x140 [ 625.698470][ C0] kasan_report+0xda/0x110 [ 625.702898][ C0] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 625.708662][ C0] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 625.714470][ C0] kasan_check_range+0xef/0x190 [ 625.719367][ C0] usb_anchor_suspend_wakeups+0x28/0x40 [ 625.724959][ C0] __usb_hcd_giveback_urb+0x217/0x5c0 [ 625.730366][ C0] usb_hcd_giveback_urb+0x389/0x430 [ 625.735698][ C0] dummy_timer+0x1415/0x35f0 [ 625.740408][ C0] ? rcu_is_watching+0x12/0xb0 [ 625.745250][ C0] ? rcu_is_watching+0x12/0xb0 [ 625.750034][ C0] ? rcu_is_watching+0x12/0xb0 [ 625.754847][ C0] ? rcu_is_watching+0x12/0xb0 [ 625.759684][ C0] ? lock_acquire+0x464/0x510 [ 625.764503][ C0] ? dummy_urb_enqueue+0x8e0/0x8e0 [ 625.769649][ C0] ? do_raw_spin_unlock+0x173/0x230 [ 625.774908][ C0] ? dummy_urb_enqueue+0x8e0/0x8e0 [ 625.780035][ C0] call_timer_fn+0x1a0/0x580 [ 625.784653][ C0] ? timer_shutdown_sync+0x20/0x20 [ 625.789794][ C0] ? reacquire_held_locks+0x4b0/0x4b0 [ 625.795223][ C0] ? dummy_urb_enqueue+0x8e0/0x8e0 [ 625.800362][ C0] ? rcu_is_watching+0x12/0xb0 [ 625.805150][ C0] ? dummy_urb_enqueue+0x8e0/0x8e0 [ 625.810275][ C0] __run_timers+0x764/0xb10 [ 625.814802][ C0] ? call_timer_fn+0x580/0x580 [ 625.819586][ C0] ? ct_nmi_exit+0xd9/0x1b0 [ 625.824118][ C0] run_timer_softirq+0x58/0xd0 [ 625.828911][ C0] __do_softirq+0x218/0x965 [ 625.833489][ C0] ? __lock_text_end+0x5/0x5 [ 625.838139][ C0] irq_exit_rcu+0xb7/0x120 [ 625.842592][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 625.848274][ C0] [ 625.851234][ C0] [ 625.854189][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 625.860219][ C0] RIP: 0010:acpi_safe_halt+0x1b/0x20 [ 625.865526][ C0] Code: ed c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 65 48 8b 04 25 c0 bc 03 00 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 97 59 b5 00 fb f4 c3 0f 1f 00 0f b6 47 08 3c 01 74 0b 3c 02 74 05 8b 7f 04 eb 9f [ 625.885451][ C0] RSP: 0018:ffffffff8c807d70 EFLAGS: 00000246 [ 625.891540][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8a3ee0ae [ 625.899519][ C0] RDX: 0000000000000001 RSI: ffff888014af0000 RDI: ffff888014af0064 [ 625.907516][ C0] RBP: ffff888014af0064 R08: 0000000000000000 R09: ffffed1017306dbd [ 625.915538][ C0] R10: ffff8880b9836deb R11: 0000000000000001 R12: ffff8881416bc800 [ 625.923521][ C0] R13: ffffffff8d660b60 R14: 0000000000000000 R15: 0000000000000000 [ 625.931516][ C0] ? ct_kernel_exit+0x12e/0x180 [ 625.936392][ C0] acpi_idle_enter+0xc5/0x160 [ 625.941097][ C0] cpuidle_enter_state+0x82/0x500 [ 625.946144][ C0] ? mark_tsc_async_resets+0x50/0x50 [ 625.951675][ C0] cpuidle_enter+0x4e/0xa0 [ 625.956179][ C0] do_idle+0x315/0x3f0 [ 625.960334][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 625.965442][ C0] cpu_startup_entry+0x18/0x20 [ 625.970245][ C0] rest_init+0x16f/0x2b0 [ 625.974542][ C0] ? regulator_has_full_constraints+0x9/0x20 [ 625.980593][ C0] ? trace_init_perf_perm_irq_work_exit+0x20/0x20 [ 625.987056][ C0] arch_call_rest_init+0x13/0x30 [ 625.992026][ C0] start_kernel+0x39f/0x480 [ 625.996574][ C0] x86_64_start_reservations+0x18/0x30 [ 626.002066][ C0] x86_64_start_kernel+0xb2/0xc0 [ 626.007031][ C0] secondary_startup_64_no_verify+0x166/0x16b [ 626.013151][ C0] [ 626.016175][ C0] [ 626.018503][ C0] Allocated by task 12416: [ 626.022914][ C0] kasan_save_stack+0x33/0x50 [ 626.027624][ C0] kasan_set_track+0x25/0x30 [ 626.032261][ C0] __kasan_kmalloc+0xa2/0xb0 [ 626.036887][ C0] usbtmc_open+0xa6/0x9b0 [ 626.041317][ C0] usb_open+0x20f/0x2e0 [ 626.045490][ C0] chrdev_open+0x277/0x700 [ 626.049943][ C0] do_dentry_open+0x88b/0x1730 [ 626.054758][ C0] path_openat+0x19af/0x29c0 [ 626.059409][ C0] do_filp_open+0x1de/0x430 [ 626.063976][ C0] do_sys_openat2+0x176/0x1e0 [ 626.068668][ C0] __x64_sys_openat+0x175/0x210 [ 626.073552][ C0] do_syscall_64+0x38/0xb0 [ 626.078013][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.083936][ C0] [ 626.086257][ C0] Freed by task 12416: [ 626.090329][ C0] kasan_save_stack+0x33/0x50 [ 626.095049][ C0] kasan_set_track+0x25/0x30 [ 626.099688][ C0] kasan_save_free_info+0x2b/0x40 [ 626.104725][ C0] ____kasan_slab_free+0x15b/0x1b0 [ 626.109881][ C0] slab_free_freelist_hook+0x114/0x1e0 [ 626.115391][ C0] __kmem_cache_free+0xb8/0x2f0 [ 626.120266][ C0] usbtmc_release+0x285/0x390 [ 626.124970][ C0] __fput+0x3f7/0xa70 [ 626.129013][ C0] task_work_run+0x14d/0x240 [ 626.133660][ C0] exit_to_user_mode_prepare+0x210/0x240 [ 626.139322][ C0] syscall_exit_to_user_mode+0x1d/0x60 [ 626.144806][ C0] do_syscall_64+0x44/0xb0 [ 626.149249][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.155171][ C0] [ 626.157500][ C0] The buggy address belongs to the object at ffff888018fc4800 [ 626.157500][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 626.171583][ C0] The buggy address is located 272 bytes inside of [ 626.171583][ C0] freed 1024-byte region [ffff888018fc4800, ffff888018fc4c00) [ 626.185479][ C0] [ 626.187816][ C0] The buggy address belongs to the physical page: [ 626.194256][ C0] page:ffffea000063f000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18fc0 [ 626.204411][ C0] head:ffffea000063f000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 626.213347][ C0] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 626.221766][ C0] page_type: 0xffffffff() [ 626.226195][ C0] raw: 00fff00000000840 ffff888012c41dc0 0000000000000000 dead000000000001 [ 626.234792][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 626.243390][ C0] page dumped because: kasan: bad access detected [ 626.249810][ C0] page_owner tracks the page as allocated [ 626.255536][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5138, tgid 5138 (kworker/0:7), ts 155737699123, free_ts 155721972306 [ 626.276482][ C0] post_alloc_hook+0x2cf/0x340 [ 626.281326][ C0] get_page_from_freelist+0xee0/0x2f20 [ 626.287010][ C0] __alloc_pages+0x1d0/0x4a0 [ 626.291640][ C0] alloc_pages+0x1a9/0x270 [ 626.296113][ C0] allocate_slab+0x251/0x380 [ 626.300727][ C0] ___slab_alloc+0x8be/0x1570 [ 626.305430][ C0] __slab_alloc.constprop.0+0x56/0xa0 [ 626.310866][ C0] __kmem_cache_alloc_node+0x137/0x350 [ 626.316393][ C0] __kmalloc_node_track_caller+0x50/0x100 [ 626.322123][ C0] kmalloc_reserve+0xef/0x260 [ 626.326820][ C0] __alloc_skb+0x12b/0x330 [ 626.331267][ C0] inet6_rt_notify+0xf0/0x2b0 [ 626.336043][ C0] fib6_add+0x24f7/0x4700 [ 626.340388][ C0] ip6_route_add+0x8d/0x150 [ 626.344904][ C0] addrconf_add_mroute+0x1e0/0x350 [ 626.350055][ C0] addrconf_add_dev+0x150/0x1c0 [ 626.354944][ C0] page last free stack trace: [ 626.359615][ C0] free_unref_page_prepare+0x476/0xa40 [ 626.365112][ C0] free_unref_page+0x33/0x3b0 [ 626.369913][ C0] __unfreeze_partials+0x21d/0x240 [ 626.375070][ C0] qlist_free_all+0x6a/0x170 [ 626.379681][ C0] kasan_quarantine_reduce+0x18b/0x1d0 [ 626.385167][ C0] __kasan_slab_alloc+0x65/0x90 [ 626.390034][ C0] kmem_cache_alloc_node+0x185/0x3f0 [ 626.395455][ C0] __alloc_skb+0x287/0x330 [ 626.399913][ C0] netlink_sendmsg+0x9c6/0xe40 [ 626.404723][ C0] sock_sendmsg+0xd9/0x180 [ 626.409206][ C0] __sys_sendto+0x255/0x340 [ 626.413777][ C0] __x64_sys_sendto+0xe0/0x1b0 [ 626.418574][ C0] do_syscall_64+0x38/0xb0 [ 626.423015][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 626.428936][ C0] [ 626.431283][ C0] Memory state around the buggy address: [ 626.436941][ C0] ffff888018fc4800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 626.445039][ C0] ffff888018fc4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 626.453104][ C0] >ffff888018fc4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 626.461168][ C0] ^ [ 626.465755][ C0] ffff888018fc4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 626.473825][ C0] ffff888018fc4a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 626.481889][ C0] ================================================================== [ 626.489963][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 626.497190][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.5.0-syzkaller-12821-g6099776f9f26 #0 [ 626.506483][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 626.516547][ C0] Call Trace: [ 626.519831][ C0] [ 626.522687][ C0] dump_stack_lvl+0xd9/0x1b0 [ 626.527305][ C0] panic+0x6a6/0x750 [ 626.531318][ C0] ? panic_smp_self_stop+0xa0/0xa0 [ 626.536460][ C0] ? reacquire_held_locks+0x4b0/0x4b0 [ 626.541890][ C0] ? dump_page+0x6ff/0x1340 [ 626.546433][ C0] check_panic_on_warn+0xab/0xb0 [ 626.551403][ C0] end_report+0x108/0x150 [ 626.555767][ C0] kasan_report+0xea/0x110 [ 626.560217][ C0] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 626.565991][ C0] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 626.571755][ C0] kasan_check_range+0xef/0x190 [ 626.576650][ C0] usb_anchor_suspend_wakeups+0x28/0x40 [ 626.582245][ C0] __usb_hcd_giveback_urb+0x217/0x5c0 [ 626.587648][ C0] usb_hcd_giveback_urb+0x389/0x430 [ 626.592915][ C0] dummy_timer+0x1415/0x35f0 [ 626.597540][ C0] ? rcu_is_watching+0x12/0xb0 [ 626.602332][ C0] ? rcu_is_watching+0x12/0xb0 [ 626.607121][ C0] ? rcu_is_watching+0x12/0xb0 [ 626.611900][ C0] ? rcu_is_watching+0x12/0xb0 [ 626.616681][ C0] ? lock_acquire+0x464/0x510 [ 626.621403][ C0] ? dummy_urb_enqueue+0x8e0/0x8e0 [ 626.626552][ C0] ? do_raw_spin_unlock+0x173/0x230 [ 626.631792][ C0] ? dummy_urb_enqueue+0x8e0/0x8e0 [ 626.636941][ C0] call_timer_fn+0x1a0/0x580 [ 626.641571][ C0] ? timer_shutdown_sync+0x20/0x20 [ 626.646697][ C0] ? reacquire_held_locks+0x4b0/0x4b0 [ 626.652096][ C0] ? dummy_urb_enqueue+0x8e0/0x8e0 [ 626.657218][ C0] ? rcu_is_watching+0x12/0xb0 [ 626.661992][ C0] ? dummy_urb_enqueue+0x8e0/0x8e0 [ 626.667113][ C0] __run_timers+0x764/0xb10 [ 626.671639][ C0] ? call_timer_fn+0x580/0x580 [ 626.676427][ C0] ? ct_nmi_exit+0xd9/0x1b0 [ 626.680970][ C0] run_timer_softirq+0x58/0xd0 [ 626.685760][ C0] __do_softirq+0x218/0x965 [ 626.690328][ C0] ? __lock_text_end+0x5/0x5 [ 626.694963][ C0] irq_exit_rcu+0xb7/0x120 [ 626.699389][ C0] sysvec_apic_timer_interrupt+0x93/0xc0 [ 626.705038][ C0] [ 626.707988][ C0] [ 626.710937][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 626.716934][ C0] RIP: 0010:acpi_safe_halt+0x1b/0x20 [ 626.722264][ C0] Code: ed c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 65 48 8b 04 25 c0 bc 03 00 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 97 59 b5 00 fb f4 c3 0f 1f 00 0f b6 47 08 3c 01 74 0b 3c 02 74 05 8b 7f 04 eb 9f [ 626.741883][ C0] RSP: 0018:ffffffff8c807d70 EFLAGS: 00000246 [ 626.747969][ C0] RAX: 0000000000004000 RBX: 0000000000000001 RCX: ffffffff8a3ee0ae [ 626.755967][ C0] RDX: 0000000000000001 RSI: ffff888014af0000 RDI: ffff888014af0064 [ 626.763966][ C0] RBP: ffff888014af0064 R08: 0000000000000000 R09: ffffed1017306dbd [ 626.771958][ C0] R10: ffff8880b9836deb R11: 0000000000000001 R12: ffff8881416bc800 [ 626.779940][ C0] R13: ffffffff8d660b60 R14: 0000000000000000 R15: 0000000000000000 [ 626.787942][ C0] ? ct_kernel_exit+0x12e/0x180 [ 626.792858][ C0] acpi_idle_enter+0xc5/0x160 [ 626.797589][ C0] cpuidle_enter_state+0x82/0x500 [ 626.802656][ C0] ? mark_tsc_async_resets+0x50/0x50 [ 626.807984][ C0] cpuidle_enter+0x4e/0xa0 [ 626.812439][ C0] do_idle+0x315/0x3f0 [ 626.816559][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 626.821613][ C0] cpu_startup_entry+0x18/0x20 [ 626.826434][ C0] rest_init+0x16f/0x2b0 [ 626.830695][ C0] ? regulator_has_full_constraints+0x9/0x20 [ 626.836701][ C0] ? trace_init_perf_perm_irq_work_exit+0x20/0x20 [ 626.843145][ C0] arch_call_rest_init+0x13/0x30 [ 626.848115][ C0] start_kernel+0x39f/0x480 [ 626.852691][ C0] x86_64_start_reservations+0x18/0x30 [ 626.858202][ C0] x86_64_start_kernel+0xb2/0xc0 [ 626.863170][ C0] secondary_startup_64_no_verify+0x166/0x16b [ 626.869281][ C0] [ 626.872652][ C0] Kernel Offset: disabled [ 626.876980][ C0] Rebooting in 86400 seconds..