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"], 0x10e8}, 0x0, 0x20004010, 0x1, {0x0, r7}}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904", 0xf) readv(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r9, r8) 06:34:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="58021491795b652d1ca30109022d0001000000000904"], 0x0) [ 2284.276204][T21568] usb 6-1: USB disconnect, device number 71 06:34:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa00, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:34:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb00, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2284.675944][T20778] usb 2-1: new high-speed USB device number 6 using dummy_hcd 06:34:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe00, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:34:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf00, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2284.805973][T21568] usb 6-1: new high-speed USB device number 72 using dummy_hcd 06:34:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1100, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2284.921976][T20778] usb 2-1: device descriptor read/64, error 18 06:34:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f00, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2285.167591][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2285.215916][T20778] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2285.356611][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2285.371859][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2285.381475][T21568] usb 6-1: Product: syz [ 2285.387577][T21568] usb 6-1: Manufacturer: syz [ 2285.392193][T21568] usb 6-1: SerialNumber: syz [ 2285.445812][T20778] usb 2-1: device descriptor read/64, error 18 [ 2285.459101][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2285.576176][T20778] usb usb2-port1: attempt power cycle [ 2285.663468][ T8137] udc-core: couldn't find an available UDC or it's busy [ 2285.680223][ T8137] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2285.705098][T18024] usb 6-1: USB disconnect, device number 72 [ 2285.995623][T20778] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2286.165789][T20778] usb 2-1: device descriptor read/8, error -61 [ 2286.455649][T20778] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2286.455749][T21568] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 2286.655732][T20778] usb 2-1: device descriptor read/8, error -61 [ 2286.776462][T20778] usb usb2-port1: unable to enumerate USB device [ 2286.825723][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2286.996057][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2287.005126][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2287.014347][T21568] usb 6-1: Product: syz [ 2287.018822][T21568] usb 6-1: Manufacturer: syz [ 2287.023438][T21568] usb 6-1: SerialNumber: syz [ 2287.066865][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2287.276755][ T8257] udc-core: couldn't find an available UDC or it's busy [ 2287.283729][ T8257] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2287.294085][T10810] usb 6-1: USB disconnect, device number 73 06:34:54 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x3, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:34:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f00003af000/0xf000)=nil, &(0x7f00003af000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r5, 0x2a6e, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00003af000/0xf000)=nil, &(0x7f00005a6000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r6, 0x2a6e, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x100776f, 0xae6c, 0x3, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f00000003c0), 0x20000000, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904", 0xf) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:34:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f83, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:34:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) ptrace$getsig(0x4202, r0, 0x100000001, &(0x7f00000003c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904", 0xf) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r9, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) kcmp(0x0, r0, 0x4, 0xffffffffffffffff, r8) 06:34:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00003af000/0xf000)=nil, &(0x7f00005a6000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r6, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1cd1, &(0x7f00000003c0)={0x0, 0x899a, 0x4, 0x2, 0x13c, 0x0, r6}, &(0x7f00006d5000/0x3000)=nil, &(0x7f00006d7000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:34:54 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b651040aa000000830188030109022d0001000000000904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r2, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 06:34:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:34:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x833f, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:34:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:34:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x34000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2287.855584][T10810] usb 6-1: new high-speed USB device number 74 using dummy_hcd 06:34:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400300, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2287.906484][T21568] usb 2-1: new high-speed USB device number 10 using dummy_hcd 06:34:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0xffffff9e, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2288.146785][T21568] usb 2-1: Using ep0 maxpacket: 16 [ 2288.225841][T10810] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2288.276494][T21568] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2288.406656][T10810] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2288.416104][T10810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2288.424135][T10810] usb 6-1: Product: syz [ 2288.428609][T10810] usb 6-1: Manufacturer: syz [ 2288.433227][T10810] usb 6-1: SerialNumber: syz [ 2288.465530][T21568] usb 2-1: New USB device found, idVendor=aa40, idProduct=0000, bcdDevice=83.00 [ 2288.474719][T21568] usb 2-1: New USB device strings: Mfr=1, Product=136, SerialNumber=3 [ 2288.493916][T21568] usb 2-1: Product: syz [ 2288.505232][T21568] usb 2-1: Manufacturer: syz [ 2288.522294][T21568] usb 2-1: SerialNumber: syz [ 2288.547052][T21568] usb 2-1: config 0 descriptor?? [ 2288.576626][T10810] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2288.786289][ T8286] udc-core: couldn't find an available UDC or it's busy [ 2288.793277][ T8286] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2288.802109][T18024] usb 2-1: USB disconnect, device number 10 [ 2288.838470][T21568] usb 6-1: USB disconnect, device number 74 [ 2289.625441][ T1913] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2289.995424][ T1913] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2290.186212][ T1913] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2290.195378][ T1913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2290.203356][ T1913] usb 6-1: Product: syz [ 2290.209853][ T1913] usb 6-1: Manufacturer: syz [ 2290.214465][ T1913] usb 6-1: SerialNumber: syz [ 2290.266485][ T1913] usb-storage 6-1:1.0: USB Mass Storage device detected 06:34:57 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x5, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:34:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf0ffff, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:34:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200b02, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0x9c, 0x81, 0x0, 0x0, 0x4, 0x10, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xf6c, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x20, 0x7, 0x0, 0x5, 0x8, 0xfff, 0x7fff, 0x0, 0x778c, 0x0, 0xfffffffffffffff7}, r0, 0x4, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904", 0xf) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000340)='FREEZING\x00', 0x9) 06:34:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x2, 0xff, 0x9a, 0x0, 0xa30e, 0x140, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x2, 0x6, 0x4, 0x1, 0x80, 0x8, 0x4000, 0x0, 0x1ff, 0x0, 0xa1b}, 0x0, 0x3, r0, 0x9) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r9 = creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000440)="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", 0x1000) 06:34:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) ptrace$setopts(0x4206, r4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x1, 0x2, 0x4, 0x3f, 0x0, 0x3f, 0x66044, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x2800, 0x0, 0x5, 0x4, 0x80, 0x1000, 0x3f, 0x0, 0x9}, r4, 0x3, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904", 0xf) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:34:57 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/190, 0xbe}, {&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f0000000400)=""/126, 0x7e}], 0x4, 0x81, 0x100) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904"], 0x0) [ 2290.470585][T18024] usb 6-1: USB disconnect, device number 75 06:34:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:34:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:34:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2290.894202][T10810] usb 2-1: new high-speed USB device number 11 using dummy_hcd 06:34:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2291.015412][T18024] usb 6-1: new high-speed USB device number 76 using dummy_hcd 06:34:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2291.195286][T10810] usb 2-1: Using ep0 maxpacket: 16 06:34:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2291.344981][T10810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2291.386067][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2291.560212][T10810] usb 2-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2291.569522][T10810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.572716][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2291.580236][T10810] usb 2-1: Product: syz [ 2291.592523][T10810] usb 2-1: Manufacturer: syz [ 2291.595610][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.598724][T10810] usb 2-1: SerialNumber: syz [ 2291.613447][T18024] usb 6-1: Product: syz [ 2291.621136][T18024] usb 6-1: Manufacturer: syz [ 2291.633582][T18024] usb 6-1: SerialNumber: syz [ 2291.635290][T10810] usb 2-1: config 0 descriptor?? [ 2291.688038][T10810] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2291.697955][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2291.906692][ T8585] udc-core: couldn't find an available UDC or it's busy [ 2291.913676][ T8585] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2291.925894][ T2087] usb 2-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2291.935490][T10810] usb 2-1: USB disconnect, device number 11 [ 2291.952339][ T2087] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2291.968497][T18024] usb 6-1: USB disconnect, device number 76 [ 2292.027943][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2292.037446][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2292.047016][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2292.065455][ T2087] pvrusb2: Failure uploading firmware1 [ 2292.071085][ T2087] pvrusb2: Device initialization was not successful. [ 2292.080305][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2292.089891][T10810] pvrusb2: Device being rendered inoperable [ 2292.665124][T17472] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2292.755200][T18024] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2292.905165][T17472] usb 2-1: Using ep0 maxpacket: 16 [ 2293.025397][T17472] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2293.130945][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2293.195147][T17472] usb 2-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2293.204202][T17472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2293.213585][T17472] usb 2-1: Product: syz [ 2293.219733][T17472] usb 2-1: Manufacturer: syz [ 2293.224356][T17472] usb 2-1: SerialNumber: syz [ 2293.236885][T17472] usb 2-1: config 0 descriptor?? [ 2293.278593][T17472] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2293.299295][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2293.311704][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2293.320612][T18024] usb 6-1: Product: syz [ 2293.324797][T18024] usb 6-1: Manufacturer: syz [ 2293.330791][T18024] usb 6-1: SerialNumber: syz [ 2293.375748][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2293.495445][ T2087] usb 2-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2293.504695][ T2087] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2293.535737][T17472] usb 2-1: USB disconnect, device number 12 [ 2293.569583][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2293.579607][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2293.590338][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2293.600813][ T2087] pvrusb2: Failure uploading firmware1 [ 2293.606944][ T2087] pvrusb2: Device initialization was not successful. [ 2293.613752][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2293.628305][T17472] pvrusb2: Device being rendered inoperable 06:35:00 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x6, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) ptrace$setopts(0x4206, r4, 0x0, 0x0) sched_getscheduler(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x800) syz_fuse_handle_req(r8, &(0x7f00000003c0)="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", 0x2000, &(0x7f0000002ec0)={&(0x7f00000023c0)={0x50, 0xffffffffffffffda, 0xff, {0x7, 0x21, 0x9d, 0x0, 0xfaa1, 0x3ff, 0x7fffffff, 0x2}}, &(0x7f00000001c0)={0x18, 0x0, 0x4, {0x400}}, &(0x7f0000000280)={0x18, 0x0, 0xe4}, &(0x7f0000000340)={0x18, 0x0, 0x7, {0x69}}, &(0x7f0000002440)={0x18, 0xfffffffffffffff5, 0x0, {0x1}}, &(0x7f0000002480)={0x28, 0xffffffffffffffda, 0x0, {{0x7f, 0x63b, 0x2, r0}}}, &(0x7f00000024c0)={0x60, 0x0, 0x8, {{0xfffffffffffffff9, 0x61b719a, 0x1, 0x6, 0x1, 0x7, 0x6, 0x6}}}, &(0x7f0000002540)={0x18, 0x0, 0x0, {0x7}}, &(0x7f0000002580)={0x1a, 0x0, 0x100, {'/dev/ptmx\x00'}}, &(0x7f00000025c0)={0x20, 0x0, 0x1, {0x0, 0x1e}}, &(0x7f0000002840)={0x78, 0xfffffffffffffffe, 0x1, {0xfffffffffffffc01, 0x6dd, 0x0, {0x0, 0x1, 0x0, 0x5, 0x3, 0x100000000, 0x1f, 0x3ff, 0x401, 0x2000, 0x7, 0x0, 0xee00, 0x9, 0x7}}}, &(0x7f00000028c0)={0x90, 0xfffffffffffffffe, 0xc9, {0x0, 0x2, 0x1, 0x4, 0x6, 0x6, {0x4, 0x8, 0x80, 0x7fffffff, 0xfffffffffffffff9, 0x0, 0xfffffffc, 0x81, 0x5, 0x4000, 0x239, 0x0, 0xee00, 0x6, 0xff}}}, &(0x7f0000002980)={0x30, 0x0, 0x8, [{0x6, 0x0, 0x3, 0x5, ',&!'}]}, &(0x7f0000002b00)={0x288, 0xffffffffffffffda, 0x9, [{{0x2, 0x0, 0xc7, 0x0, 0x83, 0x8, {0x4, 0x7ff, 0x6, 0x1, 0x6, 0x3, 0x3, 0x200, 0x0, 0x1000, 0x5, 0x0, 0xee00, 0x7fffffff, 0x3}}, {0x3, 0x7ff, 0x1, 0x4b88000, '\x00'}}, {{0x1, 0x3, 0x10000, 0x6, 0x6, 0x3, {0x0, 0xc9, 0x5, 0x6, 0x1, 0x8, 0x41, 0x81, 0x6, 0x6000, 0x2a4, 0x0, 0x0, 0x2, 0xfffff000}}, {0x4, 0xce1, 0x8, 0x2, '!-[#^$-J'}}, {{0x0, 0x1, 0xc13f, 0x4d4a, 0x80, 0x21, {0x1, 0xbeac, 0x101, 0x8000, 0x4, 0x2, 0x0, 0x4c9, 0xe0, 0x4000, 0x800, 0xee01, 0x0, 0x1f, 0x400}}, {0x1, 0x2, 0x0, 0x5e}}, {{0x0, 0x3, 0xffffffffffff8000, 0xfffffffffffffff8, 0x9, 0x2, {0x6, 0x81, 0x7, 0x1, 0x4f, 0xbd1, 0xfff, 0x7fffffff, 0x1, 0x4000, 0x2, 0x0, 0x0, 0xbc, 0xc1}}, {0x0, 0xdc, 0x1, 0x6, '\x00'}}]}, &(0x7f0000002dc0)={0xa0, 0x0, 0xba1, {{0x2, 0x1, 0x1, 0x1ff, 0x0, 0xc, {0x1, 0x4c5, 0x5, 0x9, 0x8000, 0x81, 0x4, 0x8, 0x3e6, 0xc000, 0x7, 0x0, 0x0, 0x1f, 0x4}}, {0x0, 0x6}}}, &(0x7f0000002e80)={0x20, 0x0, 0x40, {0x8001, 0x4, 0xc8d7, 0x400}}}) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904", 0xf) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:35:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x14001, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x800) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x6, 0x1, &(0x7f00000003c0)="cc8a2869b17e8edacec32e9e298a94b0a39e4499a89ae9c3cd001df88ff6f712797d7579604e4784a319795e095753b05fdc5719070a30ca6c6b991932e9e89f481383e18d85afb109b303bfae851743008027be9c535f07d0e9b76ea8075ea037c430a52348dbcae72373d7fe34d6258867b40a82170d524024eccfe58b67fa3b3ad2db24cb88755279164da639ac0270d946f7826606a5318395cffae1697a7f215258728f41dda91f2bd2838e7bb1f8a17300444e95ddbcc4b50baf0aea195940002cdfa79d2c037fb2b9ec7aa7e90401cc5bd186aa95774239263ffc037fb27fcf9c932cf16a4ff1095972256660c9e990590342ddcd04aef06608fe4c09c68bdb29c689c13b82eac84d507b8695930d215d6b87a0b1cf2a7217b774734dcf16a1b23d07d2289a1cbace7357fb8da2fe020434fd3c1b04b2276318205a3aa310ae01299108d2531d85f990703279a53567bcc96cbb09cc63e622fbb2f5b4fbeeb1efd7e8c9ffd5fbac73ab2978375f845b78aa14e9bd1c4cbc3e09e9356204e40f7bf4586a2a2b0a41ab94751f53c64ac7cf2588163cff5d7f8f49f2dddcaa67bc1aea7bd02e55c768d57036d92d8bca2e74fcd39f4c47068f1429d0d9a1d442cd08eb36d48dac141abfc417a2426ab90604fd19007e9c5e27ed7e1b2078206f5a27717dbb55fe4247dceadde63df652cf862a11ebb92add81b6e75bbe065089cd46aa14ab4b3639ee3059ea93907b04d6a0402f0195ee8c7520ec47265fe167f5f7f3895c7433d5c3497975c82071d3bc9e95fcd5df550782cf035c39bd8e11bf38e5c1a91ac85f8724bf42bed7aa0474223885ace4ec4444f4f86498fe04cd9e183b574789cdfb020fad9062985340885a8ac1ab97fff2f33c69a23cf1b4d4fdbbc7f1998cd796aac5955d99953f5bfd17852423d795c42373947d156767492b5554d5391fef031c2e146035dd5dd226596e4a82a0170c3610dccfd611f2bb6f51bdd89d8770bbde8d48fff66108884c4f20f98815b198e4004a2b12de7d3c942ad0868f53f8b3acce262b1d90516667dd8e7722ecd9931142be5358655f49ab42166cee95d855b00544630cb7a7c38912943ff2680fec459e3b4404edd17b31b548de5b0514a146629a94302a60adc2c77d9e1ed3b76cfb03467cf57a9f416f4fca866725d05f60f4f569bc03a61f6bc27bc38faec9b8c590230b4b8463862e3aabf9c02ecfb59294707efa2b0c262b0a9fdb0816b34013b98320dd32aff4f2c5615ce946b4bac166936530dff0b7d932b8030d9d3ffef9c3e6f0973da5ed5d27a88ef776f51bbdb4e4c7f7ba9dce06f4c10fde0683d62518e00a1531cc0fc1fd413749589cc380e13a550635954d341a66a696bad32cf9e8777e62fa45180441a88a24b31ff2447876697ed828440bbab3e6c28eb17742f5c10408c7f80d8052585ea578b4416882789780e3308dbea715b5b9369b6869d9d61d04e0f974cc754869cc9e7c2aab09b5de866ea6d77f2ece495df8643b8ec47dbb0c519abbd4334438f41c15fe49e5e02cb9ebcc6fc79a60b53f910252154850b4700d8c746515d7260ec5e7b8e91f7ab69cc78839276e6aad8eafba44d67edb96dedb92021d1f93fb503beb77898c2f4b414f056b9288c2373b3e4d378ac4c3cd22bef0aff0bff4621ed5fcc723b905a4c742411a1095ad5473e4ba3910b5197cc6fc883ce7424c0899ac0185e5d2a843a3687254694bbfedcf494a90ffea847647bb0a9308fb0cff336d507df28f451113a255432f8966cb62ba774366d9f68bd1e622549a6090ec05b292cea55756f6e2659a1e67ee9cdbfebd85ea5145524fa8739fa0df7b80b33c29f279f6b2d9cc7f0d6946c3ec6fd07e7e37602af634c7bc04aa3b024fb45e9d56ab100ab5f09b4c5db8019862ab6725cdaf274107383992193477b1dd064f4a18e7b25759ab5c6b17d11686fa54c98f1db22c5624637ea36e42b9ee704dc6b3a25001a671120cc03e8855c99bbeb1cf07a8e67ad00924c6e19075bb5c0e295c0b9eae2c802d80d0c9dd5b716b828310e78ec25746c551282bc86f55bc8e6e8342994dcd803413a8d322b347871d541f4cec153f69f38675535c641acba8a83483030cf7934fb4563772e4c6c1fe199d726b4941d87fdc4eb98fb36bd8185d4157d635f74aa0ee456fb528485b706ef38888b7e686626b28ae745b1ca926e5339b8005cc8c9b58853ec0d3bb4522166d1056eb616d303cc7c4256d886b7793839d717bd9a160b3a0e449b6f5b53577ed4eceed06cbbaf863446b3853f1c150e0d90f18aab99fb91dc3a6f31fc793bf85e681508b2e77b03d658c9e8bce6321670b485d360b02eaec4a46c2e8bdb9abbe17dedfc6242c1f5d5bfa5d890ed3b2cee506f2cc5bfcc310925158101b124ebb5e5eb3f67c349e8d5c3d437148929148f89f77e1d2fc6118b164efdec06a1d1e3e876fcca91612ee3ad53fd2da836e8f0ac476a26eb535d57bbeefecdd02e3e782ba8ed0ba60717347e763a3ba231cef99398e03477c471f90d49f48182d8b42fc90e6eb11c767eacdac9c6b9564091bf50e6e8a8fca05d39a03dea7db97f52e7e2b80f05003e2148fd2c9cec7455584bd8e487ba77f44de1d0855f7ee37d94efbe1d754d02c3299c238e31685a23b297f1d74455cc29c5efd62d227efcdc00e65c4615efc09482cbc63856ea07ad0e9775f770365fbf6bda6ac508bfb9fe2a09e6c73546ad3beef978548119d1b57016928e994b6bf787c155c93c03476f9807d0d47fa04958fdc450a0235166a5d67a210b60da2d8a0b55f73c43ec51221aefa25f59b4551a0d05b6a525f2c861dc06e3f2ee0dfb5d75177909fda908c527637f13f46ab937b1766f17a4cfb075eef8530e70efe3b303b51a259ce253d34047d5b91d4c899a572e7002a5cd687b0cedc495e671f246f3a0d81f32389e98356070a4dd77e15405930ff1ea94f83cb79328a22133f0459198773988acce1e2c8f007cf21fa84cefe6dd0732e0f4b78312430d921f5bf72a14eeb813f86f495c4b13703faa7c7eb4bd2587f7c4dd5005b8e6b91edf9558e87ed8f1ecb90b7e7e03f63c1e533a1c3bbe31334bc038e2380111a4514b41e73a3384d7bfe471408a6cf572eb44eae22bce84eb084818556d38f96b70199beb25283382acac9d6f043e8f39ce48552160542fdfe93a2e7792cf7585b019e2f3dea161d531019d744359f4d05520dfe13324bd519aeae435a377c2abd9b436fa30e68be01955e4ac2bd4d392663429cc98d789413a160b6852da3f53d63d12ab256d6d7dfeac6f4a5ee554b15077e3213a9104c53cda6f7788e1a7dadbb8db4ebbb181fecfcac336b4d34c05add74b178a001ea1752aee9d17b017e0a179d42a35ed30d188c5b9b8e74c10b1ceae85ca93f4deb5616a390108bd31fc193c5ad9b854fb0ff5a1343037f870f5be1f0db691e59b65de610e63ba56e87de68647880e0c4390b22f3dcdd1e61e86f1540e7b835dc1c6401a1833d88c3449c8b77eb0c1f1fbb75a0514293bc98f1f4b30ae2eb6eb509a7ca449ac068a260f602e07b10bcb19288f932848718986aacc6d45c1fd56f5f2ef02c71d9ad5e88e2bb11857b288fde954d24a8c4d844c324c230d24be9196bf41800bcb165ce0346c83ce25228003cd3d9b482658052999082b471fa0dc129370b70e3b4142d832cf4bc55838a3aaf27e45af96eb08059c4584f09cb51ac926be7030a23f07d1bce5918a5ecc9435ab83c8fe3ed4ed69253d3b042b58a5ffd6aef140b696abe1f723b0f5897b7c1400fdf0027e6179520f740a80506cb856d5a4ededebd3509a9229be649f5f092f1402ac7f2ae2bac3ea9d9ec3377eeb138671a6e6b0d014f3a0a64d5b28806215e5bebf63747efbfc73e44526236df789e37c375529d222829deed089969d8fdd4d437812b7affcc64452aa4a337f4d0e54e8b8855049833de7e61e448005722ea5d76043417a9058c3c306a334263773f6317d27b7b536ffcc5be81e224cf214335beeef1ff9a586be8cb1b52e89426ffd075c02daf5cd9ad9a2eb2f25b112a143951e2b519536232d639f2cf87cf5f535dd527b531eadb3df407c8f2173310ad27ca32c6c87029a47e11f5e132655e57fc19f31510914314f625fe62988b623ee830e3baf9bfb6d327f06e2202a703140eb6d779b6009542dc85f493c11eea71690682492cf1f56487974d5ee9f6daa943ef14986dafaab755461c8f914afcc9c4c3b6fce0cf0c6b24f3c17ff2d6f27775ff7b06c21b0f815a04f1ede7859077f94a0679d22431830bcec872b8c38e5bbbe41ebdd0e987aacdaaa32483fb2ddb07416865736581a2f4bf489c7edc7387ecfef942bcdbeda118b31b7653611eece0b5596637134463afcfa16c51dad8c80e7958ae5aa2fb4e6dc8472b0f9926aff902fa484648c786736f8bd1c7cb70590466c2bc6277dc44eee7bf6df817aef5a0827deb8e75aeff0025d914db319e05c62886e42b9674706cbbf4470a33a23130b09b5895622ad496aa96f86f5ab59949591398ce2643e3c8e446f2ac3c572bf969af4529365a599b2b8ebfe56eb056596d11a53aa90cc4bda03c3a272d5093e6d3d202e74442fe8b0689d11af14866b9d9ce1f679eef7fa7334b5936b31701577526611d583b07c10309f7b96df3eac6d829c4afdcce541ff217bd624ab4cf8682d6cce87d283084b9dd1a12353495f676ad7667c3a08b07c972d1a39f3bcf72e23641327ca32ce56a155256cb0055b05608f7885f3d2350b8690b444fafac0090a5d3ae26064179116b7f1fdf7f753b8258fee07a2646e758b78b29eab6cdd0089ada6568041875581b01d16f57110c73fdf93ffd7174be8107fee3fd75d4c3b41a857e84015d3b880ddcdb303372a7f1de4bb56e10c503489cf20a9a6eefea2c0e2dec3059191cbbb3cec10c8fb401201ee03005744f60631ea5f3f61bd8218b33d916644e8bd5b3826fa085844cacd9e8e2932b5838238968225d7c2f30969d93c7de1d72166f15554d013ac825b72feedd62b29b188cb697ca16a4de5df1492155b5a54156eb6d5001b43df4f8be9b1b447c93357e77a0496f650efef858ac728d46732ec47fc94864a79517b0ceede8f85c41fdfd30d758fdd8e643f9a0b7cfda1bb9e348f1192b21ced3aa6a911e4d76bc35d1d4eb1c36ef7b4dbb87b6a3e8cc64611d1a0530f435689c71a2ccc94b57b6520a1ccc91cf6f62ef5c37c766da340d846121435fed58d8bcc5834d1b6374287ad36f2683b31d7602df2c75a13925937df583348f1964bd7af47255ade871a4c8754701db29ace5700130367f0cac56df0474743a78fad792fbe201a76f5f708bd4ba47c9fa8ca242b7b4fd48327e45be00efe3ba82d87c1215798aaa3661ee22003afab50702895865c18f67741813bc0c36431a757c38c6fa38ca02ee5cffc269fef627a7782f05d0dacb919d0389bf91c08400726460ae74b8d126ccd92c35f2d5f8ca237e18be976e26f54e06509849bf0039cf116bcbd10ad1c97b7eb6ea0d033a09d78e6c83a331ed68ea36f4e566558ec9364924afe2b2fd641a4f8f04ed24e4770298d4a36be384020b7dd3597ef087e2e3253a63440d8dcf5d62944aa7b2daad6a32a78768c513f3ee129a2fbb4c809202d3fcf5771aafcda01a9fb9c3dddcec1a434e7347c47bf0874ed9a8e1eaa01cddfa1c3c820ea434784caac853c3f57b385bf74c66be961b2deee371e8104354a6d6bdd5b5", 0x9b, 0x0, 0x0, {0x1, r9}}, 0x7f) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904", 0xf) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) preadv2(r6, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f00000004c0)=""/78, 0x4e}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/120, 0x78}, {&(0x7f0000000680)=""/238, 0xee}, {&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000000880)=""/218, 0xda}], 0x7, 0x4, 0x7, 0x9) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) dup2(r7, r6) 06:35:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f0000000180)=""/208, 0xd0}, {&(0x7f0000000280)=""/143, 0xfffffffffffffdcf}], 0x4, 0xd9f, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000380)=0x19, 0x4) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904"], 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000004c0)={0x0, 0x3, {}, {0x0}, 0x4, 0x7fffffff}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000500), 0x24200, 0x0) r3 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r3) ptrace$setopts(0x4206, r3, 0x0, 0x0) getresuid(&(0x7f00000023c0), &(0x7f0000002400), &(0x7f0000002440)=0x0) sendmsg$netlink(r0, &(0x7f00000024c0)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc, &(0x7f0000002340)=[{&(0x7f0000000540)={0x3b8, 0x1f, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x20, 0x0, 0x0, @uid=r1}, @nested={0x13a, 0x60, 0x0, 0x1, [@generic="6744aa4f5f63ce7f982ebb5e1e4d", @typed={0x8, 0x64, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0xc, 0x29, 0x0, 0x0, @u64=0x5}, @typed={0xb, 0x80, 0x0, 0x0, @str='TIPCv2\x00'}, @typed={0x8, 0x20, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0xc, 0x30, 0x0, 0x0, @u64=0x5ae}, @generic="233f4d3e036afe86bab8396813b7148f8b5833dfd3c591393afd45287c311e17bddd48c36fb2641062cc539987e3f8941289a84c4ced3cfdd9bbafffee459b2c45cb97d7da0c3505a2e3e394c00f7af7c75631e622c1574f516e85d141528bdc077bdedd71a07bc7a45fd16ba072f3c788cc57a62d3f3f30d71990c949cdf26c4f1ff8caccf0d9c51e6ac350798604d04acbba529df2e914b47ad3f325a990f8a0437e86b2b11a276fa443b50a6867ba83c9c1bb05c8cdf822513ee1453b9582d7adc05b0bbb31033a3a09ca26b6ca7a77af4933459f078e2da0d84b238fc0f8528abe7f00a961941494ff831113e0622e68327d"]}, @generic="bc998db80b3a716d602679bb00c6420cac472886bd2e44ed5176fbdb354a2caa3682660676f625ac4c2e54d64cd825b12a1622b9c0d6a3fef4cd5df7bc7358a7ad26c1003be12cf72fa244e6d5b42cee747e77f92155c5d4285430e093b9ff53391b78c1e6a396e3f31280fa9d9994dd6b34dbbf73539105fbea79c195a65407122198ecca8fbeca26c118ef09b6", @nested={0x1d2, 0x7f, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x88, 0x0, 0x0, @fd=r2}, @generic="90affc1dac70e8f954ac4cc7b4085ace92f00ce23b30103b5947abd1323bcfbc3b36acc1636e9109ab0a331bbc1b977deb60f203294f08c463942c2e3e70312ebf2febf54cb54b63b8392a689e772f4f5919b8d3894bbd405c547fa4a7ea4abd12385b9f06f097a15a23977a1817ceedc40cddbf0acee95834b8529bd23ba1cef72cd862e7b479c738f941e28bedd82b1c719c84267eb7f8c007646b2f52", @generic="12122bbe2e664d7238bb4cd28d5172fbcac3c7d81133d896da06e766f9d73030dac86a9dded1f772a7a099049080dd19661673af55ede371745c76f3076571a854d6c7b91096e2dcbc6f0685f0b661248b6343c9cff0684a363e874be4577c2e036c68b46945478aa09a75774a2ecc6ae756295ceba1c012e5759594a675aaee8bbbd8d214f62ea61c972557370b1987f68949b34c", @generic="7ffd59c54d1337c06ae7a5b444777768a74a3797a62ab5f880ebf0be1aae6db5f61a6fa433fa06fd1975c38fba4ef77a651ea65b7164c26d5c6ba13f0d7ec541326ebb0ad9102078838bdd686c62fded333b63afb29dd0362aaa53d29b9cb956f492ce9b972849997d97163f2644f9046d4f8df2ec803233e7890d06f37892f8a8bb21", @typed={0x8, 0x88, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x3b8}, {&(0x7f0000000900)={0x164, 0x3d, 0x400, 0x70bd29, 0x25dfdbfc, "", [@generic="155d2a46d0a806a74dca953515d7e8c86b934d45189de33d66698445b66a1946be37e88229eee529490f994f9cc2336241d9ec9691a96f1965a2661d9b93e1cfc18332aadc389669110ecf09ed910de5f1056696a8fe01eac92833b3c97856d43b0038c6b87ed423576e47a73eaba19e", @generic="65f49e9861a713021a01becf78ff028df709fcb0f49ff6a83f263751e12b2ea0f9191dcf0fd0172acf754e2bd6a256fb816a86b52d7130c6911a6179d3e0e15d002120f6081eff55f3815c3145cbe7816352512161fd66a04e8312f6773daa936b8f878ffe9e94d3b59023d43922364783fc0703e5877c1e11dc5cc26443f5c8a707878edadb218922e1025a4f726c8d1e71cd2fd9117cca21365121265e5bf23d58fc66350e9b3dcef062aa751add8f1808df75f5713f005e4b", @generic="1eef67c24a948cc3fa418241ef36c7c3e21ff3", @typed={0x8, 0x78, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0x9}]}, 0x164}, {&(0x7f0000000a80)={0x168, 0x29, 0x8, 0x70bd29, 0x25dfdbff, "", [@nested={0xd4, 0x3c, 0x0, 0x1, [@typed={0x4, 0x69}, @generic="eacd9dc4d74b8f88ec45b6978263d01b92169aaacdce1478e9da176668103af9a5e9996ddc52f91ffe96d9deec12de10b68cb44b0ef0016440d2e49bd815e0dcb0f5e0066c296e68dc0017efd730c69d7c64d605244b2ead4942aeca0fda706f488569514c3f0c7501132bf2515b5a2a7795787db5af9ef178bc060bb6870d551e0b813870c4430ea6908edac666035aada193e68911b6f3f891fcd7101f7d9adfcac9c04f753ff8e4981e8c6a70f6e61524e1a20f52d008358ff43c5b085eddce201bf9", @typed={0x8, 0x54, 0x0, 0x0, @uid=0xee00}]}, @typed={0x8, 0x8, 0x0, 0x0, @uid=0xee00}, @nested={0x79, 0x2d, 0x0, 0x1, [@generic="1764c5b83d404b2a3760266985c17a716614fa2053cd51494ce0d2b9d68a56e430808d53db5f95834e9a44c6ca632223a24f7922a0cfe53d339268ec90d8187df0d364b9fbce7c84748623b9a6b509de690067cdcaee9788097fd25834063dbe0a99977cf9310da64096b4a7334c545021d00445c4"]}]}, 0x168}, {&(0x7f0000000c00)={0x1384, 0x1d, 0x308, 0x70bd26, 0x25dfdbff, "", [@generic="4a663b80", @nested={0x1cf, 0x70, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @ipv4=@empty}, @generic="a51d12d983edac402614f94ad1089e47c2a56aa24375c3ae65098ae26f5a9841514bef74e1f7389cd2f996bc59dbae6419630ed7d6602101a02105d19a6d39bec3c8a61fb571d8d684edb6dc45bfcf43decc7239f983b80bea44a4ef3da93944ffd3015a9b4726a7d47044ef4cd4bd45507f6de3ccd3b744d44a5c5429ccb731bcb4e65dcd06a85ed3f0187b9c3161d4d28c3b68bc7b135bb7ec770877ed49a1354d5c5457a959e57cd0664df44c701d0b52cc46f7de4d137c94dec1d3ad4e51001a68c90baa1cab2d2a8bbdadcb3a7bf3d6ace51183313d0060f1", @generic="dd1896eadb", @typed={0x8, 0x1c, 0x0, 0x0, @u32=0x4}, @generic="4d27f2e106c6867b6f380a931bd90a23d450844d89804f28e42988db97199f91816f23c166811cfc72435b1a007bce65ed16df007adbd1b1168ffd1b7285136238fdf06afa6e94ed2a1901d0685df912bf9e9fb16536fa0e38089e034e906540f4e39df269a07252319d7b6f8977f566f3a281bd5ec433124e569da0fac024d75bbc8461e3fdbea9b23bf075b56bf8d4b1748a8e8844e106c84b69cfe1400188ec3a95c99d20f87f48a3a02d74b853a7e123d72ee1730a1ba6b3704e78fd2637c51d4620ae23fb74f0824dd34bb9aca800e278", @typed={0x8, 0x65, 0x0, 0x0, @fd=r0}]}, @nested={0x119c, 0x36, 0x0, 0x1, [@generic="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", @typed={0x6, 0x6, 0x0, 0x0, @str='%\x00'}, @typed={0x2a, 0x81, 0x0, 0x0, @binary="35bdf4aa629966479a98ca22d1eec5e53107ceaa5a12e699c17945cd319ff72a947457d6d969"}, @generic="a740c428071c66fa2e60f52f87e6bd8d6f6d30b887f81ac91e6157edd7dddfa7cc1923c341ba7bd2efc40de63a6e9445c53e49f155f1e4ce", @generic="e0dfb064ca931f675d3a62f9d4d19546fca519b576a6a0913b6b5d47c10e9b5bdc7f0443b39bb1ddd29553581f21a266ae455299761fa8afdeda1534a63dc8f9ba6a4f1ae63700096e355730989e351cdfb67c225c850d5c0a5f7a1a7013020205f4b189ff1f18f3f8d924a86f63dc63d5092c325895dea232815cde99392d2f9b42e7740b58b84a8113bea718f3d74df36b940d40f1b78e1ca8915f86e605a824ddca8820489c1780a3cffe1628ab8a814f9d", @typed={0x8, 0x55, 0x0, 0x0, @u32}, @generic="7f4886f94227e19bccdbce33b209fa71a38f1306bfd99ba3ae71b1b7f29db13a9a671dbc635d99d9dac3d25a72d153e0c5be1f58bc13f8f83a3cefdf79dc3fc4c5636a20577e9949e88663d5a084e34ec0ce8eb36c819f4de0b60858bacf7c3f53b8b8ba8b1b201cb2ef2e4a4472e3630d"]}, @nested={0x4, 0x22}]}, 0x1384}, {&(0x7f0000001fc0)={0x360, 0x2a, 0x2, 0x70bd29, 0x25dfdbfc, "", [@nested={0x18, 0x38, 0x0, 0x1, [@typed={0x8, 0x17, 0x0, 0x0, @ipv4=@multicast2}, @typed={0xb, 0x29, 0x0, 0x0, @str='TIPCv2\x00'}]}, @generic="6edabeef53567b1cad3a1d5475c91962bcacfed966a2722f38003a17cca72a6ddfd5a1d072e1eb2e31fa3dafef8d9f5dbea88f2904442a23e193f29cc94960cbd2b98991c8f6f38c0e0351fa2addcb6ee8407a330dd1b073ed5405220219a18c2ea31e677581b949b58d537a5707fc73410b6df23df425ce8aa350608abe520b21d6b158bfaa7164bd8dfe95ae5473b32fc574d085bc8b8e84f695d0d37bceadd6e68f3e785debac84713fb2a6e53e7e0add0628241ab07c317274c69137968537830a1d4b162ce61048cf266341e4d6e89d312b2ee1b8f3733390565b68b67fe86aa78027fdccced5e4a3064f88a210c7dbee98e096", @nested={0x23c, 0xe, 0x0, 0x1, [@typed={0x8, 0x7a, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="440d0a3a8d7c251c6f74840e674f7f9b627afbc327808b435fb4313cbb2c6fe4ca5359720104222a", @typed={0x8, 0x3, 0x0, 0x0, @fd=r0}, @generic="63828dfb6dfb7106d34eacd6901610a143d1a3bbdcab0e414ec3670109fc97818800a7345281e9f095ca5560363023786d2fa7fec25a0bae34bc65cce2cedd8ba223ead2c26854a73129b9eab6d0267649204f8163787dcaf75f1ba28bb56e6b77293f5f8dd82df0b3f752ca41d49d4c80bf0250644fd87c04df", @generic="2e88bf8972d27417fce75d0fdb9050319f4dc0ac296a3abe3eb50f7ca28681269f11f6a8486d87402577fc665085868f6fbf266c3b913f121f617b44a4912c0a05add5b999829e9417d3f201fb1aabe61c5418a032acd66af25b32de4662d1197d03596eb0d552e50ee9a02907d0b9344b2648a7a8ba9c0282ad9ba1921fb8fcca242684dca238f95570", @typed={0xf4, 0xa, 0x0, 0x0, @binary="67ba5d4fc782f0fce6f3e58cd9bba58e4fb9b512b0b47dfc683c20c93fabf6df7dd623f4cbdcc3fc4f9ee620b018caee508eec5e4fd9589ef8be7e9827eb6ef5a45c53314a9abd38bd3cb0fa0342b8098ffb97854f7b6a4d6fa7adb7880d0358e37df54daea9fdade01dbb2ca448f3000dbd578ccca1d36a11eceab946119594a92670bc91ce73991e4fc64ea1335f592faf8fc4729b0a267c16f7728dc4551f53177f9ed4e713d5f6c64216a565ea456f453a447b2bc0d604a0d097e56b3ed105a9b162ea1fe80b627a0d7f96fd771a4a0796203dead2b996626fd86c10ed9940fa6535e66df7dcb45d3b9bafeab76f"}, @typed={0x8, 0x96, 0x0, 0x0, @fd=r0}]}, @typed={0x4, 0x49}]}, 0x360}], 0x5, &(0x7f0000002480)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, 0xee01}}}], 0x20, 0x80}, 0x40) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) syz_usb_connect(0x6, 0x516, &(0x7f0000002500)={{0x12, 0x1, 0x110, 0xfa, 0x51, 0x35, 0xff, 0x742, 0x2008, 0x28bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x504, 0x2, 0x4, 0x1f, 0x40, 0x2, [{{0x9, 0x4, 0xe1, 0x4, 0x9, 0xd1, 0x60, 0xa5, 0x4, [@generic={0x70, 0x30, "7ed2556af425cdae6e12725afa85ba1a04ab6ba5b06fbdc53487fdf72bfacccbaed5e2cd7d6e99a322edecf5d62661eb0f5f4af4c9c32d3282f8612c3707641f575552c732c36ac6875fcf8e160d54189c32620ef669746da168f04bb51aee117e7683389a64ec8dd19033abc39d"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "a58fb81016"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x3, 0xd50, 0x5}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1ff, 0x3f, 0x1f}, @mbim={0xc, 0x24, 0x1b, 0x80, 0x5, 0xa6, 0x5, 0x7, 0x7}]}], [{{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x81, 0x9, 0x81}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x8a, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x8}]}}, {{0x9, 0x5, 0x6, 0x10, 0xff, 0xb3, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x6}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x8, 0x3, 0x5}}, {{0x9, 0x5, 0x15, 0x10, 0x10, 0x2, 0x80, 0xa1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1b}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x1f, 0x1, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x400}, @generic={0x3c, 0xd, "490313f18b439bdd4e18b36f43390da89a06d87321772e2a4b9d55b556a1371bab7227b997a45929249587f41481077c8cc34ade082c9f73a49e"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x7, 0x9, 0x9, [@generic={0x29, 0xb, "b4644510cd05994458cdd5888c49c76d64847552a648ce38b7c8e5e4ce9f9582174695cc85e562"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xee, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7f, 0x6, 0x3, [@generic={0xfb, 0x23, "834c11e975b1af5b2b4a4781e820561badbdb3f4f53c145ab4a73004b828f8cc0230c63e9892aefb7b51b53751a7a81611895b6af755034bfee5ab9555b2307823d558ccc1b8811cb4dc49205ba000a193a997ebab0d51cc16471328de9190d0cc0264b00cd279274d89131c4d2b2a2ba85dcb182f61d46ba5409921075a076c80a05160b32e0d08fe841339cd9c40533dbac503946c70b249371b154c85c6a41f28530ead2b0424775e85d7da9d4f406f8bd81df4b3c7d25d9665b8034319ce15c06d79a26c0bbeb458fc6d48050b7e9565684568517aa3cbcbb6549d62fdbe12e93d5ee273d98cf25a6ac35959a5098be2bc70f72df1f767"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x40, 0x3, 0xba, [@generic={0x3a, 0x4, "46e0456f4e1d55c6ee8b8f491512e16e1e285a0fe487e10e4fbf66f005ca44d0ac298504ba1f46c2aaab8fcdbf0f1d293715695754e01afd"}]}}]}}, {{0x9, 0x4, 0xda, 0x1, 0xb, 0x4c, 0xa8, 0xc5, 0x7, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "8b2d8a"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x7fff}, {0x6, 0x24, 0x1a, 0x7}, [@network_terminal={0x7, 0x24, 0xa, 0x4, 0x80, 0x6, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x40, 0x81, 0xa4, 0x400, 0xff}, @country_functional={0x8, 0x24, 0x7, 0x8, 0x3b9, [0xe349]}]}], [{{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x98, 0x3f, 0xff}}, {{0x9, 0x5, 0xc, 0x1, 0x3ef, 0x20, 0x3f, 0x8, [@generic={0x3e, 0x4, "4bfe3db571f355319fa03412064b7f03c47cd6a38b329be7645841e326e4163b7603c20fada81403107c8806302f375b5beaf80a569f11576c850412"}]}}, {{0x9, 0x5, 0xbf7bc10e5efbdbcf, 0x1, 0x3ff, 0x95, 0x1, 0x32, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x20}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x7, 0x81, 0x5b, [@generic={0x5, 0x2, "a27df1"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x2}]}}, {{0x9, 0x5, 0xe, 0xc, 0x0, 0x97, 0x22, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x782}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0x1, 0x3f, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x94}]}}, {{0x9, 0x5, 0x7, 0xc, 0x8, 0x5, 0xa6, 0x3, [@generic={0x9, 0x22, "cc4690f40854ea"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x1, 0x5e, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x183, 0xfd, 0x4}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xfe, 0x8, 0x7, [@generic={0x3f, 0x2, "0dfeef496de0b0d048556fa8243cab49c2e330859a14bcf642ae89715c24d87a03248811da016b86f4dbb13c02c3363cb8685c6add6fa87245ed108bee"}, @generic={0xb4, 0x4, "d784aed3bce0f8c8c790817f33b38ad4b1c2496a8ab0ce8e8375287a052d2c3962048f4d0c9c5332c27155359acc098ee2e7fdcbbde165fe3e0eaefa6f0dc1852282b68d2091f7639cd2630b6d1893f61b894509957f8e985b5256b95d4ad9fdcd84b9e248b1e3ee62a827a17bec12ab893f6a4b1046aba6ccac279141e8bcc18bffbe41a4f0a7edfa36a1e291543c77af2263a994156f9799f4884597a8bdf0cfd9a9ee8d9adce32010378e5e0d7763bd82"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0xfa, 0x2, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}, @generic={0x2, 0x78b1954c82b233eb}]}}, {{0x9, 0x5, 0x5, 0x8, 0x400, 0x7f, 0x9, 0x8, [@generic={0x2b, 0x24, "1df25ad811d0f087779a39751f816d05538e1609bd7d6839a48bca97accb9a4f9ca08d63f7b4e2d4d7"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xe7, 0x7ff}]}}]}}]}}]}}, &(0x7f0000002bc0)={0xa, &(0x7f0000002a40)={0xa, 0x6, 0x201, 0x0, 0x1, 0x3, 0x10, 0x7}, 0x35, &(0x7f0000002a80)={0x5, 0xf, 0x35, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x9, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x69}, @wireless={0xb, 0x10, 0x1, 0x2, 0x88, 0x7, 0x1, 0x5, 0x3f}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1, 0x9, 0xd9, 0x3, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0x4, 0x1}]}, 0x4, [{0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000002b00)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000002b40)=@lang_id={0x4, 0x3, 0x411}}, {0x19, &(0x7f0000002b80)=@string={0x19, 0x3, "a038dde7435db2cbca30e98413b11d7a74aae82efd27bb"}}]}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x4010, r0, 0x95810000) [ 2293.648572][T10810] usb 6-1: USB disconnect, device number 77 06:35:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2294.154749][T17472] usb 2-1: new high-speed USB device number 13 using dummy_hcd 06:35:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2294.196421][T10810] usb 6-1: new high-speed USB device number 78 using dummy_hcd 06:35:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0xf) dup2(r7, r6) 06:35:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2294.424917][T17472] usb 2-1: Using ep0 maxpacket: 16 [ 2294.560766][T17472] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2294.579977][T10810] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2294.725539][T17472] usb 2-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2294.734741][T17472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2294.744632][T17472] usb 2-1: Product: syz [ 2294.749772][T17472] usb 2-1: Manufacturer: syz [ 2294.754369][T17472] usb 2-1: SerialNumber: syz [ 2294.762171][T17472] usb 2-1: config 0 descriptor?? [ 2294.775879][T10810] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2294.796898][T10810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2294.807420][T17472] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2294.814634][T10810] usb 6-1: Product: syz [ 2294.820640][T10810] usb 6-1: Manufacturer: syz [ 2294.826937][T10810] usb 6-1: SerialNumber: syz [ 2294.886282][T10810] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2295.037827][ T2087] usb 2-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2295.047377][T17472] usb 2-1: USB disconnect, device number 13 [ 2295.053835][ T2087] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2295.084519][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2295.095776][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2295.116146][ T8911] udc-core: couldn't find an available UDC or it's busy [ 2295.130013][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2295.133261][ T8911] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2295.155988][ T2087] pvrusb2: Failure uploading firmware1 [ 2295.161574][ T2087] pvrusb2: Device initialization was not successful. [ 2295.165795][T21568] usb 6-1: USB disconnect, device number 78 [ 2295.179867][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2295.207226][T17472] pvrusb2: Device being rendered inoperable [ 2295.814859][T17472] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2295.984879][T20778] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2296.074821][T17472] usb 2-1: Using ep0 maxpacket: 16 [ 2296.214969][T17472] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2296.385166][T20778] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2296.406693][T17472] usb 2-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2296.415893][T17472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2296.423893][T17472] usb 2-1: Product: syz [ 2296.431048][T17472] usb 2-1: Manufacturer: syz [ 2296.436544][T17472] usb 2-1: SerialNumber: syz [ 2296.451670][T17472] usb 2-1: config 0 descriptor?? [ 2296.507708][T17472] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2296.564925][T20778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2296.574004][T20778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2296.583719][T20778] usb 6-1: Product: syz [ 2296.588655][T20778] usb 6-1: Manufacturer: syz [ 2296.593264][T20778] usb 6-1: SerialNumber: syz [ 2296.643049][T20778] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2296.756975][ T2087] usb 2-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2296.775017][T17472] usb 2-1: USB disconnect, device number 14 [ 2296.794795][ T2087] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw 06:35:03 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x8, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x3f00, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r8, 0x6dc5, 0x215, 0x0, &(0x7f00000001c0), 0x8) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904", 0xf) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001eeff00000904"], 0x0) [ 2296.826140][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2296.827814][T18024] usb 6-1: USB disconnect, device number 79 [ 2296.909136][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2296.964217][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw 06:35:04 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x4, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2297.021825][ T2087] pvrusb2: Failure uploading firmware1 [ 2297.042590][ T2087] pvrusb2: Device initialization was not successful. [ 2297.064998][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2297.083587][T17472] pvrusb2: Device being rendered inoperable 06:35:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x11000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x60000000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2297.415882][T18024] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2297.434782][T20594] usb 5-1: new high-speed USB device number 94 using dummy_hcd 06:35:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80010000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2297.512303][T17472] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2297.764662][T17472] usb 2-1: Using ep0 maxpacket: 16 [ 2297.794811][T20594] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2297.821666][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2297.901141][T17472] usb 2-1: config 238 has an invalid descriptor of length 0, skipping remainder of the config [ 2297.964953][T20594] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2297.976696][T20594] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2297.986347][T20594] usb 5-1: Product: syz [ 2297.990533][T20594] usb 5-1: Manufacturer: syz [ 2297.997990][T20594] usb 5-1: SerialNumber: syz [ 2298.010213][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2298.036391][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2298.044826][T18024] usb 6-1: Product: syz [ 2298.046196][T20594] usb-storage 5-1:1.0: USB Mass Storage device detected [ 2298.049570][T18024] usb 6-1: Manufacturer: syz [ 2298.071438][T18024] usb 6-1: SerialNumber: syz [ 2298.077220][T17472] usb 2-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2298.091094][T17472] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2298.108469][T17472] usb 2-1: Product: syz [ 2298.112846][T17472] usb 2-1: Manufacturer: syz [ 2298.128477][T17472] usb 2-1: SerialNumber: syz [ 2298.156290][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2298.302630][ T1913] usb 5-1: USB disconnect, device number 94 [ 2298.363813][ T9176] udc-core: couldn't find an available UDC or it's busy [ 2298.372058][ T9176] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2298.398526][T21565] usb 6-1: USB disconnect, device number 80 [ 2298.466802][T17472] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2298.515459][ T2087] usb 2-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2298.517376][T17472] usb 2-1: USB disconnect, device number 15 [ 2298.529772][ T2087] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2298.570259][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2298.581850][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2298.592517][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2298.603257][ T2087] pvrusb2: Failure uploading firmware1 [ 2298.609666][ T2087] pvrusb2: Device initialization was not successful. [ 2298.617891][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2298.635012][T17472] pvrusb2: Device being rendered inoperable [ 2299.174585][T17472] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2299.574669][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2299.745407][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2299.754532][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2299.762534][T17472] usb 6-1: Product: syz [ 2299.768910][T17472] usb 6-1: Manufacturer: syz [ 2299.773526][T17472] usb 6-1: SerialNumber: syz [ 2299.825672][T17472] usb-storage 6-1:1.0: USB Mass Storage device detected 06:35:07 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x10, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) r6 = dup(0xffffffffffffffff) io_uring_enter(r6, 0x3771, 0x2051, 0x3, &(0x7f00000001c0)={[0x80000000]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904", 0xf) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:35:07 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x80, 0x9, 0x6, 0x5, 0x0, 0xfffffffffffffff9, 0x4, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2781666e, 0x0, @perf_config_ext={0x0, 0x4}, 0x4411, 0x8, 0x100, 0x3, 0x0, 0x54fc, 0x4dd, 0x0, 0x4008244, 0x0, 0x3}, r1, 0xa, r0, 0x1) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) recvfrom$unix(r9, &(0x7f0000000340), 0x0, 0x10000, &(0x7f0000000440)=@file={0x1, './file1\x00'}, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:35:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x833f0000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x2}, &(0x7f00006d5000/0x4000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x800) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x103000, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r9) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f00006d9000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="640f18cd0f3266b84c0000000f23c80f21f86635000010000f23f8f4b800008ed0f30f53480036660f38817d5d66b97d0900000f3266b9650a00000f320f165e00", 0x41}], 0x1, 0x2a, &(0x7f0000000340)=[@efer={0x2, 0x9401}], 0x1) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904", 0xf) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/123, 0x7b}], 0x1, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904"], 0x0) [ 2299.961869][ T1913] usb 6-1: USB disconnect, device number 81 06:35:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9effffff, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf0ffffff, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff000, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2300.324559][T20594] usb 2-1: new high-speed USB device number 16 using dummy_hcd 06:35:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff7f, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2300.474452][ T1913] usb 6-1: new high-speed USB device number 82 using dummy_hcd 06:35:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff9e, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2300.564499][T20594] usb 2-1: Using ep0 maxpacket: 16 06:35:07 executing program 2: r0 = getpid() r1 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000280)={0x610, r1}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000140)=0x3080, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904", 0xf) readv(r7, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f00000003c0)=""/180, 0xb4}], 0x2) dup2(r8, r7) [ 2300.688043][T20594] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2300.850161][ T1913] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2300.901562][T20594] usb 2-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2300.925252][T20594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2300.934080][T20594] usb 2-1: Product: syz [ 2300.957323][T20594] usb 2-1: Manufacturer: syz [ 2300.962257][T20594] usb 2-1: SerialNumber: syz [ 2300.983807][T20594] usb 2-1: config 0 descriptor?? [ 2301.052586][ T1913] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2301.065594][T20594] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2301.086430][ T1913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2301.095656][ T1913] usb 6-1: Product: syz [ 2301.100068][ T1913] usb 6-1: Manufacturer: syz [ 2301.106818][ T1913] usb 6-1: SerialNumber: syz [ 2301.162611][ T1913] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2301.285123][ T2087] usb 2-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2301.286299][T20594] usb 2-1: USB disconnect, device number 16 [ 2301.333567][ T2087] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2301.369079][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2301.369507][ T9357] udc-core: couldn't find an available UDC or it's busy [ 2301.383719][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2301.389537][ T9357] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2301.406285][T13897] usb 6-1: USB disconnect, device number 82 [ 2301.421134][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2301.443341][ T2087] pvrusb2: Failure uploading firmware1 [ 2301.458455][ T2087] pvrusb2: Device initialization was not successful. [ 2301.466180][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2301.476476][T20594] pvrusb2: Device being rendered inoperable [ 2302.214404][T21565] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2302.574512][T21565] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2302.744539][T21565] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2302.753649][T21565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2302.763351][T21565] usb 6-1: Product: syz [ 2302.768179][T21565] usb 6-1: Manufacturer: syz [ 2302.772769][T21565] usb 6-1: SerialNumber: syz [ 2302.825578][T21565] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2303.031081][ T9534] udc-core: couldn't find an available UDC or it's busy [ 2303.038397][ T9534] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2303.047947][T17472] usb 6-1: USB disconnect, device number 83 06:35:10 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x17, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0xfffffff0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0xa0280, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=@bridge_dellink={0x544, 0x11, 0x400, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x40100}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x11b3}, @IFLA_VF_PORTS={0x144, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x100}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "44200376799c3e0e507163a1c92a20e6"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xa4}, @IFLA_PORT_PROFILE={0x8, 0x2, '$/!\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "44d59b8cfd197813f433e52fdb2808c0"}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "3376fbf91d50d292396e94426507c407"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ddb9e8047ca34e7ba9814fe121b328de"}, @IFLA_PORT_PROFILE={0xa, 0x2, '(\\&)\xdd\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x1000}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fd05848d77019db7168cf9fafa9d8dfc"}, @IFLA_PORT_VF={0x8, 0x1, 0xfef2}, @IFLA_PORT_VF={0x8, 0x1, 0x9}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '(.\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "665ef51f60792b553fefd1064720b18e"}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "fbc8c6a2e5df42e9992ee490da07a6cc"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "b93e9f7b3ed91f1981ec7649c96bae65"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x81}]}]}, @IFLA_XDP={0x54, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r0}, @IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x7}, @IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_VFINFO_LIST={0x22c, 0x16, 0x0, 0x1, [{0xec, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x6, 0x8e4, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x8}}, @IFLA_VF_TRUST={0xc, 0x9, {0xfffffc01, 0x8000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x55, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0xb34, 0x20}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0x3d8, 0x400, 0x88a8}}, {0x14, 0x1, {0xd1c, 0x1a, 0x7fff, 0x88a8}}, {0x14, 0x1, {0x0, 0x78a, 0x3f, 0x8100}}, {0x14, 0x1, {0x51a, 0x7dd, 0xffff}}, {0x14, 0x1, {0x2, 0x73f, 0x91aa, 0x8100}}, {0x14, 0x1, {0x4, 0x1e1, 0x2, 0x88a8}}, {0x14, 0x1, {0x8000, 0x12f, 0x8, 0x8100}}, {0x14, 0x1, {0x9, 0x46b, 0x9, 0x8100}}]}]}, {0x13c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x4a1f, 0xa9, 0xffff}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x6b, 0x1408, 0x88a8}}]}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x7f}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x361, 0xfff, 0x88a8}}, {0x14, 0x1, {0x29, 0x544, 0x22, 0x88a8}}, {0x14, 0x1, {0x101, 0xde2, 0x584, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x3da, 0x9, 0x8100}}, {0x14, 0x1, {0xfffffffc, 0x35a, 0x9e6e, 0x88a8}}, {0x14, 0x1, {0xad, 0xda8, 0x7, 0x88a8}}, {0x14, 0x1, {0x401, 0x788, 0x0, 0x88a8}}, {0x14, 0x1, {0x7fff, 0xa9e, 0x800, 0x88a8}}, {0x14, 0x1, {0x3ff, 0xd02, 0x8, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80000000, 0xffff7fff}}, @IFLA_VF_MAC={0x28, 0x1, {0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x1000}}]}]}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPOIB_PKEY={0x6, 0x1, 0x1ff}]}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6262}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x4}}]}]}, @IFLA_VFINFO_LIST={0x110, 0x16, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x8f1, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2a, 0x8000}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xff, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x10001}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x10001}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1000, 0xe69a}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x6}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x81, 0xfffffffb}}, @IFLA_VF_MAC={0x28, 0x1, {0x2}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x401, 0xf16, 0xfff}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x84}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x9, 0x3}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x55, 0x7}}]}]}, @IFLA_CARRIER={0x5, 0x21, 0x9}]}, 0x544}, 0x1, 0x0, 0x0, 0x40084}, 0x80c0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) 06:35:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x8001, 0x1, 0x2e, 0x8, 0x7}, 0xc) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040), 0x1, 0x101080) mmap(&(0x7f00004ed000/0x2000)=nil, 0x2000, 0x5, 0x810, r1, 0x4224b000) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="89642c73795b6510402010752c830102030109022d0001000000000904"], 0x0) 06:35:10 executing program 4 (fault-call:13 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2303.447063][ T9571] FAULT_INJECTION: forcing a failure. [ 2303.447063][ T9571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2303.474345][T21565] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2303.481872][ T9571] CPU: 1 PID: 9571 Comm: syz-executor.4 Not tainted 5.15.0-rc1-syzkaller #0 06:35:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x29}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2303.490762][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2303.492616][T18024] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2303.500827][ T9571] Call Trace: [ 2303.500842][ T9571] dump_stack_lvl+0xcd/0x134 [ 2303.500877][ T9571] should_fail.cold+0x5/0xa [ 2303.500914][ T9571] _copy_from_user+0x2c/0x180 [ 2303.500945][ T9571] iovec_from_user+0x242/0x3c0 [ 2303.500983][ T9571] __import_iovec+0x65/0x590 [ 2303.501022][ T9571] import_iovec+0x10c/0x150 [ 2303.501062][ T9571] vfs_readv+0xb4/0x150 [ 2303.501091][ T9571] ? vfs_iter_read+0xa0/0xa0 [ 2303.501122][ T9571] ? lock_downgrade+0x6e0/0x6e0 [ 2303.501166][ T9571] ? __fget_files+0x23d/0x3e0 [ 2303.557749][ T9571] ? __fget_light+0xea/0x280 [ 2303.562392][ T9571] do_readv+0x139/0x300 [ 2303.566568][ T9571] ? vfs_readv+0x150/0x150 [ 2303.570992][ T9571] ? syscall_enter_from_user_mode+0x21/0x70 [ 2303.576901][ T9571] do_syscall_64+0x35/0xb0 [ 2303.581334][ T9571] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2303.587233][ T9571] RIP: 0033:0x4665f9 [ 2303.591124][ T9571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2303.610757][ T9571] RSP: 002b:00007f28ff992188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2303.619185][ T9571] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2303.627155][ T9571] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000007 [ 2303.635124][ T9571] RBP: 00007f28ff9921d0 R08: 0000000000000000 R09: 0000000000000000 [ 2303.643094][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2303.651070][ T9571] R13: 0000000000a9fb1f R14: 00007f28ff992300 R15: 0000000000022000 06:35:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2303.754862][T17472] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 2303.762635][T21565] usb 2-1: device descriptor read/64, error 18 [ 2303.877577][T18024] usb 3-1: Using ep0 maxpacket: 16 [ 2303.994322][T18024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2304.004597][T18024] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2304.015589][T18024] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2304.028563][T18024] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2304.036121][T21565] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2304.134951][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2304.194773][T18024] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2304.203861][T18024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2304.220024][T18024] usb 3-1: Product: syz [ 2304.225724][T21565] usb 2-1: device descriptor read/64, error 18 [ 2304.231917][T18024] usb 3-1: Manufacturer: syz [ 2304.242953][T18024] usb 3-1: SerialNumber: syz [ 2304.253819][T18024] usb 3-1: config 0 descriptor?? [ 2304.304814][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2304.316555][T18024] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2304.324396][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2304.332847][T18024] usb 3-1: selecting invalid altsetting 0 [ 2304.344323][T21565] usb usb2-port1: attempt power cycle [ 2304.349870][T17472] usb 6-1: Product: syz [ 2304.365570][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2304.365784][T17472] usb 6-1: Manufacturer: syz [ 2304.384442][T17472] usb 6-1: SerialNumber: syz [ 2304.396456][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2304.445419][T17472] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2304.448870][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2304.491599][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2304.510429][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2304.546717][T17472] usb 3-1: USB disconnect, device number 45 [ 2304.570226][ T2087] pvrusb2: Failure uploading firmware1 [ 2304.584113][ T2087] pvrusb2: Device initialization was not successful. [ 2304.590803][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2304.609370][T17472] pvrusb2: Device being rendered inoperable [ 2304.653477][ T9564] udc-core: couldn't find an available UDC or it's busy [ 2304.660845][ T9564] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2304.678385][ T1913] usb 6-1: USB disconnect, device number 84 [ 2304.754181][T21565] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2304.924362][T21565] usb 2-1: device descriptor read/8, error -61 [ 2305.194144][T21565] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2305.364166][T21565] usb 2-1: device descriptor read/8, error -61 [ 2305.454081][T17472] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2305.484235][T21565] usb usb2-port1: unable to enumerate USB device [ 2305.814874][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2305.984246][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2305.993323][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2306.001705][T17472] usb 6-1: Product: syz [ 2306.006190][T17472] usb 6-1: Manufacturer: syz [ 2306.010797][T17472] usb 6-1: SerialNumber: syz [ 2306.055360][T17472] usb-storage 6-1:1.0: USB Mass Storage device detected 06:35:13 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x3, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:13 executing program 4 (fault-call:13 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:13 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x2de8, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0x4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d8000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x15, 0x80000, 0x1) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x208c0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) writev(r8, &(0x7f0000000740)=[{&(0x7f00000003c0)="37aa35ef22f537ea1462af7db29cd8cbf166e05b159450e37be36fc131591c78de833c1f0c314bf2f9ecd007912b219e7f13278717bbd06aa1a79f6f870b9d0abcf1a8396b592dd148d536b8361a4b431db18ccbb3e450d4d33c303914f3c4c254164f9d507dfb4127762b2dab847ae06b10bad7cdb3be19c35d4a2f519f0e931ae3c703d1e6d3495ecf328361d87060cb26c1d35107928234b86a2a65ae362c78bfdebfe3a3685b632800757abfca08c82087271614c3696e53f8257c19d0c4aec296", 0xc3}, {&(0x7f00000004c0)="65316ea35545a3c314c75ede8385b15269cd0cc12cfc44c776c5a396245246d92712e0642ccc8722c082ed33503f38ab70e81d9967dc50b4288f99695e2e39d478929b6097e22e52cb71251c80659e0147d475cdb3af1e2b4e0a9ae3e6145a230e43e007338260b21634f7259a6fa786beee6c08d096d4f9647ae6c75bfe798b7b5f5bd657", 0x85}, {&(0x7f0000000580)="197f6681cef723085e2762fc8596e6ac850f38067330659a4844c9106b0a8511091d1cf57bd91791faf3aa8e84607a912a60373669a94488cf3afa2def49faa9ff5ae405e73339b7428fd570c984f731f3b129e58229233e075e8504cf60f94b0da503857a721c08d4af0a0f0f4b2ce25eb14bbd2deb24cbdae0f57a7b503acb8acd6731f1a851e760e6b489", 0x8c}, {&(0x7f0000000640)="c62dbbf98edc35b862962ba9799eb9582c86661838437ebc94a12fbeb074afb913fc602e2ae24859d51f10593d83be767c1f705de83e310d80952a91cf65b38d804211da5d429dc0f05647cdd950533090dc08c183ed0177914c797c068e8b1d1edeaf49edf02d3fc822b4d2db8cfd8828c103473009b3", 0x77}, {&(0x7f00000006c0)="deb8fe86dc0b6c5050299b70f1ed5bf3728a12793732be777676186288c5b67dc42738d29d64a18ae8a05815880a6384f4df7b95168b9b30aa745fbd816515f371e1999d765597b3bb4c8c3f528c67898b64", 0x52}], 0x5) creat(&(0x7f0000000340)='./file0\x00', 0x1ac) dup2(r7, r6) 06:35:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3c}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r3}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000040)={r3, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) 06:35:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f0000002280)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/212, 0xd4}, {&(0x7f0000001240)=""/1, 0x1}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x5, 0x100, 0x6) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010100795b030109022d0001000000000904000000000040000000009bb36084ef84"], 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x20, r3, 0xf21, 0x0, 0x0, {{0x5}, {@void, @val={0xc}}}}, 0x20}}, 0x0) setsockopt(r2, 0xece, 0x8, &(0x7f0000002300), 0x0) [ 2306.207775][T21568] usb 6-1: USB disconnect, device number 85 06:35:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2306.594442][T21565] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2306.617027][T17472] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2306.709696][ T9693] FAULT_INJECTION: forcing a failure. [ 2306.709696][ T9693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2306.727489][ T9693] CPU: 0 PID: 9693 Comm: syz-executor.4 Not tainted 5.15.0-rc1-syzkaller #0 [ 2306.736196][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2306.746264][ T9693] Call Trace: [ 2306.749551][ T9693] dump_stack_lvl+0xcd/0x134 [ 2306.754163][ T9693] should_fail.cold+0x5/0xa [ 2306.758701][ T9693] copy_page_to_iter+0x37f/0xe20 [ 2306.763685][ T9693] filemap_read+0x654/0xe80 [ 2306.768232][ T9693] ? aa_file_perm+0x56b/0x1180 [ 2306.773022][ T9693] ? filemap_get_pages+0x1870/0x1870 [ 2306.778329][ T9693] ? mark_lock+0xef/0x17b0 [ 2306.782776][ T9693] ? mark_held_locks+0x9f/0xe0 [ 2306.787661][ T9693] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2306.793850][ T9693] generic_file_read_iter+0x397/0x4f0 [ 2306.799273][ T9693] ? do_iter_readv_writev+0x234/0x750 [ 2306.804679][ T9693] ext4_file_read_iter+0x1d4/0x5d0 [ 2306.809949][ T9693] do_iter_readv_writev+0x56d/0x750 [ 2306.815175][ T9693] ? new_sync_write+0x640/0x640 [ 2306.820046][ T9693] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2306.826232][ T9693] ? do_iter_read+0x283/0x760 [ 2306.830940][ T9693] do_iter_read+0x2f8/0x760 [ 2306.835470][ T9693] ? import_iovec+0x10c/0x150 [ 2306.840178][ T9693] vfs_readv+0xde/0x150 [ 2306.844352][ T9693] ? vfs_iter_read+0xa0/0xa0 [ 2306.848962][ T9693] ? __mutex_lock+0x21c/0x12f0 [ 2306.853744][ T9693] ? lock_downgrade+0x6e0/0x6e0 [ 2306.858629][ T9693] ? mutex_lock_io_nested+0x1150/0x1150 [ 2306.864204][ T9693] ? __fget_files+0x23d/0x3e0 [ 2306.868921][ T9693] do_readv+0x139/0x300 [ 2306.873095][ T9693] ? vfs_readv+0x150/0x150 [ 2306.877533][ T9693] ? syscall_enter_from_user_mode+0x21/0x70 [ 2306.883459][ T9693] do_syscall_64+0x35/0xb0 [ 2306.887893][ T9693] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2306.893815][ T9693] RIP: 0033:0x4665f9 [ 2306.897724][ T9693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2306.917350][ T9693] RSP: 002b:00007f28ff992188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2306.925781][ T9693] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2306.933773][ T9693] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000007 [ 2306.941760][ T9693] RBP: 00007f28ff9921d0 R08: 0000000000000000 R09: 0000000000000000 [ 2306.949745][ T9693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:35:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x3, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x4, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x5, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2306.957735][ T9693] R13: 0000000000a9fb1f R14: 00007f28ff992300 R15: 0000000000022000 [ 2306.983714][T21568] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2307.064286][T17472] usb 2-1: device descriptor read/64, error 18 [ 2307.113926][T21565] usb 3-1: Using ep0 maxpacket: 16 [ 2307.236525][T21565] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2307.254002][T21565] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2307.267097][T21565] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2307.281103][T21565] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2307.334043][T17472] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2307.374865][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2307.444728][T21565] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2307.454359][T21565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.462373][T21565] usb 3-1: Product: syz [ 2307.479133][T21565] usb 3-1: Manufacturer: syz [ 2307.483768][T21565] usb 3-1: SerialNumber: syz [ 2307.502231][T21565] usb 3-1: config 0 descriptor?? [ 2307.523948][T17472] usb 2-1: device descriptor read/64, error 18 [ 2307.568112][T21565] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2307.590732][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2307.590948][T21565] usb 3-1: selecting invalid altsetting 0 [ 2307.605411][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2307.624160][T21568] usb 6-1: Product: syz [ 2307.624473][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2307.634033][T21568] usb 6-1: Manufacturer: syz [ 2307.644240][T21568] usb 6-1: SerialNumber: syz [ 2307.652909][T17472] usb usb2-port1: attempt power cycle [ 2307.668238][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2307.703315][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2307.759756][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2307.768867][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2307.777594][T21565] usb 3-1: USB disconnect, device number 46 [ 2307.812034][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2307.824833][ T2087] pvrusb2: Failure uploading firmware1 [ 2307.831619][ T2087] pvrusb2: Device initialization was not successful. [ 2307.859856][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2307.874172][T21565] pvrusb2: Device being rendered inoperable [ 2307.910970][ T9698] udc-core: couldn't find an available UDC or it's busy [ 2307.931533][ T9698] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2307.954882][T18024] usb 6-1: USB disconnect, device number 86 [ 2308.073885][T17472] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2308.164620][T17472] usb 2-1: Invalid ep0 maxpacket: 1 [ 2308.313880][T17472] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2308.404674][T17472] usb 2-1: Invalid ep0 maxpacket: 1 [ 2308.410249][T17472] usb usb2-port1: unable to enumerate USB device [ 2308.593911][T20594] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2308.723858][T17472] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 2308.853823][T20594] usb 3-1: Using ep0 maxpacket: 16 [ 2308.973908][T20594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2308.984136][T20594] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2308.995903][T20594] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2309.009844][T20594] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2309.123870][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2309.174589][T20594] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2309.183884][T20594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.191893][T20594] usb 3-1: Product: syz [ 2309.196685][T20594] usb 3-1: Manufacturer: syz [ 2309.201304][T20594] usb 3-1: SerialNumber: syz [ 2309.215051][T20594] usb 3-1: config 0 descriptor?? [ 2309.323930][T20594] usb 3-1: can't set config #0, error -71 [ 2309.341119][T20594] usb 3-1: USB disconnect, device number 47 06:35:16 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x5, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800007, 0x12, r0, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./file0\x00', 0x490802, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=""/14, 0x47}, {&(0x7f00000000c0)=""/231}], 0xf5, 0x4, 0xfffffffc) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00003af000/0xf000)=nil, &(0x7f00005a6000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = eventfd(0xfaec) ftruncate(r7, 0x5) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001580)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r2, 0x7fffffff, 0x6, 0xfff, 0x0, 0x1, {0x0, r8}}, 0x0) ppoll(&(0x7f00000006c0)=[{r6}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000001600)=[{0xffffffffffffffff, 0x2000}], 0x1, &(0x7f0000001640)={0x0, 0x3938700}, &(0x7f0000001680)={[0x4]}, 0x8) clock_gettime(0x0, &(0x7f0000001500)) recvmmsg$unix(r6, &(0x7f0000000380)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)=""/64, 0x40}, {&(0x7f00000002c0)=""/105, 0x69}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, &(0x7f0000001400)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00ff0200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000010000000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xd0}}], 0x1, 0x40000021, &(0x7f0000001540)={0x0, 0x3938700}) dup(r1) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) 06:35:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x6, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:16 executing program 4 (fault-call:13 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0xfff, 0xffffffffffffffff, &(0x7f00000003c0)="e73f37847413e8ef375256f5eaa1665c83dad22ce741344a33f4f629a61ddade3b93a50d5cdb2991f9acd4c430b3d36de4537bcae8e3bc00d798dd3e94a2206b269efcc84f72fbbb27deb3e9c411950ab11a232522fe1c324abd2bd82cca906f751cc9e59c1880bbaef9176b59df36e66ea248f2dfedf2f23f86d5677e1850e810a07016a291dbbc04c9c91c5f7219785921a205c6035bade083584bdf62a97d88e5d5ba24e61d97ceff7c2707555ee37fab9079bac34d1c3f0ef0c3335fb1aebaa07895c02d948ee3", 0xc9, 0x1, 0x0, 0x1}, &(0x7f00000004c0)) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00003f3000/0x6000)=nil, 0x6000, 0x800006, 0x30, r0, 0x1679000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904"], 0x0) [ 2309.443989][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2309.453067][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.544684][T17472] usb 6-1: Product: syz 06:35:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x7, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2309.583868][T17472] usb 6-1: Manufacturer: syz [ 2309.653929][T17472] usb 6-1: can't set config #1, error -71 [ 2309.664048][T17472] usb 6-1: USB disconnect, device number 87 06:35:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x8, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2309.823781][T21568] usb 2-1: new high-speed USB device number 25 using dummy_hcd 06:35:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x9, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2310.003755][T18024] usb 3-1: new high-speed USB device number 48 using dummy_hcd 06:35:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xa, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2310.053695][T17472] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 2310.073777][T21568] usb 2-1: Using ep0 maxpacket: 16 06:35:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xb, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2310.193842][T21568] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2310.273777][T18024] usb 3-1: Using ep0 maxpacket: 16 06:35:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xe, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2310.363850][T21568] usb 2-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2310.376539][T21568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.394654][T18024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2310.398863][T21568] usb 2-1: Product: syz [ 2310.423087][T18024] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2310.431912][T21568] usb 2-1: Manufacturer: syz [ 2310.444662][T21568] usb 2-1: SerialNumber: syz [ 2310.454756][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2310.475247][T21568] usb 2-1: config 0 descriptor?? [ 2310.487785][T18024] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2310.526228][T21568] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2310.607153][T18024] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2310.683941][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2310.710288][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.720788][T17472] usb 6-1: Product: syz [ 2310.726153][T17472] usb 6-1: Manufacturer: syz [ 2310.730861][T17472] usb 6-1: SerialNumber: syz [ 2310.745912][ T2087] usb 2-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2310.761552][T21568] usb 2-1: USB disconnect, device number 25 [ 2310.787057][ T2087] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2310.804865][T17472] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2310.849673][T18024] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2310.877592][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2310.891271][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2310.893702][T18024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.916359][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2310.927402][ T2087] pvrusb2: Failure uploading firmware1 [ 2310.933147][ T2087] pvrusb2: Device initialization was not successful. [ 2310.940802][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2310.951193][T21568] pvrusb2: Device being rendered inoperable [ 2310.986197][T18024] usb 3-1: Product: syz [ 2310.991182][T18024] usb 3-1: Manufacturer: syz [ 2311.014872][ T9789] udc-core: couldn't find an available UDC or it's busy [ 2311.021841][ T9789] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2311.023292][T18024] usb 3-1: SerialNumber: syz [ 2311.063984][T20594] usb 6-1: USB disconnect, device number 88 [ 2311.100672][T18024] usb 3-1: config 0 descriptor?? [ 2311.114528][ T9798] FAULT_INJECTION: forcing a failure. [ 2311.114528][ T9798] name failslab, interval 1, probability 0, space 0, times 0 [ 2311.145128][ T9798] CPU: 0 PID: 9798 Comm: syz-executor.4 Not tainted 5.15.0-rc1-syzkaller #0 [ 2311.153851][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2311.163927][ T9798] Call Trace: [ 2311.167221][ T9798] dump_stack_lvl+0xcd/0x134 [ 2311.171838][ T9798] should_fail.cold+0x5/0xa [ 2311.176377][ T9798] should_failslab+0x5/0x10 [ 2311.180909][ T9798] kmem_cache_alloc_node+0x65/0x3d0 [ 2311.186137][ T9798] ? copy_process+0x5c4/0x7580 [ 2311.190934][ T9798] copy_process+0x5c4/0x7580 [ 2311.195583][ T9798] ? kasan_save_stack+0x1b/0x40 [ 2311.200447][ T9798] ? __kasan_kmalloc+0xa4/0xd0 [ 2311.205220][ T9798] ? create_worker_cb+0x202/0x270 [ 2311.210264][ T9798] ? exit_to_user_mode_prepare+0x256/0x290 [ 2311.216529][ T9798] ? __cleanup_sighand+0xb0/0xb0 [ 2311.221474][ T9798] ? __lockdep_reset_lock+0x1a0/0x1a0 [ 2311.226862][ T9798] ? find_held_lock+0x2d/0x110 [ 2311.231625][ T9798] ? create_io_worker+0x1e2/0x580 [ 2311.236655][ T9798] ? io_worker_handle_work+0x1820/0x1820 [ 2311.242293][ T9798] create_io_thread+0xb6/0xf0 [ 2311.246981][ T9798] ? copy_init_mm+0x20/0x20 [ 2311.251497][ T9798] ? io_worker_handle_work+0x1820/0x1820 [ 2311.257142][ T9798] ? lockdep_init_map_type+0x2c3/0x7b0 [ 2311.262615][ T9798] create_io_worker+0x25a/0x580 [ 2311.267476][ T9798] create_worker_cb+0x202/0x270 [ 2311.272363][ T9798] task_work_run+0xdd/0x1a0 [ 2311.276877][ T9798] exit_to_user_mode_prepare+0x256/0x290 [ 2311.282519][ T9798] syscall_exit_to_user_mode+0x19/0x60 [ 2311.287984][ T9798] do_syscall_64+0x42/0xb0 [ 2311.292410][ T9798] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2311.298310][ T9798] RIP: 0033:0x4665f9 [ 2311.302205][ T9798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2311.321817][ T9798] RSP: 002b:00007f28ff992188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2311.330232][ T9798] RAX: fffffffffffffe00 RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2311.338201][ T9798] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000007 [ 2311.346180][ T9798] RBP: 00007f28ff9921d0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.354148][ T9798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2311.362117][ T9798] R13: 0000000000a9fb1f R14: 00007f28ff992300 R15: 0000000000022000 [ 2311.416129][T18024] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2311.435556][T18024] usb 3-1: selecting invalid altsetting 0 [ 2311.455911][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2311.471407][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2311.515791][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2311.528616][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2311.560322][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2311.577013][ T2087] pvrusb2: Failure uploading firmware1 [ 2311.582536][ T2087] pvrusb2: Device initialization was not successful. [ 2311.602431][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2311.953636][T18024] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2312.353589][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 06:35:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000002440)=[{&(0x7f00000000c0)=""/124, 0x7c}, {&(0x7f0000000140)=""/244, 0xf4}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f00000024c0)=""/219, 0xdb}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/4098, 0x1002}, {&(0x7f0000002400)=""/12, 0xc}], 0x7, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d00010000000009041b2bd022378ca72eda4761a17f98b918898888a8ce07371b9da9846eb2317ea51465c5a1ba2ec4011730e34c9eb629410007dc"], 0x0) [ 2312.583763][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2312.593039][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2312.602530][T18024] usb 6-1: Product: syz [ 2312.623861][T18024] usb 6-1: can't set config #1, error -71 [ 2312.636696][T18024] usb 6-1: USB disconnect, device number 89 06:35:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102039a0e2d537fd1feba0109022d0001000000000904000803996fa9000905"], 0x0) 06:35:19 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x6, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r0 = syz_io_uring_setup(0x50, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000400)={{0xa, 0x0, 0x1, 0x2, 'syz1\x00', 0x1}, 0x6, 0x1, 0x81, r5, 0x4, 0x3, 'syz0\x00', &(0x7f00000003c0)=['\x00', '/dev/ptmx\x00', '[\x00', ']#[^\\*\x00'], 0x14, '\x00', [0x7a, 0x68, 0x0, 0xb16]}) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x414002, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x21) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)=0x0) ptrace$setopts(0x4200, r8, 0x1d, 0x28) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:19 executing program 4 (fault-call:13 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xf, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2312.685481][T17472] usb 3-1: USB disconnect, device number 48 [ 2312.728645][T17472] pvrusb2: Device being rendered inoperable 06:35:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x10, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2312.844236][ T6186] usb 2-1: new high-speed USB device number 26 using dummy_hcd 06:35:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x11, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x60, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2313.120988][ T6186] usb 2-1: Using ep0 maxpacket: 16 06:35:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xf0, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0)={0x0, 0x37a6, 0x0, 0x4}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/4, 0x4}, {&(0x7f0000000340)=""/3, 0x3}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/81, 0x51}], 0x4, &(0x7f00000004c0)=""/175, 0xaf}, 0x5}, {{&(0x7f0000000580)=@nfc, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/161, 0xa1}], 0x1, &(0x7f0000000700)=""/218, 0xda}, 0x9}, {{&(0x7f0000000800)=@nfc_llcp, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000880)=""/214, 0xd6}, {&(0x7f0000000980)=""/42, 0x2a}, {&(0x7f00000009c0)=""/190, 0xbe}], 0x3, &(0x7f0000000ac0)=""/7, 0x7}, 0xfff}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/253, 0xfd}, {&(0x7f0000000c00)=""/174, 0xae}, {&(0x7f0000000cc0)=""/104, 0x68}, {&(0x7f0000000d40)=""/132, 0x84}], 0x4, &(0x7f0000000e40)=""/169, 0xa9}, 0x3065}, {{&(0x7f0000000f00)=@tipc=@name, 0x80, &(0x7f0000001540)=[{&(0x7f0000000f80)=""/140, 0x8c}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000001040)=""/127, 0x7f}, {&(0x7f00000010c0)=""/87, 0x57}, {&(0x7f0000001140)=""/147, 0x93}, {&(0x7f0000001200)=""/112, 0x70}, {&(0x7f0000001280)=""/161, 0xa1}, {&(0x7f0000001340)=""/210, 0xd2}, {&(0x7f0000001440)=""/213, 0xd5}], 0x9, &(0x7f0000001600)=""/97, 0x61}, 0x5}], 0x5, 0x21, &(0x7f00000017c0)={0x77359400}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) [ 2313.198752][T17472] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2313.206546][T18024] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2313.231591][ T9949] FAULT_INJECTION: forcing a failure. [ 2313.231591][ T9949] name failslab, interval 1, probability 0, space 0, times 0 [ 2313.247553][ T9949] CPU: 1 PID: 9949 Comm: syz-executor.4 Not tainted 5.15.0-rc1-syzkaller #0 [ 2313.256269][ T9949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2313.266345][ T9949] Call Trace: [ 2313.269641][ T9949] dump_stack_lvl+0xcd/0x134 [ 2313.274259][ T9949] should_fail.cold+0x5/0xa [ 2313.278799][ T9949] ? security_task_alloc+0x10b/0x250 [ 2313.284114][ T9949] should_failslab+0x5/0x10 [ 2313.288656][ T9949] __kmalloc+0x72/0x320 [ 2313.292843][ T9949] ? audit_filter_inodes+0x40/0x40 [ 2313.297984][ T9949] security_task_alloc+0x10b/0x250 [ 2313.303140][ T9949] copy_process+0x2132/0x7580 [ 2313.307869][ T9949] ? __cleanup_sighand+0xb0/0xb0 [ 2313.312836][ T9949] ? __lockdep_reset_lock+0x1a0/0x1a0 [ 2313.318242][ T9949] ? find_held_lock+0x2d/0x110 [ 2313.323026][ T9949] ? create_io_worker+0x1e2/0x580 [ 2313.328072][ T9949] ? io_worker_handle_work+0x1820/0x1820 [ 2313.333728][ T9949] create_io_thread+0xb6/0xf0 [ 2313.338431][ T9949] ? copy_init_mm+0x20/0x20 [ 2313.342962][ T9949] ? io_worker_handle_work+0x1820/0x1820 [ 2313.348620][ T9949] ? lockdep_init_map_type+0x2c3/0x7b0 [ 2313.354111][ T9949] create_io_worker+0x25a/0x580 [ 2313.358989][ T9949] create_worker_cb+0x202/0x270 [ 2313.363870][ T9949] task_work_run+0xdd/0x1a0 [ 2313.368402][ T9949] exit_to_user_mode_prepare+0x256/0x290 [ 2313.374054][ T9949] syscall_exit_to_user_mode+0x19/0x60 [ 2313.379537][ T9949] do_syscall_64+0x42/0xb0 [ 2313.383976][ T9949] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2313.389890][ T9949] RIP: 0033:0x4665f9 [ 2313.393797][ T9949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2313.413430][ T9949] RSP: 002b:00007f28ff992188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2313.421866][ T9949] RAX: fffffffffffffe00 RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2313.429850][ T9949] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000007 [ 2313.437836][ T9949] RBP: 00007f28ff9921d0 R08: 0000000000000000 R09: 0000000000000000 06:35:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x180, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2313.445817][ T9949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2313.453799][ T9949] R13: 0000000000a9fb1f R14: 00007f28ff992300 R15: 0000000000022000 [ 2313.481008][ T6186] usb 2-1: config 0 has an invalid interface number: 27 but max is 0 [ 2313.492043][ T6186] usb 2-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 2313.511849][ T6186] usb 2-1: config 0 has no interface number 0 [ 2313.521337][ T6186] usb 2-1: too many endpoints for config 0 interface 27 altsetting 43: 208, using maximum allowed: 30 [ 2313.534618][ T6186] usb 2-1: config 0 interface 27 altsetting 43 has 0 endpoint descriptors, different from the interface descriptor's value: 208 [ 2313.549527][ T6186] usb 2-1: config 0 interface 27 has no altsetting 0 [ 2313.713661][T17472] usb 3-1: Using ep0 maxpacket: 16 [ 2313.736120][ T6186] usb 2-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2313.755770][ T6186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2313.767676][T17472] usb 3-1: too many configurations: 154, using maximum allowed: 8 [ 2313.775732][ T6186] usb 2-1: Product: syz [ 2313.780040][ T6186] usb 2-1: Manufacturer: syz [ 2313.788752][ T6186] usb 2-1: SerialNumber: syz [ 2313.801675][ T6186] usb 2-1: config 0 descriptor?? [ 2313.854415][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2313.913652][T17472] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2313.921437][T17472] usb 3-1: can't read configurations, error -61 [ 2314.043968][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2314.053056][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2314.071813][T18024] usb 6-1: Product: syz [ 2314.076977][T17472] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2314.085032][T18024] usb 6-1: Manufacturer: syz [ 2314.089648][T18024] usb 6-1: SerialNumber: syz [ 2314.113627][ T6186] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2314.121392][ T6186] usb 2-1: selecting invalid altsetting 0 [ 2314.139237][ T2087] usb 2-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2314.160561][ T6186] usb 2-1: USB disconnect, device number 26 [ 2314.167280][ T2087] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2314.194462][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2314.238202][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2314.270234][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2314.299024][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2314.310343][ T2087] pvrusb2: Failure uploading firmware1 [ 2314.318196][ T2087] pvrusb2: Device initialization was not successful. [ 2314.329859][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2314.339993][ T6186] pvrusb2: Device being rendered inoperable [ 2314.363541][T17472] usb 3-1: Using ep0 maxpacket: 16 [ 2314.397147][ T9953] udc-core: couldn't find an available UDC or it's busy [ 2314.405700][T17472] usb 3-1: too many configurations: 154, using maximum allowed: 8 [ 2314.414331][ T9953] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2314.430228][T20778] usb 6-1: USB disconnect, device number 90 06:35:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x300, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2314.543721][T17472] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2314.564537][T17472] usb 3-1: can't read configurations, error -61 [ 2314.570926][T17472] usb usb3-port1: attempt power cycle [ 2314.993493][T17472] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2315.083370][T17472] usb 3-1: Using ep0 maxpacket: 16 [ 2315.124412][T17472] usb 3-1: too many configurations: 154, using maximum allowed: 8 [ 2315.193363][T20778] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2315.257101][T17472] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2315.264881][T17472] usb 3-1: can't read configurations, error -61 [ 2315.424531][T17472] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2315.513478][T17472] usb 3-1: Using ep0 maxpacket: 16 [ 2315.554836][T17472] usb 3-1: too many configurations: 154, using maximum allowed: 8 [ 2315.574824][T20778] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2315.674337][T17472] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2315.683459][T17472] usb 3-1: can't read configurations, error -61 [ 2315.689932][T17472] usb usb3-port1: unable to enumerate USB device 06:35:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010010795b65109e30c0a69907af16d5402010752c83010203010902"], 0x0) 06:35:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800ee4d9a47f53e3ebcdb0aacc19909b0121e8be73cf64a5716b221beb9bc44300000", @ANYRES16=r7, @ANYBLOB="210f00000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000261b18ce2bb6b4ac924404bd3a3ff3e8d12f6fbec889913586b9e3473a96373d27cc91797ba0a922bb68ed2d1eccbf42996c14a87653f51e6f9c01ab077767f4de14093634cbe10ddd5d24af8542b8900f9e02b079468226f6b74b7d207168d404b4c475407fdc02785e0cd94482e34e77a131cbbf16d448c81c7b3669e505b68c29a605b441ec098e662a11484c2152d0958c474e7cd62747ae42d7673f2a1671d34e506d8c1c329c40a0d974f569300b0e3fb5715efa9666e9d278c4113d22f9c42ef2a157e7776e00"/227], 0x28}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r6, 0x9e0000000, {0x0, r5}, 0x4, 0x8}, 0x2) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r6, r5) 06:35:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x500, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201b10000006510402010752c830102030109022d0001000000000904000803996fa9000905ebffffffffffff08"], 0x0) syz_usb_connect$uac1(0x3, 0x90, &(0x7f0000000040)={{0x12, 0x1, 0x350, 0x0, 0x0, 0x0, 0x38, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x7f, 0x20, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x3}, [@input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x3, 0x20, 0x8, 0x4, 0x40}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x3, 0x1, [0x9], 0x7}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x5a, "bcf96a2a24"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x0, 0x1, 0x6, {0x7, 0x25, 0x1, 0x81, 0x6, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x0, 0x3, {0x7, 0x25, 0x1, 0x80, 0x80, 0x5}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x8, 0x5, 0xfc, 0x50, 0x7}, 0xb6, &(0x7f0000000140)={0x5, 0xf, 0xb6, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x3, 0xf0f, 0x9, [0x0, 0x3f, 0x3f00]}, @generic={0x1a, 0x10, 0x1, "f1cec09b438d94259086ea511375263109ee8ab3dc6b2c"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "3def4763dcaa6bd3e7246a229e6094b4"}, @generic={0x6b, 0x10, 0x1, "66d82cf4d44b5611a05b75dd04d7be1242e3bf2db8a7a0e5e07cb4edabc8d9c35f83d47fc5dd950985d49e7589194741c4fd981ff79e18ec74c4c3656935aa60609b9db24366dd16548bbc7e5e47116c9979f2074c3ad2f3c139514e06621ed6a5cdfd89ed577d93"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44b}}, {0xda, &(0x7f0000000240)=@string={0xda, 0x3, "c203e09d6b2ae55085940cd84e0f29d81d274fea390cbc1f07c76fa0e01ad3bff6ec0cafaf8a3717912bea6e5bc2b4c68fe016c5c2d4da734624f54d1b5ef406b99c2243bdec9c07492f52f1308b11fecc115b1e6a49222aa2a0c8f6849d1f86fb7bc2eeca0df8fb79fa062d9aba727c92a3b3b22bf6081868ee0077810cb761fa4f889d0e3901cd8f4086a6ae49c763deea1a7c8086a65f0790b9c0fc4062344c7b5f8618b8dd9ef403db168e243924d49f0625516652ed22c63c26b3f4aeee906dbbefd1e9b9c5bdb38b5c6a554b51ab1dee8468dc8828"}}, {0xf6, &(0x7f0000000400)=@string={0xf6, 0x3, "92ecbf29c8a851cf16785dadaf6cf8c13926eacba7bec9b41047ad7a733e2a7eb8f6fafea951e7bd4e8482e874102a6ef870f9063cfe6fb4e5b7fed710da37e34607c402f46c570e459c0181defdc3433674ea4079334b090ea886bb869ded867b080abbe37284c87582d9c1f24f674c46e0627e08f718def0676ae23f730f42e6c5fcb460891379b1305113192a658e9f0550d49246ba2a965cfd782a50241c90f3e9edda5adfe7e06c207b3df4480e61fde86e24a1ae247b7403cc02a013fd64ec7c43f6279151aedcec158c330048881322ad745f4d78e67978e2819701a7140e8a3849c6372e40f006c98df38a86aa92b647"}}]}) 06:35:22 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x7, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) [ 2315.783760][T20778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2315.792967][T20778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.802105][T20778] usb 6-1: Product: syz [ 2315.806880][T20778] usb 6-1: Manufacturer: syz [ 2315.865694][T20778] usb 6-1: can't set config #1, error -71 [ 2315.888723][T20778] usb 6-1: USB disconnect, device number 91 06:35:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x600, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x700, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x900, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2316.189492][T20594] usb 2-1: new high-speed USB device number 27 using dummy_hcd 06:35:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xa00, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2316.303908][T17472] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2316.311678][T20778] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2316.443727][T20594] usb 2-1: Using ep0 maxpacket: 16 06:35:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xb00, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xe00, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2316.563207][T17472] usb 3-1: Using ep0 maxpacket: 16 [ 2316.568901][T20594] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2316.582380][T20594] usb 2-1: too many configurations: 64, using maximum allowed: 8 [ 2316.693557][T20594] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2316.701549][T20594] usb 2-1: can't read configurations, error -71 [ 2316.727099][T17472] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2316.737648][T20778] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2316.751839][T17472] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0xEB, skipping [ 2316.765140][T17472] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2316.782591][T17472] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2316.944335][T20778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2316.953799][T20778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.961811][T20778] usb 6-1: Product: syz [ 2316.970272][T17472] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2316.979467][T17472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.988894][T17472] usb 3-1: Product: syz [ 2316.994125][T20778] usb 6-1: Manufacturer: syz [ 2316.998965][T20778] usb 6-1: SerialNumber: syz [ 2317.011800][T17472] usb 3-1: Manufacturer: syz [ 2317.018131][T17472] usb 3-1: SerialNumber: syz [ 2317.041529][T17472] usb 3-1: config 0 descriptor?? [ 2317.064419][T20778] usb-storage 6-1:1.0: USB Mass Storage device detected 06:35:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x100) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904"], 0x0) 06:35:24 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r7, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x3a, 0x3, 0x80, 0x5, 0x0, 0x1f, 0x10042, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7a2d, 0x1, @perf_bp={&(0x7f00000001c0), 0x8}, 0xc025, 0xffff, 0x8001, 0x7, 0x3c2de4e9, 0x8001, 0xff, 0x0, 0xffffff81, 0x0, 0x200}, 0x0, 0x5, r0, 0x8) dup2(r8, r7) 06:35:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xf00, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:24 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x52, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d7000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000340), 0xea, 0x2) syz_io_uring_submit(0x0, r3, &(0x7f00000003c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r7, 0x8001, 0x0, 0x0, 0x10}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8480, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r6) [ 2317.116784][T10069] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2317.185795][T17472] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2317.228986][T17472] usb 3-1: selecting invalid altsetting 0 [ 2317.263814][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2317.283709][T10060] udc-core: couldn't find an available UDC or it's busy [ 2317.290685][T10060] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2317.312499][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2317.344001][T17472] usb 6-1: USB disconnect, device number 92 [ 2317.367175][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2317.387495][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2317.391643][T10069] udc-core: couldn't find an available UDC or it's busy [ 2317.397679][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2317.423482][ T2087] pvrusb2: Failure uploading firmware1 [ 2317.425829][T10069] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2317.443290][ T2087] pvrusb2: Device initialization was not successful. [ 2317.450979][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2317.466492][T21568] usb 3-1: USB disconnect, device number 53 [ 2317.476320][T21568] pvrusb2: Device being rendered inoperable [ 2317.595556][T20594] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2317.843092][T20594] usb 2-1: Using ep0 maxpacket: 16 [ 2317.964070][T20594] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2318.139895][T21568] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2318.154013][T20594] usb 2-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2318.176349][T20594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.191521][T20594] usb 2-1: Product: syz [ 2318.201697][T20594] usb 2-1: Manufacturer: syz [ 2318.216062][T20594] usb 2-1: SerialNumber: syz [ 2318.250437][T20594] usb 2-1: config 0 descriptor?? [ 2318.293110][T10810] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2318.317200][T20594] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2318.535106][ T2087] usb 2-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2318.545848][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2318.560031][T20594] usb 2-1: USB disconnect, device number 28 [ 2318.566114][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 2318.572337][ T2087] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2318.621010][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2318.642131][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2318.662262][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2318.673302][ T2087] pvrusb2: Failure uploading firmware1 [ 2318.678874][ T2087] pvrusb2: Device initialization was not successful. [ 2318.683689][T10810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2318.686137][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2318.705695][T10810] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0xEB, skipping [ 2318.718999][T10810] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2318.733456][T20594] pvrusb2: Device being rendered inoperable [ 2318.744458][T10810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2318.774688][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2318.788024][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.798853][T21568] usb 6-1: Product: syz [ 2318.804459][T21568] usb 6-1: Manufacturer: syz [ 2318.810423][T21568] usb 6-1: SerialNumber: syz [ 2318.864290][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2318.913944][T10810] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2318.924264][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2318.946843][T21568] usb 6-1: USB disconnect, device number 93 [ 2318.960003][T10810] usb 3-1: Product: syz [ 2318.994389][T10810] usb 3-1: Manufacturer: syz [ 2319.000129][T10810] usb 3-1: SerialNumber: syz [ 2319.026577][T10810] usb 3-1: config 0 descriptor?? 06:35:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) getpid() syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x1100, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x6fca9f45, &(0x7f00000003c0)={0x14, 0xff, 0x912}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:26 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x8, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) [ 2319.042926][ C1] raw-gadget gadget: ignoring, device is not running 06:35:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000040)={0x1f, 0x2, 0x0, [{0x3, 0x51, 0x80000000, 0x6, 0x0, 0x0, 0x80}, {0x6, 0x7, 0x0, 0x88, 0x2, 0x9, 0x1}]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x80000b, 0x4010, r0, 0x3000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x30003, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2319.087721][T10810] usb 3-1: can't set config #0, error -32 [ 2319.121196][T10810] usb 3-1: USB disconnect, device number 54 06:35:26 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000e, 0x30, r0, 0x6b1c000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000795b6510402010752c83010200000000090494ada0ee48e1a7b3912f6c5c8e09d62fb1c2c8ba193095cd62127e3de2e5b394"], 0x0) 06:35:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x3f00, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x3f83, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2319.504604][T21568] usb 6-1: new high-speed USB device number 94 using dummy_hcd 06:35:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x6000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2319.593337][T20778] usb 2-1: new high-speed USB device number 29 using dummy_hcd 06:35:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x833f, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2319.737419][T10810] usb 3-1: new high-speed USB device number 55 using dummy_hcd 06:35:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xf000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2319.863040][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2319.893038][T20778] usb 2-1: Using ep0 maxpacket: 16 [ 2319.963125][T20778] usb 2-1: no configurations [ 2319.968067][T20778] usb 2-1: can't read configurations, error -22 06:35:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x34000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x2004, @fd_index=0xa, 0x40, 0x0, 0x0, 0x1, 0x1, {0x3, r8}}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) [ 2320.014279][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 2320.053792][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2320.067151][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.097751][T21568] usb 6-1: Product: syz [ 2320.108975][T21568] usb 6-1: Manufacturer: syz [ 2320.119161][T21568] usb 6-1: SerialNumber: syz 06:35:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x400300, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2320.153580][T20778] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2320.153736][T10810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2320.186087][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2320.278079][T10810] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2320.335777][T10810] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2320.412403][T10295] udc-core: couldn't find an available UDC or it's busy [ 2320.443802][T20778] usb 2-1: Using ep0 maxpacket: 16 [ 2320.449660][T10295] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2320.476533][T10810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2320.495198][T20778] usb 2-1: no configurations [ 2320.500085][T20778] usb 2-1: can't read configurations, error -22 [ 2320.533277][T13897] usb 6-1: USB disconnect, device number 94 [ 2320.535681][T20778] usb usb2-port1: attempt power cycle [ 2320.668538][T10810] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2320.686457][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2320.710532][T10810] usb 3-1: Product: syz 06:35:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) dup2(r1, r6) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) getpeername(r4, &(0x7f00000003c0)=@nfc, &(0x7f0000000340)=0x80) write(0xffffffffffffffff, 0x0, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) [ 2320.721343][T10810] usb 3-1: Manufacturer: syz [ 2320.735847][T10810] usb 3-1: SerialNumber: syz [ 2320.754123][T10810] usb 3-1: config 0 descriptor?? [ 2320.826306][T10810] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2320.843350][T10810] usb 3-1: selecting invalid altsetting 0 [ 2320.852126][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2320.879003][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2320.949921][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2320.972905][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2321.013187][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2321.022986][T20778] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2321.040748][T13897] usb 3-1: USB disconnect, device number 55 [ 2321.097496][ T2087] pvrusb2: Failure uploading firmware1 [ 2321.143824][T20778] usb 2-1: Using ep0 maxpacket: 16 [ 2321.144570][ T2087] pvrusb2: Device initialization was not successful. [ 2321.177610][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2321.194924][T20778] usb 2-1: no configurations [ 2321.199842][T20778] usb 2-1: can't read configurations, error -22 [ 2321.210247][T13897] pvrusb2: Device being rendered inoperable [ 2321.333929][T10810] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2321.352857][T20778] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2321.453038][T20778] usb 2-1: Using ep0 maxpacket: 16 [ 2321.503107][T20778] usb 2-1: no configurations [ 2321.507935][T20778] usb 2-1: can't read configurations, error -22 [ 2321.515123][T20778] usb usb2-port1: unable to enumerate USB device [ 2321.693777][T10810] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2321.862978][T10810] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2321.872124][T10810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2321.882071][T10810] usb 6-1: Product: syz [ 2321.886803][T10810] usb 6-1: Manufacturer: syz [ 2321.891480][T10810] usb 6-1: SerialNumber: syz [ 2321.944025][T10810] usb-storage 6-1:1.0: USB Mass Storage device detected 06:35:29 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x10, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00003af000/0xf000)=nil, &(0x7f00005a6000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r9, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x8000, 0x3, 0x1, {0x0, 0x0, r1}}, 0x7) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1) dup2(r7, r6) [ 2322.110657][T10810] usb 6-1: USB disconnect, device number 95 06:35:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xb4) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904"], 0x0) 06:35:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xf0ffff, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:29 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(r1, &(0x7f0000000000)='/proc/self/exe\x00', 0x1, 0xbc) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) 06:35:29 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f0000000440)={0x0, 0xe9b, 0x1, 0x3, 0x2d}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x3080, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) ppoll(&(0x7f00000006c0)=[{r8}], 0x1, 0x0, 0x0, 0x0) connect$unix(r8, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x1000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x2000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2322.592874][T10810] usb 6-1: new high-speed USB device number 96 using dummy_hcd 06:35:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x3000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2322.672875][T13897] usb 3-1: new high-speed USB device number 56 using dummy_hcd 06:35:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x4000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x5000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2322.843707][T20778] usb 2-1: new high-speed USB device number 33 using dummy_hcd 06:35:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x6000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2322.932868][T13897] usb 3-1: Using ep0 maxpacket: 16 [ 2322.993965][T10810] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2323.053696][T13897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2323.064185][T13897] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2323.076375][T13897] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2323.090189][T13897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2323.103011][T20778] usb 2-1: Using ep0 maxpacket: 16 [ 2323.183661][T10810] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2323.193402][T10810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.201390][T10810] usb 6-1: Product: syz [ 2323.208257][T10810] usb 6-1: Manufacturer: syz [ 2323.214925][T10810] usb 6-1: SerialNumber: syz [ 2323.254158][T13897] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2323.263283][T20778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2323.275560][T10810] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2323.314606][T13897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.323497][T13897] usb 3-1: Product: syz [ 2323.327688][T13897] usb 3-1: Manufacturer: syz [ 2323.332300][T13897] usb 3-1: SerialNumber: syz [ 2323.349721][T13897] usb 3-1: config 0 descriptor?? [ 2323.414806][T13897] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2323.422389][T13897] usb 3-1: selecting invalid altsetting 0 [ 2323.435251][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2323.443526][T20778] usb 2-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2323.460744][T20778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.462665][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2323.487981][T10483] udc-core: couldn't find an available UDC or it's busy [ 2323.496264][T20778] usb 2-1: Product: syz [ 2323.505365][T10483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2323.507654][T20778] usb 2-1: Manufacturer: syz [ 2323.534485][T20778] usb 2-1: SerialNumber: syz [ 2323.538955][T13897] usb 6-1: USB disconnect, device number 96 [ 2323.556577][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2323.557161][T20778] usb 2-1: config 0 descriptor?? [ 2323.593721][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2323.618584][T10810] usb 3-1: USB disconnect, device number 56 [ 2323.637068][T20778] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2323.638725][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2323.670778][ T2087] pvrusb2: Failure uploading firmware1 [ 2323.677132][ T2087] pvrusb2: Device initialization was not successful. [ 2323.684970][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2323.695157][T10810] pvrusb2: Device being rendered inoperable [ 2323.844719][ T2087] usb 2-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2323.862856][T20778] usb 2-1: USB disconnect, device number 33 [ 2323.869419][ T2087] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2323.898389][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2323.908271][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2323.918368][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2323.929806][ T2087] pvrusb2: Failure uploading firmware1 [ 2323.936924][ T2087] pvrusb2: Device initialization was not successful. [ 2323.946855][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2323.959261][T20778] pvrusb2: Device being rendered inoperable [ 2324.302888][T21565] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2324.622682][T20778] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2324.722951][T21565] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2324.892688][T20778] usb 2-1: Using ep0 maxpacket: 16 [ 2324.901992][T21565] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2324.914800][T21565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2324.927473][T21565] usb 6-1: Product: syz [ 2324.931645][T21565] usb 6-1: Manufacturer: syz [ 2324.937885][T21565] usb 6-1: SerialNumber: syz [ 2325.004119][T21565] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2325.023988][T20778] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 06:35:32 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x17, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) [ 2325.196396][T17472] usb 6-1: USB disconnect, device number 97 [ 2325.223530][T20778] usb 2-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2325.237704][T20778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2325.260973][T20778] usb 2-1: Product: syz [ 2325.273908][T20778] usb 2-1: Manufacturer: syz [ 2325.328731][T20778] usb 2-1: SerialNumber: syz [ 2325.342064][T20778] usb 2-1: config 0 descriptor?? 06:35:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x7000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x113080) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2007, @fd, 0x3, 0x0, 0x0, 0x13, 0x1, {0x3}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000006c0)='/proc/self/exe\x00', 0x8000, 0x0) readv(r2, &(0x7f0000001740)=[{&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000480)=""/182, 0xb6}, {&(0x7f0000000180)=""/24, 0x18}, {&(0x7f0000000540)=""/224, 0xe0}, {&(0x7f00000003c0)=""/34, 0x22}, {&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f0000000400)=""/52, 0x34}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/18, 0x12}], 0xa) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r4, r3) 06:35:32 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x10, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000317000/0x2000)=nil, 0x2000, 0x0, 0xbcc1c33dd93feb9a, r0, 0xef38a000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x268c0, 0x118) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) [ 2325.462712][T20778] usb 2-1: can't set config #0, error -71 [ 2325.489303][T20778] usb 2-1: USB disconnect, device number 34 06:35:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x8000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x9000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2325.743485][T17472] usb 6-1: new high-speed USB device number 98 using dummy_hcd 06:35:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xa000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xb000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xe000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2325.902514][T10810] usb 3-1: new high-speed USB device number 57 using dummy_hcd 06:35:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xf000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2326.053440][T20778] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2326.152436][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2326.162433][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 2326.202616][T10810] usb 3-1: too many configurations: 131, using maximum allowed: 8 [ 2326.283341][T10810] usb 3-1: config index 0 descriptor too short (expected 259, got 45) [ 2326.291541][T10810] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 2326.301390][T10810] usb 3-1: can't read configurations, error -22 [ 2326.332721][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2326.342037][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2326.351337][T17472] usb 6-1: Product: syz [ 2326.356950][T17472] usb 6-1: Manufacturer: syz [ 2326.361559][T17472] usb 6-1: SerialNumber: syz [ 2326.423874][T17472] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2326.452564][T10810] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2326.453374][T20778] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2326.629109][T10648] udc-core: couldn't find an available UDC or it's busy [ 2326.638342][T10648] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2326.658966][T18024] usb 6-1: USB disconnect, device number 98 [ 2326.692524][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 2326.693333][T20778] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2326.717225][T20778] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2326.726050][T20778] usb 2-1: Product: syz [ 2326.730470][T20778] usb 2-1: Manufacturer: syz [ 2326.733316][T10810] usb 3-1: too many configurations: 131, using maximum allowed: 8 [ 2326.735486][T20778] usb 2-1: SerialNumber: syz [ 2326.783568][T20778] usb-storage 2-1:1.0: USB Mass Storage device detected [ 2326.833410][T10810] usb 3-1: config index 0 descriptor too short (expected 259, got 45) [ 2326.843507][T10810] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 2326.851963][T10810] usb 3-1: can't read configurations, error -22 [ 2326.870600][T10810] usb usb3-port1: attempt power cycle [ 2327.013107][T10668] udc-core: couldn't find an available UDC or it's busy [ 2327.020180][T10668] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2327.047121][T21568] usb 2-1: USB disconnect, device number 35 [ 2327.292340][T10810] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2327.382612][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 2327.423285][T10810] usb 3-1: too many configurations: 131, using maximum allowed: 8 [ 2327.431211][T13897] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2327.503138][T10810] usb 3-1: config index 0 descriptor too short (expected 259, got 45) [ 2327.511312][T10810] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 2327.520096][T10810] usb 3-1: can't read configurations, error -22 [ 2327.672402][T10810] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2327.767858][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 2327.793233][T13897] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2327.812698][T10810] usb 3-1: too many configurations: 131, using maximum allowed: 8 [ 2327.892901][T10810] usb 3-1: config index 0 descriptor too short (expected 259, got 45) [ 2327.901096][T10810] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 2327.910653][T10810] usb 3-1: can't read configurations, error -22 [ 2327.918134][T10810] usb usb3-port1: unable to enumerate USB device [ 2327.962889][T13897] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2327.972918][T13897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.980931][T13897] usb 6-1: Product: syz [ 2327.986926][T13897] usb 6-1: Manufacturer: syz [ 2327.991559][T13897] usb 6-1: SerialNumber: syz [ 2328.043694][T13897] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2328.245268][T10730] udc-core: couldn't find an available UDC or it's busy [ 2328.255822][T10730] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2328.266402][T17472] usb 6-1: USB disconnect, device number 99 06:35:35 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x7, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x10000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000880)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x14000)=nil, 0x14000, 0x4, 0x50, r1, 0x10000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="210004748098c6c8982c3b6a55373bcb15212603b69472ad4456d3981d541b779686ab445a40886cffc7717b72e6e00aa78c609b782fa697377d6f2ffda36df96a2442044de8984a0b5a589a96999cd9ad69bfba60720f75fb1b8ee7719420848594c92c710700000000000000c1ede9856654702408fa9eb53767463b90dc07cdc912b74c8730e96916e8705278eaa7d91e89c1179e70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c0099000000ff0000001300"], 0x28}}, 0x0) syz_io_uring_submit(r2, r6, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2000, @fd=r7, 0x4, 0x7, 0x4, 0x0, 0x1, {0x2}}, 0x9) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r5, 0x0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f00000005c0)=""/96, 0x60}, {&(0x7f0000000640)=""/157, 0x9d}, {&(0x7f0000000280)=""/27, 0x1b}, {&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000700)=""/112, 0x70}], 0x6, &(0x7f0000000800)=""/64, 0x40}, 0x0, 0x1, 0x1, {0x2}}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r9, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r10, r9) 06:35:35 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000001c0)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:35:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00003af000/0xf000)=nil, &(0x7f00005a6000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r9, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x8000, 0x3, 0x1, {0x0, 0x0, r1}}, 0x7) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1) dup2(r7, r6) [ 2328.444298][T10754] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 06:35:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000440)={0x0, 0xffffffffffffff61, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r2, 0xf21, 0x0, 0x8000000, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x101}}}}}, 0x28}}, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r1}, {@val, @actul_num={@val=0x2d, 0x7fff, 0x47}}}) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x20, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x8814) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) 06:35:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x11000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x3f000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x60000000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x80010000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2328.892281][T17472] usb 6-1: new high-speed USB device number 100 using dummy_hcd 06:35:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x833f0000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2328.982280][T10810] usb 3-1: new high-speed USB device number 61 using dummy_hcd 06:35:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0x9effffff, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2329.242282][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 2329.282785][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2329.319842][T10754] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2329.369024][T10810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2329.394195][T10810] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2329.421835][T10810] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2329.465362][T10810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2329.526243][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2329.545559][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.555857][T17472] usb 6-1: Product: syz [ 2329.560145][T17472] usb 6-1: Manufacturer: syz [ 2329.566730][T17472] usb 6-1: SerialNumber: syz [ 2329.623452][T17472] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2329.629795][T10810] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2329.646586][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.662304][T10810] usb 3-1: Product: syz [ 2329.662332][T10810] usb 3-1: Manufacturer: syz [ 2329.662353][T10810] usb 3-1: SerialNumber: syz [ 2329.670876][T10810] usb 3-1: config 0 descriptor?? [ 2329.724990][T10810] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2329.734516][T10810] usb 3-1: selecting invalid altsetting 0 [ 2329.740926][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2329.762511][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2329.783669][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2329.804672][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2329.818685][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2329.851489][ T2087] pvrusb2: Failure uploading firmware1 [ 2329.854325][T10758] udc-core: couldn't find an available UDC or it's busy [ 2329.858373][ T2087] pvrusb2: Device initialization was not successful. [ 2329.872465][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2329.872960][T10758] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2329.898703][T18024] usb 6-1: USB disconnect, device number 100 [ 2329.932427][T21568] usb 3-1: USB disconnect, device number 61 [ 2329.951426][T21568] pvrusb2: Device being rendered inoperable [ 2330.672184][T21568] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2331.042212][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2331.217619][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2331.226706][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.240617][T21568] usb 6-1: Product: syz [ 2331.245948][T21568] usb 6-1: Manufacturer: syz [ 2331.250561][T21568] usb 6-1: SerialNumber: syz [ 2331.303183][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected 06:35:38 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x10, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:38 executing program 1 (fault-call:13 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xf0ffffff, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000001c0)=0x19) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x5d) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x9, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) dup2(r7, r6) 06:35:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x220000, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2331.408969][T10810] usb 6-1: USB disconnect, device number 101 06:35:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xfffff000, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xffffff7f, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xffffff9e, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xfffffff0, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2331.804149][T18024] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2331.905988][T10981] FAULT_INJECTION: forcing a failure. [ 2331.905988][T10981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2331.919490][T10810] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2331.930264][T10981] CPU: 0 PID: 10981 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 2331.939057][T10981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2331.949124][T10981] Call Trace: 06:35:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private=0xffffffff, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2331.952413][T10981] dump_stack_lvl+0xcd/0x134 [ 2331.957030][T10981] should_fail.cold+0x5/0xa [ 2331.961568][T10981] _copy_from_user+0x2c/0x180 [ 2331.966271][T10981] iovec_from_user+0x242/0x3c0 [ 2331.971056][T10981] __import_iovec+0x65/0x590 [ 2331.975663][T10981] import_iovec+0x10c/0x150 [ 2331.980175][T10981] vfs_readv+0xb4/0x150 [ 2331.984335][T10981] ? vfs_iter_read+0xa0/0xa0 [ 2331.988929][T10981] ? lock_downgrade+0x6e0/0x6e0 [ 2331.993799][T10981] ? __fget_files+0x23d/0x3e0 [ 2331.998487][T10981] ? __fget_light+0xea/0x280 [ 2332.003104][T10981] do_readv+0x139/0x300 [ 2332.007266][T10981] ? vfs_readv+0x150/0x150 [ 2332.011686][T10981] ? syscall_enter_from_user_mode+0x21/0x70 [ 2332.017592][T10981] do_syscall_64+0x35/0xb0 [ 2332.022011][T10981] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2332.027911][T10981] RIP: 0033:0x4665f9 [ 2332.031807][T10981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2332.051421][T10981] RSP: 002b:00007f47f469f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2332.059838][T10981] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2332.067809][T10981] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000007 [ 2332.075785][T10981] RBP: 00007f47f469f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2332.083759][T10981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2332.091728][T10981] R13: 0000000000a9fb1f R14: 00007f47f469f300 R15: 0000000000022000 06:35:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x2}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2332.242558][T18024] usb 3-1: Using ep0 maxpacket: 16 [ 2332.352885][T10810] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2332.395925][T18024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2332.419055][T18024] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2332.430577][T18024] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2332.444160][T18024] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2332.582741][T10810] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2332.591808][T10810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2332.602041][T10810] usb 6-1: Product: syz [ 2332.606212][T10810] usb 6-1: Manufacturer: syz [ 2332.610794][T10810] usb 6-1: SerialNumber: syz [ 2332.650806][T18024] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2332.663062][T18024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2332.663166][T10810] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2332.671421][T18024] usb 3-1: Product: syz [ 2332.695171][T18024] usb 3-1: Manufacturer: syz [ 2332.700055][T18024] usb 3-1: SerialNumber: syz [ 2332.720430][T18024] usb 3-1: config 0 descriptor?? [ 2332.794516][T18024] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2332.808724][T18024] usb 3-1: selecting invalid altsetting 0 [ 2332.823920][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2332.850855][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2332.874763][T10983] udc-core: couldn't find an available UDC or it's busy [ 2332.897807][T10983] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2332.908571][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2332.931062][T10810] usb 6-1: USB disconnect, device number 102 [ 2332.943467][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2332.972550][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2332.985086][ T2087] pvrusb2: Failure uploading firmware1 [ 2333.007506][T18024] usb 3-1: USB disconnect, device number 62 [ 2333.020483][ T2087] pvrusb2: Device initialization was not successful. [ 2333.035894][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2333.047205][T18024] pvrusb2: Device being rendered inoperable [ 2333.701947][T21568] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2333.781816][T10810] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2334.022483][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 2334.061991][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2334.151966][T10810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2334.162423][T10810] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2334.174328][T10810] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2334.188338][T10810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2334.242043][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2334.251115][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.260755][T21568] usb 6-1: Product: syz [ 2334.265207][T21568] usb 6-1: Manufacturer: syz [ 2334.269829][T21568] usb 6-1: SerialNumber: syz [ 2334.323026][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2334.352781][T10810] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2334.362253][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.370263][T10810] usb 3-1: Product: syz [ 2334.376478][T10810] usb 3-1: Manufacturer: syz [ 2334.381091][T10810] usb 3-1: SerialNumber: syz [ 2334.417912][T10810] usb 3-1: config 0 descriptor?? [ 2334.492117][T10810] usb 3-1: can't set config #0, error -71 [ 2334.503232][T10810] usb 3-1: USB disconnect, device number 63 06:35:41 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x17, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x3}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x0, 0x7fff, 0x4) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12de1003000000ff6a05b3004000010203010902240001017f304909040000020301035b0921220c400122fd0d09058103ff030108ff"], &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x4, 0x3, 0x3f, 0xaf, 0x1}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xfcff}}, {0x56, &(0x7f0000000140)=ANY=[@ANYRES64]}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6d, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x2f, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x20, 0x1f, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xff, 0x4, 0x9}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x110, 0xc, 0x1f, 0x0, 0x40, 0x6}, 0x4a, &(0x7f0000000340)={0x5, 0xf, 0x4a, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x2, 0x0, 0x2ee, [0xc00f, 0x18000, 0x7e00, 0x3f]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7, 0x3, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "c8e2467c1cecc1a14490b449d918033c"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x3f, 0x0, 0x8, 0x5}]}, 0x8, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x457}}, {0xa0, &(0x7f0000000440)=@string={0xa0, 0x3, "da6508f51347134c0ed561ae78d80f89fc624ac7e1c7e8c307ce5ac1db5378c2ce4e887acfc72344fcfc1a397ce5625714d74b27142c1051503a3ed01d69960e409bb0cf625a2d95331c7940715b8991318ace46d836ab72515c42dcf8427736fddc3e46a17f55c1b35b270a61f343fba04886d8647e274614422b9f977a1f6046ebda238b4bae2837ebb41dbbebdd6299d79e3befc7807f62c8ff946cb1"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2410}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x405}}, {0x42, &(0x7f00000005c0)=@string={0x42, 0x3, "dc9703a303cc3ee96e5c9a8806ee48bc9dbb335df5587dd4cd9e110290cf0cb41b8c820618bc12643868dfcb1db0ce83b9dcbcab439ba548bd764bc76c338c39"}}, {0x77, &(0x7f0000000640)=@string={0x77, 0x3, "440a734383208465c92f395f3a7b83bfeb8dc0520ff868dd045c607e53e67526e267d2f9d6dbbbe6dd13e5b302771fad4722160e73c319ac604db7ab58d78b348643fadb5f2b244a0a5241f414eb545e5ca3dac73330b548fd82f8829950fd7030d89383f9829d02107d5abf8bb315a5a3e4edc3f8"}}, {0x70, &(0x7f00000006c0)=@string={0x70, 0x3, "6da60f47e7a85bd1f0892e0740adbc9b5ec67c0772c75d0af409438596700aa48b83ac92767f2d0053c6e759ce9271f2586bc4b5b23aa16d2097827a983574c1fd7a108e74f37e513ba3500a5cfa07caf6e897781a655ccc57b6d027a715859529fc4cf73f6fe07cde5afcf29451"}}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r3, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000007c0)=""/224, 0xe0}], 0x1, 0x5, 0xdf2) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) 06:35:41 executing program 1 (fault-call:13 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x104, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0xe, &(0x7f0000000440)={0x1a, 0x9, 0x3ff}) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:41 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x2, &(0x7f00000003c0)=""/4096, 0x1000, 0x2, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) r9 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r9) ptrace$setopts(0x4206, r9, 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x1, 0x80, 0x7f, 0x2, 0x7, 0x80, 0x0, 0xce, 0xc0261, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8, 0xfffffffffffffffa, 0x8, 0x2, 0xfffffffeffffffff, 0x80000001, 0x1f, 0x0, 0xfffffffc, 0x0, 0x80000000}, r9, 0x6, r0, 0x3) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) [ 2334.548431][T21568] usb 6-1: USB disconnect, device number 103 06:35:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x4}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2334.834234][T11261] FAULT_INJECTION: forcing a failure. [ 2334.834234][T11261] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.847808][T11261] CPU: 1 PID: 11261 Comm: syz-executor.1 Not tainted 5.15.0-rc1-syzkaller #0 [ 2334.856604][T11261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2334.866679][T11261] Call Trace: [ 2334.869968][T11261] dump_stack_lvl+0xcd/0x134 [ 2334.874584][T11261] should_fail.cold+0x5/0xa [ 2334.879203][T11261] ? create_io_worker+0x108/0x580 [ 2334.884250][T11261] should_failslab+0x5/0x10 [ 2334.888782][T11261] kmem_cache_alloc_node_trace+0x59/0x2f0 [ 2334.894539][T11261] create_io_worker+0x108/0x580 [ 2334.899422][T11261] create_worker_cb+0x202/0x270 [ 2334.904302][T11261] task_work_run+0xdd/0x1a0 [ 2334.908836][T11261] exit_to_user_mode_prepare+0x256/0x290 [ 2334.914489][T11261] syscall_exit_to_user_mode+0x19/0x60 [ 2334.919974][T11261] do_syscall_64+0x42/0xb0 [ 2334.924413][T11261] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2334.930325][T11261] RIP: 0033:0x4665f9 [ 2334.934235][T11261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.953862][T11261] RSP: 002b:00007f47f469f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 2334.962297][T11261] RAX: fffffffffffffe00 RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2334.970296][T11261] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000007 06:35:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x5}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2334.978284][T11261] RBP: 00007f47f469f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2334.986267][T11261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2334.994268][T11261] R13: 0000000000a9fb1f R14: 00007f47f469f300 R15: 0000000000022000 06:35:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x6}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) syz_io_uring_setup(0x3c38, &(0x7f00000003c0)={0x0, 0x86cd, 0x2, 0x3, 0xb1}, &(0x7f00006d7000/0x3000)=nil, &(0x7f00006d5000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000440)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f00006d7000/0x2000)=nil, 0x2000, 0x0, 0x1}, 0x8) dup2(r7, r6) 06:35:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x7}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x8}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2335.231912][T10810] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2335.240304][T21568] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2335.491897][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 2335.631874][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2335.644985][T10810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2335.656888][T10810] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2335.656924][T10810] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2335.656962][T10810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2335.812677][T10810] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2335.822295][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2335.831711][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.839831][T21568] usb 6-1: Product: syz [ 2335.844518][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.854163][T10810] usb 3-1: Product: syz [ 2335.858341][T10810] usb 3-1: Manufacturer: syz [ 2335.864741][T21568] usb 6-1: Manufacturer: syz [ 2335.869365][T21568] usb 6-1: SerialNumber: syz [ 2335.874459][T10810] usb 3-1: SerialNumber: syz [ 2335.892432][T10810] usb 3-1: config 0 descriptor?? [ 2335.923007][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2335.951858][T10810] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2335.960712][T10810] usb 3-1: selecting invalid altsetting 0 [ 2336.011019][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2336.041530][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2336.090945][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2336.101525][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2336.140002][T11263] udc-core: couldn't find an available UDC or it's busy [ 2336.155257][T11259] udc-core: couldn't find an available UDC or it's busy [ 2336.155661][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2336.177919][T11263] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2336.192893][T11259] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2336.212134][T20778] usb 6-1: USB disconnect, device number 104 [ 2336.223193][ T2087] pvrusb2: Failure uploading firmware1 [ 2336.228843][ T2087] pvrusb2: Device initialization was not successful. [ 2336.245944][T18024] usb 3-1: USB disconnect, device number 64 [ 2336.254886][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2336.287176][T18024] pvrusb2: Device being rendered inoperable [ 2336.991700][T21568] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2337.012549][T18024] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2337.261554][T18024] usb 3-1: Using ep0 maxpacket: 16 [ 2337.351648][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2337.401730][T18024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2337.413059][T18024] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2337.423890][T18024] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2337.438055][T18024] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2337.522335][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2337.531660][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2337.539662][T21568] usb 6-1: Product: syz [ 2337.545390][T21568] usb 6-1: Manufacturer: syz [ 2337.549986][T21568] usb 6-1: SerialNumber: syz [ 2337.592979][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2337.691630][T18024] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2337.727817][T18024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 06:35:44 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x0, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x9}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x4000}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x2, 0x0, 0x8, 0x15, 0x3a, &(0x7f00000003c0)="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"}) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000007c0)=""/237, 0xed}, {&(0x7f00000008c0)=""/94, 0x5e}, {&(0x7f0000000940)=""/137, 0x89}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/55, 0x37}, {&(0x7f0000001a40)=""/126, 0x7e}, {&(0x7f0000001ac0)=""/48, 0x30}], 0x7, 0xfffffffb, 0x9) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r6, r5) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) sendfile(r4, r7, &(0x7f00000001c0)=0x47, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r8) sendmsg$nl_netfilter(r8, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x348, 0x14, 0x4, 0x401, 0x70bd29, 0x25dfdbfe, {0x2, 0x0, 0xa}, [@typed={0x8, 0x1b, 0x0, 0x0, @uid=0xee01}, @nested={0x268, 0x2b, 0x0, 0x1, [@typed={0xd5, 0x21, 0x0, 0x0, @binary="61f344017aa0d8ab4d96fc296cd1b92a306042b9d5ca746bfd3d4c9fba217b84f4c3fa6586ba047053533e31abcbaddefbe87ded21550bef25b41c2bac3c061912777c4db21eb64632042c48694d47aac701c42184316c5bfe2d92c390872573f0a6671e447accc7ab9c9d031cc780ad0d4f1f253142d68e19d0a186b86284d8230bb37be934e18e69f89de5b28d1ed8142bc392975b2e321f4e64861de023db51c38a6bc8b5dda1396c742e6c7646fb5e0e1cfd97255da01d0e74253d49b6bac07c4390c090bc80daea8e0687a4765063"}, @generic="3aafca749d98a4c0adc7fb60baebc19dc28d0f353fc4691803bff26939580bcd8b5560c15e012ac84bd4dec70d69fca721b4630b3d25f059a46a68203e796969d9741df0214fc43e9ce5ff615340f8935c06775437121923eb724fb8a4cbf9bff09e009ae7e806e3f18734f21ebcbcf834f6434da6", @generic="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", @typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="bca8bcbcab3f3c272d4f480d332e7803dfd4ffaf94"]}, @generic="3735afeb7ccb42763ab356d95b84be99026ab67e9655d9af1bee503fe6a84c40f280911dc6767cb89e44ee24b9becfd9c8b3a12ba84f472705ad9db20b47d80f114166b0f1e5772ad80e6df295589945616a6a2f461949f768459134689c2f080bb35f4c2dcda83f14cef80bfc23b1e4dcd78ccca75a25f99b91a22470539bb276cadbabcbb05d9889be73024ff7e9ca44411954950733c3f38c6b7880c6f6148ad78b6b7296b5b23080407ff4733152285e60d393dff224102267accd6962bc9d6e"]}, 0x348}, 0x1, 0x0, 0x0, 0x1}, 0x40) 06:35:44 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r5, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r7, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "aae42a5102b0a502e829e78d1968ee65ff5e0f3a411d9169"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "cb49a1fa4531259e01524834307da52daf7c1b41293e5c3c"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0xc000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r3, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r9, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x44, r9, 0x13a, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x20}, 0x40480c0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000001300)={0x1280, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xddfc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x65}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0x114, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x223}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6b5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x19}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2ef2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x1028, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}]}, 0x1280}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000005) syz_usb_connect(0x1, 0x3f, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2], 0x0) [ 2337.743096][T18024] usb 3-1: Product: syz [ 2337.747287][T13897] usb 6-1: USB disconnect, device number 105 [ 2337.818442][T18024] usb 3-1: Manufacturer: syz [ 2337.854944][T18024] usb 3-1: config 0 descriptor?? [ 2337.902196][T18024] usb 3-1: can't set config #0, error -71 06:35:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xa}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2337.953803][T18024] usb 3-1: USB disconnect, device number 65 06:35:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xb}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xe}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xf}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x10}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2338.261661][T13897] usb 6-1: new high-speed USB device number 106 using dummy_hcd 06:35:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x11}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2338.401825][T18024] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 2338.611513][T18024] usb 3-1: device descriptor read/64, error 18 [ 2338.641693][T13897] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2338.811605][T13897] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2338.822940][T13897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.831091][T13897] usb 6-1: Product: syz [ 2338.836775][T13897] usb 6-1: Manufacturer: syz [ 2338.842128][T13897] usb 6-1: SerialNumber: syz [ 2338.891671][T18024] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 2338.892648][T13897] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2339.097920][T11411] udc-core: couldn't find an available UDC or it's busy [ 2339.105493][T18024] usb 3-1: device descriptor read/64, error 18 [ 2339.111547][T11411] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2339.131729][T21568] usb 6-1: USB disconnect, device number 106 [ 2339.231785][T18024] usb usb3-port1: attempt power cycle [ 2339.671898][T18024] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 2339.881440][T18024] usb 3-1: device descriptor read/8, error -61 [ 2339.891494][T21568] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 2340.161570][T18024] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 2340.251418][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2340.371555][T18024] usb 3-1: device descriptor read/8, error -61 [ 2340.421467][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2340.430603][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.440032][T21568] usb 6-1: Product: syz [ 2340.445313][T21568] usb 6-1: Manufacturer: syz [ 2340.449926][T21568] usb 6-1: SerialNumber: syz [ 2340.491570][T18024] usb usb3-port1: unable to enumerate USB device [ 2340.502746][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2340.705203][T11602] udc-core: couldn't find an available UDC or it's busy [ 2340.712285][T11602] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2340.725170][T20778] usb 6-1: USB disconnect, device number 107 06:35:47 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x2, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x60}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfdef}], 0x1) dup2(r7, r6) 06:35:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r8 = creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r11, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="030000000000ff0000000000004000000900000000000000", @ANYRES32=r8, @ANYBLOB="000000000200"/28, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r6, @ANYBLOB="00000000f7ffffffffffffff00"/28, @ANYRES32, @ANYBLOB="000000000600"/28, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32=r1, @ANYBLOB="000000000100000000000008000000000009000000000000000000006289061287ad7536704183e206179661cd6788bd1ea3d06e367d1de76bd24b11d8091af0b1f85a0975f918e7317137a21c787caac93127c1824ef8c35a9aacf250176f61699d435116c0537376cd4636e8edbe06b2fbf29569269d00fa7ab991ebb98cac63bff24e541750edb04f5de0fce67b58f84bf02b69753ef544756fc8934af476c10392cadd8a3e908c0c306658d7747ffa3230d0a7a3329a0c0e60c969fef12fcaf7d89b"]) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r2, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x5, 0x0, 0x8, 0xfffffffa, 0x2}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x10, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xc4) r5 = signalfd(r4, &(0x7f0000000240)={[0x1000]}, 0x8) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) mknodat(r4, &(0x7f0000000080)='./file0\x00', 0x1000, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x920f, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) 06:35:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xf0}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x180}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x300}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2341.232019][T18024] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2341.361823][T20778] usb 6-1: new high-speed USB device number 108 using dummy_hcd 06:35:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x500}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2341.532190][T18024] usb 3-1: Using ep0 maxpacket: 16 06:35:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x600}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2341.691486][T18024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2341.701867][T18024] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2341.712413][T18024] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2341.730388][T18024] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2341.741543][T20778] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 06:35:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x700}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2341.912762][T18024] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2341.923227][T18024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2341.941419][T18024] usb 3-1: Product: syz [ 2341.946741][T18024] usb 3-1: Manufacturer: syz [ 2341.951550][T18024] usb 3-1: SerialNumber: syz [ 2341.961374][T20778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2341.970439][T20778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2341.997622][T18024] usb 3-1: config 0 descriptor?? [ 2342.011334][T20778] usb 6-1: Product: syz [ 2342.015537][T20778] usb 6-1: Manufacturer: syz [ 2342.020148][T20778] usb 6-1: SerialNumber: syz [ 2342.065108][T18024] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2342.081568][T18024] usb 3-1: selecting invalid altsetting 0 [ 2342.087882][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2342.102327][T20778] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2342.128513][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2342.158636][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2342.221372][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2342.230426][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2342.260112][ T2087] pvrusb2: Failure uploading firmware1 [ 2342.281527][T18024] usb 3-1: USB disconnect, device number 70 [ 2342.288203][ T2087] pvrusb2: Device initialization was not successful. [ 2342.324125][T11635] udc-core: couldn't find an available UDC or it's busy [ 2342.331337][T11635] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2342.338909][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2342.344710][T10810] usb 6-1: USB disconnect, device number 108 [ 2342.379873][T18024] pvrusb2: Device being rendered inoperable [ 2343.151166][T18024] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 2343.561230][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2343.745224][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2343.754642][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.764149][T18024] usb 6-1: Product: syz [ 2343.768332][T18024] usb 6-1: Manufacturer: syz [ 2343.774050][T18024] usb 6-1: SerialNumber: syz [ 2343.832237][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected 06:35:51 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x3, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0xc) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x6000, @fd_index=0x6, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x200) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x24004040}, 0xffff) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x900}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getpgid(0xffffffffffffffff) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x20000144}], 0x1) dup2(r7, r6) 06:35:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/173, 0xad}, {&(0x7f0000000280)=""/96, 0x60}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000003640)=""/78, 0x4e}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/201, 0xc9}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/219, 0xdb}], 0x9, 0x101, 0x2) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = creat(&(0x7f0000003600)='./file0\x00', 0xb9) mmap(&(0x7f00003b1000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r2, 0x59306000) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2343.947428][T21568] usb 6-1: USB disconnect, device number 109 06:35:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xa00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xb00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2344.261284][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.267622][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 06:35:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xe00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2344.441203][T21568] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2344.443920][T20778] usb 3-1: new high-speed USB device number 71 using dummy_hcd 06:35:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xf00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) r8 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00003af000/0xf000)=nil, &(0x7f00005a6000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r8, 0x2a6e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7996, &(0x7f00000003c0)={0x0, 0x1a46, 0x10, 0x0, 0x360, 0x0, r8}, &(0x7f00006d8000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000340)) 06:35:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x1100}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2344.701094][T20778] usb 3-1: Using ep0 maxpacket: 16 [ 2344.811727][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2344.860532][T20778] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2344.872745][T20778] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2344.888928][T20778] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2344.903729][T20778] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2344.991333][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2345.006373][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.015006][T21568] usb 6-1: Product: syz [ 2345.019390][T21568] usb 6-1: Manufacturer: syz [ 2345.025484][T21568] usb 6-1: SerialNumber: syz [ 2345.072171][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2345.080342][T20778] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2345.090332][T20778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.098862][T20778] usb 3-1: Product: syz [ 2345.103524][T20778] usb 3-1: Manufacturer: syz [ 2345.108621][T20778] usb 3-1: SerialNumber: syz [ 2345.118176][T20778] usb 3-1: config 0 descriptor?? [ 2345.184048][T20778] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2345.191982][T20778] usb 3-1: selecting invalid altsetting 0 [ 2345.198315][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2345.223833][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2345.260708][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2345.274492][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2345.293014][T11813] udc-core: couldn't find an available UDC or it's busy [ 2345.299982][T11813] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2345.306061][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2345.316586][T10810] usb 6-1: USB disconnect, device number 110 [ 2345.349436][ T2087] pvrusb2: Failure uploading firmware1 [ 2345.361468][ T2087] pvrusb2: Device initialization was not successful. [ 2345.370093][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2345.402270][T20778] usb 3-1: USB disconnect, device number 71 [ 2345.408670][T20778] pvrusb2: Device being rendered inoperable [ 2346.090905][T20778] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2346.461208][T20778] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2346.650974][T20778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2346.660134][T20778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2346.669408][T20778] usb 6-1: Product: syz [ 2346.674261][T20778] usb 6-1: Manufacturer: syz [ 2346.678861][T20778] usb 6-1: SerialNumber: syz [ 2346.731925][T20778] usb-storage 6-1:1.0: USB Mass Storage device detected 06:35:54 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x44, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r9 = creat(&(0x7f0000001c00)='./file0\x00', 0x55) connect$unix(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)=ANY=[@ANYBLOB="a8022621", @ANYRES16=0x0, @ANYBLOB="210f00000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r12 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000600), 0x140100, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000003c0)=@file={0x0, '.\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000001c0)="b03cb0be8546fa3cc8885f", 0xb}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r10, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r10, @ANYRES16, @ANYRES32=r7, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYBLOB="d9340000000000000001000000", @ANYRES32, @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r7, @ANYRES32, @ANYRES32=r2, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r6, @ANYRES32, @ANYRES32=r11, @ANYRES32, @ANYRES32=r5, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x4000855}, 0x6000) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:35:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x3f00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x7ffff000}], 0x1) dup2(r7, r6) 06:35:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8da34e76c1e112c7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x7) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00003af000/0xf000)=nil, &(0x7f00005a6000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f00006d7000/0x3000)=nil, 0x3000, 0xb}, 0x400) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r9, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r9, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r10, r9) [ 2346.933431][T11993] udc-core: couldn't find an available UDC or it's busy [ 2346.940392][T11993] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2346.960615][T18024] usb 6-1: USB disconnect, device number 111 06:35:54 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x5, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r2, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x28c0060, &(0x7f0000000440)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r3, @ANYBLOB=',s$ype=*[-&,\x00\x00']) statx(r0, &(0x7f0000000600)='./file0\x00', 0x1000, 0x7ff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() r6 = getgid() lchown(&(0x7f0000000140)='./file0\x00', r5, r6) r7 = getuid() r8 = getgid() lchown(&(0x7f0000000140)='./file0\x00', r7, r8) fsetxattr$system_posix_acl(r1, &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {0x1, 0x1}, [{0x2, 0x5, r3}, {0x2, 0x2, r4}], {0x4, 0x1}, [{0x8, 0x6, 0xee00}, {0x8, 0x0, r6}, {0x8, 0x7, r8}], {0x10, 0x1}, {0x20, 0x3}}, 0x4c, 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect(0x5, 0x2c7, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x56, 0x90, 0xd6, 0x40, 0x1025, 0x5e, 0x2427, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b5, 0x2, 0x8, 0x5, 0x1b0, 0x0, [{{0x9, 0x4, 0x43, 0x6, 0x6, 0x5e, 0x79, 0x7, 0x6, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x6, 0x6, 0x1007}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x4, 0x4, 0x4, 0x8, "bc4dafe1"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1ff, 0x3, 0x3, "4bd47f2df28c32"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x5, 0x0, '8'}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7b, 0x5}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "9d7e"}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x0, 0x80}, {0x6, 0x24, 0x1a, 0x80, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x47, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x9}]}], [{{0x9, 0x5, 0x9d73d3fd15d47fd8, 0x10, 0x10, 0x40, 0x4, 0x9, [@generic={0xfa, 0x22, "b24dfe9cb0cf0b53df88c5cb09e97352dede63ede72db4b2b419d4ed818544eda4006c96d03d1c106b84080b8dd58498daf6f523e96de1ed2db3c5afc64ddae1348074f7e57e913019d5374a58db34e0c72db5c546aec5af8c06fe7858215c8e8701a9964296d51c97a373a966513d6a172703b057bc91b3394a3a121595a04d85d9b53654e7f79cde4624996204e3a993ea7f1ee47a29410d1f18daa057a46bcff7b981b4f343ec86bf46fb70e9177d6170b4c226331574aab55c505412bebc79c391e9d579c307442ed2c990cc11dcf3ec031a5bf163a18ece409903da2e89a675a14efc9f1ee34efda1e5cdf1f270216a51b2b083cac9"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3f, 0x7567}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x40, 0x20, 0x7}}, {{0x9, 0x5, 0xa, 0x16, 0x8, 0x1f, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc1, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x2, 0xff, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x7, 0x10, 0x20}, @generic={0xac, 0x30, "a3468dcf7f7301b7263e9247e944d3dc1a298285a450877eb11bbe77e49f72f00c9032d70aad6a972c81817b09403782bb472f3bb6c081b6b6835a7405bc87259c2673a42fb6881d755b9f2d30c8fb301b515a6cd7dc5c70817691f006b192189d0cd9e63bf2fb1c0a1df8cc1b62fd73b897d59fe58558cf9fe40239fb9e4ea5d65167717c246813ea52dd7ebb42449f67221a9c1b3c67c296b45e61146d49d8b97d78ac64a47cc1df7e"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x1, 0x0, 0x80}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x3, 0x81, 0x4e}}]}}, {{0x9, 0x4, 0x7d, 0x1, 0x5, 0x71, 0x2b, 0xff, 0x1, [], [{{0x9, 0x5, 0xf, 0x10, 0x40, 0x9, 0x2, 0x20}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x9f, 0xfc, 0x6}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0xff, 0x7, 0x20}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x0, 0x60, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1}]}}, {{0x9, 0x5, 0x0, 0x10, 0x1ff, 0x4, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3a, 0x9}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x602, 0x3f, 0x4, 0xab, 0x20, 0x8}, 0x2d, &(0x7f0000000500)={0x5, 0xf, 0x2d, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "23ceb69dfa463aa4425a917cdc59a8e8"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x5, 0x6, 0xff76}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0xf2, 0x3}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1407}}]}) 06:35:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x3f83}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x6000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x833f}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xf000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2347.439208][T10810] usb 3-1: new high-speed USB device number 72 using dummy_hcd 06:35:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x34000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2347.540938][T18024] usb 6-1: new high-speed USB device number 112 using dummy_hcd 06:35:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x400300}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2347.729037][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 2347.863120][T10810] usb 3-1: config 0 has an invalid descriptor of length 188, skipping remainder of the config [ 2347.876170][T10810] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2347.899609][T10810] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2347.928153][T10810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2347.951691][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 06:35:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x7ffff000}], 0x1) dup2(r7, r6) 06:35:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0xb31, &(0x7f00000003c0)={0x0, 0xf069, 0x0, 0x3}, &(0x7f00006d7000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:35:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xf0ffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r7, r6) [ 2348.142066][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2348.153734][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.161829][T10810] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2348.161868][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.161895][T10810] usb 3-1: Product: syz [ 2348.161916][T10810] usb 3-1: Manufacturer: syz [ 2348.161936][T10810] usb 3-1: SerialNumber: syz [ 2348.164584][T10810] usb 3-1: config 0 descriptor?? [ 2348.224828][T18024] usb 6-1: Product: syz [ 2348.238244][T18024] usb 6-1: Manufacturer: syz [ 2348.259233][T10810] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2348.268850][T18024] usb 6-1: SerialNumber: syz [ 2348.272840][T10810] usb 3-1: selecting invalid altsetting 0 [ 2348.280935][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2348.290243][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2348.360009][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2348.448235][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2348.467299][T12022] udc-core: couldn't find an available UDC or it's busy [ 2348.505304][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2348.515652][T12022] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2348.573094][T12027] udc-core: couldn't find an available UDC or it's busy [ 2348.580077][T12027] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2348.601651][T10810] usb 3-1: USB disconnect, device number 72 [ 2348.616915][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2348.664766][T21568] usb 6-1: USB disconnect, device number 112 [ 2348.680694][ T2087] pvrusb2: Failure uploading firmware1 [ 2348.693210][ T2087] pvrusb2: Device initialization was not successful. [ 2348.700251][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2348.711887][T10810] pvrusb2: Device being rendered inoperable [ 2349.107243][T12372] udc-core: couldn't find an available UDC or it's busy [ 2349.114347][T12372] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 06:35:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d00010000000009040008030300a90009050000000000000009"], 0x0) [ 2349.520673][T21568] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2349.580857][T20778] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2349.830718][T20778] usb 3-1: Using ep0 maxpacket: 16 [ 2349.920841][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2349.950681][T20778] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2349.961110][T20778] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2349.972230][T20778] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2349.986302][T20778] usb 3-1: config 0 interface 0 has no altsetting 0 06:35:57 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x6, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:35:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x1000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:35:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xffffffff000}], 0x1) dup2(r7, r6) 06:35:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x7ffff000}], 0x1) dup2(r7, r6) 06:35:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_io_uring_setup(0x77b, &(0x7f0000001500), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop4', 0x0, 0x3) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r8, &(0x7f00000000c0), 0x0, 0x0, 0x81000, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x84, 0x1}, &(0x7f00000003c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r9}}, 0xff) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r10, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r10, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r11, r10) [ 2350.150785][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2350.151317][T20778] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2350.169224][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2350.195660][T20778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2350.204489][T21568] usb 6-1: Product: syz [ 2350.221385][T21568] usb 6-1: Manufacturer: syz [ 2350.227213][T20778] usb 3-1: Product: syz [ 2350.241933][T20778] usb 3-1: Manufacturer: syz 06:35:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x2000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2350.271132][T20778] usb 3-1: SerialNumber: syz [ 2350.280858][T21568] usb 6-1: can't set config #1, error -71 [ 2350.296144][T21568] usb 6-1: USB disconnect, device number 113 [ 2350.327881][T20778] usb 3-1: config 0 descriptor?? [ 2350.383339][T20778] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2350.410356][T20778] usb 3-1: selecting invalid altsetting 0 06:35:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x3000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2350.451217][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2350.470180][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2350.553725][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2350.588122][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2350.596131][T20778] usb 3-1: USB disconnect, device number 73 06:35:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x4000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2350.660402][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2350.700814][T21568] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2350.737928][ T2087] pvrusb2: Failure uploading firmware1 [ 2350.759605][ T2087] pvrusb2: Device initialization was not successful. [ 2350.808878][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. 06:35:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x5000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2350.884848][T20778] pvrusb2: Device being rendered inoperable 06:35:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x6000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2351.121560][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 06:35:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x7000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2351.360707][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2351.371437][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.386705][T21568] usb 6-1: Product: syz [ 2351.399301][T21568] usb 6-1: Manufacturer: syz [ 2351.407897][T21568] usb 6-1: SerialNumber: syz [ 2351.460495][T10810] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2351.473244][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2351.706026][T12392] udc-core: couldn't find an available UDC or it's busy [ 2351.713102][T12392] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2351.730528][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 2351.732901][T17472] usb 6-1: USB disconnect, device number 114 [ 2351.850785][T10810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2351.861268][T10810] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2351.872783][T10810] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2351.885843][T10810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2352.050662][T10810] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2352.059881][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2352.070029][T10810] usb 3-1: Product: syz [ 2352.075186][T10810] usb 3-1: Manufacturer: syz [ 2352.079889][T10810] usb 3-1: SerialNumber: syz [ 2352.090583][T10810] usb 3-1: config 0 descriptor?? [ 2352.133012][T10810] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2352.148290][T10810] usb 3-1: selecting invalid altsetting 0 [ 2352.162109][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2352.181309][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2352.198571][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2352.222054][T10810] usb 3-1: USB disconnect, device number 74 06:35:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0xd, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2352.228944][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2352.280775][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2352.305909][ T2087] pvrusb2: Failure uploading firmware1 [ 2352.319764][ T2087] pvrusb2: Device initialization was not successful. [ 2352.337054][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2352.357326][T10810] pvrusb2: Device being rendered inoperable [ 2352.530409][T20778] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2352.740539][T10810] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2352.890466][T20778] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2353.010386][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 2353.060499][T20778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2353.069637][T20778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2353.079422][T20778] usb 6-1: Product: syz [ 2353.085200][T20778] usb 6-1: Manufacturer: syz [ 2353.089819][T20778] usb 6-1: SerialNumber: syz [ 2353.131796][T20778] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2353.154002][T10810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2353.185357][T10810] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping 06:36:00 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x8, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x8000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffffffffffdef}], 0x1) dup2(r7, r6) 06:36:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) r8 = dup2(r7, r5) read$FUSE(r1, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fchownat(r8, &(0x7f00000001c0)='./file0\x00', r9, 0x0, 0x100) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:36:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r7, r6) [ 2353.236433][T10810] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2353.243277][T17472] usb 6-1: USB disconnect, device number 115 [ 2353.329208][T10810] usb 3-1: config 0 interface 0 has no altsetting 0 06:36:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x9000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2353.561274][T10810] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2353.586028][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 06:36:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xa000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2353.616062][T10810] usb 3-1: Product: syz [ 2353.641072][T10810] usb 3-1: Manufacturer: syz [ 2353.645705][T10810] usb 3-1: SerialNumber: syz [ 2353.689401][T10810] usb 3-1: config 0 descriptor?? 06:36:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xb000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2353.752976][T10810] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2353.771788][T10810] usb 3-1: selecting invalid altsetting 0 [ 2353.792533][T17472] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 2353.817392][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2353.860304][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2353.900820][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2353.909844][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2353.963425][T10810] usb 3-1: USB disconnect, device number 75 [ 2354.036140][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2354.046484][ T2087] pvrusb2: Failure uploading firmware1 [ 2354.062801][ T2087] pvrusb2: Device initialization was not successful. [ 2354.069504][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. 06:36:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xe000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2354.122404][T10810] pvrusb2: Device being rendered inoperable [ 2354.161195][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 06:36:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xf000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x10000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2354.342906][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2354.364928][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.390361][T17472] usb 6-1: Product: syz [ 2354.397600][T17472] usb 6-1: Manufacturer: syz [ 2354.402550][T17472] usb 6-1: SerialNumber: syz [ 2354.451751][T17472] usb-storage 6-1:1.0: USB Mass Storage device detected 06:36:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x11000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2354.668910][T12629] udc-core: couldn't find an available UDC or it's busy [ 2354.677083][T12629] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2354.708436][T17472] usb 6-1: USB disconnect, device number 116 [ 2355.470203][T17472] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 2355.830416][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2356.000281][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2356.009454][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2356.018624][T17472] usb 6-1: Product: syz [ 2356.023951][T17472] usb 6-1: Manufacturer: syz [ 2356.028554][T17472] usb 6-1: SerialNumber: syz [ 2356.071487][T17472] usb-storage 6-1:1.0: USB Mass Storage device detected 06:36:03 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x10, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_disconnect(r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_usb_connect(0x5, 0x32e, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0xd3, 0x5a, 0xe6, 0x40, 0x19d2, 0x1476, 0x58f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31c, 0x3, 0x2, 0x6, 0x0, 0x8, [{{0x9, 0x4, 0xb8, 0x5, 0x3, 0xff, 0x1c, 0x61, 0x7, [], [{{0x9, 0x5, 0x8, 0x8, 0x7de, 0x6, 0x5, 0x4, [@generic={0x4a, 0x3, "c92fd0f28d48404fcb7cde72ff032b40a47c190d69963934a5dcea4bb75010d439a601ad9e8c36ac6b12a80ef026e0549e7af36bc4eccc3e2db3b89a15351be19f571766f9b5771d"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x3ff}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x0, 0xf7, 0x8, [@generic={0x29, 0xf, "e3fde9a8b55449e3cee9e11caed593b95ff2cbc9e51773a860d8c7bc853de7b219ad7ca456b1df"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x0, 0x8, 0x81}}]}}, {{0x9, 0x4, 0xb8, 0x0, 0x1, 0x2c, 0xe2, 0xc7, 0x6, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x41, 0x6, 0x1001}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x2, 0x1, 0x8, "f50f", "f0"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x0, 0x1001}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x1, 0x7, 0x1f, "84f60bf28f83ce3279"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x400, 0x3, 0x2, "2700c3e9"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x6, 0x2, 0x1, 0x3f, "4742b47f31"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "33f50753cfb2"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0x919, 0xc50, 0x9, 0x7}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x3, 0x1, 0x1, 0x0, 0x6}, @country_functional={0x10, 0x24, 0x7, 0x9, 0x401, [0x1, 0x7, 0xbbc, 0x8f, 0x3]}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x6, 0x80, 0x3}, @mdlm_detail={0x25, 0x24, 0x13, 0x8, "8c80eef82c363acefaba2f0e0d39c09b749db3bdb51473486e7e6b1048b52c74ef"}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x100, 0x80, 0x35, 0x8, 0x7f}]}], [{{0x9, 0x5, 0xd, 0x10, 0x20, 0x6, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x3f}, @generic={0xcc, 0xc, "ce37ceef4872323aa11a0a4b6ab877e3e1ce20f2beb0d8eeb3d6468e55e28405dc8c76b3ddbee82311e771859f9a7a12e6f292b342b6baa4b7ad99d0b1008b7742fe57ff1e1deb9029f8abcfc968b41b87a5fa5c806a2eb30f08b721d87606d6fbaab0631802055d7f9574bfefdc39d15600921e4411c0bba2b88b33fa74c0953cd37d3e635bfd4ec138e74cc7b8df4dbcd3d5296eb83fd6a9e351eea3f4975805fdf75437a2e127bbb564f2257ca77210edb481558c16502e3f37507c4acb4d1044dc007e48703094b4"}]}}]}}, {{0x9, 0x4, 0x3b, 0x5, 0x5, 0x7c, 0xc9, 0x19, 0xf8, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0xc9c, 0xbb, 0x5, 0x4}, {0x6, 0x24, 0x1a, 0x38}, [@obex={0x5, 0x24, 0x15, 0x6}]}, @hid_hid={0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0x248}}], [{{0x9, 0x5, 0x6, 0xb, 0x3ff, 0x11, 0x2, 0x0, [@generic={0x73, 0x23, "1760543ce9186f3a1f96f064428009debe6056429e35e95f1eb312e254cd7e59a6addad0bf056781bb5c271e13216e8ee916d784ed1c8a40a1bacf768a56d41f95238aa1757c66eab07c41a8c5feb1be3ae2bda2e9447844de3e81001490556cbb8b26bffc38b4bbd6ffebfa262bc94705"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x3, 0x0, 0xd5}}, {{0x9, 0x5, 0xd, 0x10, 0x3f7, 0x4, 0x7, 0x46}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x1f, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8}]}}, {{0x9, 0x5, 0x80, 0x1, 0x18, 0x3f, 0xde, 0x3f}}]}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0xfe, 0x0, 0x5, 0xff, 0x37}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x5, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x81d}}, {0x3f, &(0x7f0000000180)=@string={0x3f, 0x3, "3ec1019533514bbedad760fd1f4797e9a646cc892bb05d04764ade656d1d6c013caac037cef85679ef871d413ccbb6ea1fe8f64d5290ae1947beacf152"}}, {0x25, &(0x7f00000001c0)=@string={0x25, 0x3, "93a3a0002dbbb54a48042b1e27da8629aaa0004af4e66f871fdcc3fe59383b2c59eb01"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x80c}}, {0xf1, &(0x7f0000000240)=@string={0xf1, 0x3, "35ea6e751e3b8be608b7bc0613e70e86a4451a1b7e9e0de5ba0c974f0b827fe0c6b8ccea15bffbb5db721e5a0f5fbb428329511e7f9b92c7757ff1542851f32b4c3bf5de720a79225755f3e8d66728173d472c5cf3072bb454b3b34f67ba41c48ee1a52bc0688efd965cf9cb23a6e1786115668a65bd851bcf3af60fe57772290bc12e9a2d26d3c08e8c1a58d899bb77dd72f678153b5f78b427f4740cfef23cae4328825090786ad2fb45eee6361f1bd7c2d00c2be67fd48ecc1efefb90a80d76b811abe74a3aff3eed39dc7c1f8959d463603a2c9111ae2dd81419acdd8ab90a81a04e7a9fec28e1e1149009f680"}}]}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r4, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r5 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x10000, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x2006, 0x118, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x80, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3a0}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x8, 0x3f}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x5, 0x1f, 0x3}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x200, 0x3f, 0x3f, 0x81, 0xff, 0x1}, 0x1bb, &(0x7f0000000880)={0x5, 0xf, 0x1bb, 0x6, [@generic={0xaa, 0x10, 0xb, "fa4f5b285faacc576ca0ea7d7240225f2f996f620039577f8313fb6670004ba49b351ce8b251ccd7c6a18e43964610b8077240b25ec666ec5be887c2f16b24483e653018ccc97a0c16d49fc55ec6ff42de34d8a0e026a2b2dede53cfd53c15e2a5258737871353bc5c0711b2a74622516be6d4127e2cf137f9e7ab80632714a891578802db4144cbc3ca671202e426cf5152e7ea3f38471fb78b209c9222bf2847e9d7317f58cc"}, @ssp_cap={0x24, 0x10, 0xa, 0x3f, 0x6, 0x10000, 0xf000, 0x14, [0xcf, 0xc03f, 0xf, 0xc01e, 0xf, 0x0]}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x8, 0xf000, 0xd937, [0xc030, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0cfc293c395c647124e73ba69319bd4a"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x0, 0xfff7}, @generic={0xb9, 0x10, 0x1, "656743524cb1e6345c2ee8065d6c529052722678bd2e90ff29c13e3413bce5c2e51a3d6a533ae4c53b5f5a496846268dfac2295ce66796617792136fafda7b7d059d85c753f15cbbe3e99f749f054d696b9034a13200141acc8fa45ea4cc9b6207a0515d7d2256f50790b61fa94e761eb3de7b98d33e4b59fded97d5cb1b96ce0fc40b6c622e279f71c634e61d20fcff83e526b9bb7828f6019496a30ac3ee7cb147e97389ad5f7629658f834b0d29d762d38db91cdd"}]}, 0x6, [{0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x6d}}, {0xb5, &(0x7f0000000a80)=@string={0xb5, 0x3, "7685f44b739de9e5273a604ad28ee06cc3301697facd9391cff112eca1ae78348e691873c4cd21d2794479e4d7585290f1dea1276a3013366c86ba6f35d4ef08a469fd88688011d69207f587e992c29f3ccf6f9a6524d23feb3afae86a2953d93e8ff25601dc37f1d9b9b903c9193a26a36f37fb298ee9d86bd816f931227c79069d194af7c22d38d90daf376e9a14ae26cabdb2f3cbf68463523bb4045a14bcac2318a739e6116625d2076460624925465a78"}}, {0xf5, &(0x7f0000000b40)=@string={0xf5, 0x3, "d53ffe172af5fe73a0e6c5c95524e81af9a8c06195f36808e2515930f2daf77061da37d1d23640939293400b054da028e9c8963043328d276ae35cc084533530aa4ff494fb0ab4852eaa1b67e5dc1879454330b4cf08cbaf0fdb1a284286e7b6ecae84c9c43211b09c8a9c436625e52b41588ded1b73296913f073b561b25a9356a64df35fe1f56ebc441ff202cb7fd23f55573bf1751030bd24168b9926930c4886cf568a0d64edb01cdc6bc4a15e2ea35c5ee12311bc6c9689f315ab7ce9da80401ed132fadb7e5868d92fb7e1775c97759dea9d952bb059a7524890f68f92a01d60fbe955cf70dd0fd11a1e465c48f789cb"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x812}}, {0xbb, &(0x7f0000000cc0)=@string={0xbb, 0x3, "9e44278484a1a3e0e785708f59ff9be57fc1567606b35674a3d0a1eeb87f701453f2ae4cf182c5f8353f446200967b6ad2e6500c2336f1e5d8a1afa7c83b261452992795b82003060efb71e80f26e7c7d34764b173c67fe7837bab273d50b092e2f7a73c7643c137483e866b9b12674042ec291345332da60754a297722bcc169a7bea53cfa274bfc28a89bd67e4606ad0d05011daa7be6c92838f89fcd5ce89a1107386b6b2708929820cba46a9d1a1e56a7a271dc6b3d638"}}]}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000080)={0x80000000, 0x8, [0xc4c, 0x8]}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000009, 0x4010, r3, 0xa22b8000) 06:36:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x2) dup2(r7, r6) 06:36:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x3f000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r7, r6) 06:36:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x1, &(0x7f0000000180)={0xffffff7f, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) ptrace$pokeuser(0x6, r0, 0x2ac28dba, 0x1) r2 = syz_io_uring_setup(0x4c, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) setpgid(0x0, r0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r7, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) [ 2356.272470][T12735] udc-core: couldn't find an available UDC or it's busy [ 2356.279430][T12735] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2356.302844][T20778] usb 6-1: USB disconnect, device number 117 06:36:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x60000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x80010000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2356.710086][T17472] usb 3-1: new high-speed USB device number 76 using dummy_hcd 06:36:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x833f0000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2356.850160][T20778] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2356.950388][T17472] usb 3-1: Using ep0 maxpacket: 16 06:36:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x9effffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xf0ffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2357.085319][T17472] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2357.096130][T17472] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2357.113007][T17472] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2357.166560][T17472] usb 3-1: config 0 interface 0 has no altsetting 0 06:36:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x3) dup2(r7, r6) [ 2357.213404][T20778] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2357.342106][T17472] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2357.352244][T17472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.364999][T17472] usb 3-1: Product: syz [ 2357.369193][T17472] usb 3-1: Manufacturer: syz [ 2357.376392][T17472] usb 3-1: SerialNumber: syz [ 2357.385950][T17472] usb 3-1: config 0 descriptor?? [ 2357.400756][T20778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2357.409826][T20778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.454048][T20778] usb 6-1: Product: syz [ 2357.463014][T20778] usb 6-1: Manufacturer: syz [ 2357.467638][T20778] usb 6-1: SerialNumber: syz [ 2357.493767][T17472] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2357.521173][T20778] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2357.537572][T17472] usb 3-1: selecting invalid altsetting 0 [ 2357.551436][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2357.587378][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2357.624911][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2357.633982][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2357.719863][T20778] usb 3-1: USB disconnect, device number 76 [ 2357.745518][T12767] udc-core: couldn't find an available UDC or it's busy [ 2357.765986][T12767] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2357.779263][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2357.788799][T17472] usb 6-1: USB disconnect, device number 118 [ 2357.813424][ T2087] pvrusb2: Failure uploading firmware1 [ 2357.830142][ T2087] pvrusb2: Device initialization was not successful. [ 2357.853883][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2357.867139][T20778] pvrusb2: Device being rendered inoperable [ 2358.289947][T20778] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2358.530056][T20778] usb 3-1: Using ep0 maxpacket: 16 [ 2358.560154][T13897] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2358.650489][T20778] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2358.668850][T20778] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2358.679508][T20778] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2358.692946][T20778] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2358.850223][T20778] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2358.859307][T20778] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2358.867462][T20778] usb 3-1: Product: ꎓ 묭䪵шḫ⦆ꂪ䨀蝯ﻃ㡙ⰻ [ 2358.875211][T20778] usb 3-1: Manufacturer: 섾锁儳빋ퟚﵠ䜟䚦觌뀫ѝ䩶旞ᵭŬ꨼㟀祖蟯䄝쬼䷶遒᦮빇 [ 2358.887330][T20778] usb 3-1: SerialNumber: ࠌ [ 2358.895005][T20778] usb 3-1: config 0 descriptor?? [ 2358.942738][T20778] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2358.950816][T20778] usb 3-1: selecting invalid altsetting 0 [ 2358.957232][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2358.961025][T13897] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2358.983972][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2359.021099][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2359.033822][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2359.045277][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2359.056714][ T2087] pvrusb2: Failure uploading firmware1 [ 2359.064178][ T2087] pvrusb2: Device initialization was not successful. [ 2359.071930][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2359.147245][T12759] udc-core: couldn't find an available UDC or it's busy [ 2359.154360][T12759] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2359.165479][T20778] usb 3-1: USB disconnect, device number 77 [ 2359.170525][T13897] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2359.179309][T20778] pvrusb2: Device being rendered inoperable [ 2359.194900][T13897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2359.212069][T13897] usb 6-1: Product: syz [ 2359.216604][T13897] usb 6-1: Manufacturer: syz [ 2359.232826][T13897] usb 6-1: SerialNumber: syz [ 2359.281045][T13897] usb-storage 6-1:1.0: USB Mass Storage device detected 06:36:06 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x17, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) [ 2359.448206][T20778] usb 6-1: USB disconnect, device number 119 [ 2359.859928][T20778] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2359.949843][T10810] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2360.220115][T20778] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2360.220528][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 2360.370741][T10810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2360.381571][T10810] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2360.393765][T10810] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2360.400657][T20778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2360.408252][T10810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2360.424248][T20778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2360.433225][T20778] usb 6-1: Product: syz [ 2360.437497][T20778] usb 6-1: Manufacturer: syz [ 2360.442323][T20778] usb 6-1: SerialNumber: syz 06:36:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xfffff000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) setxattr$incfs_id(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), &(0x7f00000003c0)={'0000000000000000000000000000000', 0x32}, 0x20, 0x3) dup2(r7, r6) 06:36:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x5) dup2(r7, r6) 06:36:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r7, r6) [ 2360.491177][T20778] usb-storage 6-1:1.0: USB Mass Storage device detected 06:36:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@deltaction={0xb0, 0x31, 0x430, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8f3}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x60000}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40882}, 0xc000) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r3, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) close(r2) [ 2360.570090][T10810] usb 3-1: string descriptor 0 read error: -71 [ 2360.582320][T10810] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2360.633904][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 06:36:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xffffff7f}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2360.699250][T10810] usb 3-1: config 0 descriptor?? [ 2360.699302][T13029] udc-core: couldn't find an available UDC or it's busy [ 2360.718346][T13029] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2360.750298][T20594] usb 6-1: USB disconnect, device number 120 [ 2360.757635][T10810] usb 3-1: can't set config #0, error -71 [ 2360.796532][T10810] usb 3-1: USB disconnect, device number 78 06:36:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xffffff9e}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xfffffff0}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2361.189885][T10810] usb 3-1: new high-speed USB device number 79 using dummy_hcd 06:36:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x1000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x40030000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2361.468747][T10810] usb 3-1: Using ep0 maxpacket: 16 06:36:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xf0ffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2361.552720][T20594] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 2361.605906][T10810] usb 3-1: config 0 has an invalid descriptor of length 183, skipping remainder of the config [ 2361.643380][T10810] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2361.692756][T10810] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2361.736029][T10810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2361.960754][T10810] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2361.973205][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2361.985226][T10810] usb 3-1: Product: syz [ 2361.989517][T10810] usb 3-1: Manufacturer: syz [ 2361.997071][T10810] usb 3-1: SerialNumber: syz [ 2362.011060][T10810] usb 3-1: config 0 descriptor?? [ 2362.026485][T20594] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2362.066088][T10810] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2362.085102][T10810] usb 3-1: selecting invalid altsetting 0 [ 2362.119953][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2362.129255][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2362.163306][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2362.180407][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2362.189457][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2362.240429][ T2087] pvrusb2: Failure uploading firmware1 [ 2362.245968][ T2087] pvrusb2: Device initialization was not successful. [ 2362.253024][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2362.263417][T20594] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2362.288193][T20594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2362.307223][T20594] usb 6-1: Product: syz [ 2362.315565][T20594] usb 6-1: Manufacturer: syz [ 2362.327334][T20594] usb 6-1: SerialNumber: syz [ 2362.344968][T10810] usb 3-1: USB disconnect, device number 79 [ 2362.360047][T10810] pvrusb2: Device being rendered inoperable [ 2362.391328][T20594] usb-storage 6-1:1.0: USB Mass Storage device detected 06:36:09 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x10, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x100000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) 06:36:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x7) dup2(r7, r6) 06:36:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3}, 0x0, 0xfffffffffffffffd, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = gettid() r7 = getuid() r8 = getgid() lchown(&(0x7f0000000140)='./file0\x00', r7, r8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)="c08d5ce89027d47e57b2630363061a9b54172f4eeb0aae3f33827bb9ff148cc9fc390a805384a242812478c62cb7334503d448c1b7ec799a8476e9f2798466d13bfc47bb8739e1450c83e8174b30ff7a020d63cd61637a1b82f0cb76ee86bb5cdca651f023ac5e31d5246ed996acec10909b9989aa8601676500219f86994cd981a34ad66206ebc711a8b458cc299554f59cc7d7b05c7fd84ef5493564c0de521e8b9195f1b15fc9f02646f07f04bc4b5951a7730f906f49ade8bf", 0xbb}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="2014d19bce9ef8286bf9b0f781f3058e9915573be915fafd78aa8327472a17307bf616a81269f666b1edd012328f2dd8967f77ce79048ba3968a34fa65187160346ec9dbafb9afb8e928d973b9b5de320f39b953bcc5", 0x56}, {&(0x7f00000001c0)="b8b1eaf2bbf8cd1ad3479a8db5ffc8fb351a9c9b0b", 0x15}, {&(0x7f0000001500)="e1ee42c38f32dbd29371b3ddbb33068ee2125b6e9443aa9b68c7d749283dea8ae44bb681cd0844c44e6aae54a0a91e22d16bf603d426e92bea7d2fa27abd7b4cb20d9ad3e61ff35246d9a3208b80d0e04c01837ded6e5bf1e051321093feca9bd7216c863323f96d0fcc9bfad0caa426abaac163cc25fce0a41425481476f6ed00cb0d3247b0f52fa28c212ef369", 0x8e}, {&(0x7f00000015c0)="34928cf1fb89d2eebb1482d2e1d0815a03549b34e019db2072e60dd8bc0c7de7b681ed6d26488c954a2e7781d00270df6a3a7a6c5f18a89ab12d1a83a250372f1371212ea87ec276b1a3a8de69b973a8453645b6edbc9bcec4ee576e09fb797796820e3f3d2808dd76c019f27a68a3cba699714a46c04de14174589895a8c73f027be8d8bc0d769a183d5df0d7cfd906a5aca90858bb52cdee4782dd54b425fdd4ffeb36c2f63413b92b123e654e5f5850758bdaf2d9c06a47c2b03b946ba84515d207ec51c3d2381a5d7806cc3df724ec28cae282e395d81558d0099fc2a3b2962a278e3359aeaa0c46b1a2dc6c28d82c3d43eb", 0xf4}, {&(0x7f00000016c0)="d0fe6241e72930dcd2e90a3c3b6b83f54b69e6c378dbf10124f3394d97a7d409d3ce0b721e1cf2837fa4ad3d4e61c49558c31bc16c7a2f1081c5b6b1a7298acc1336cdf142379f2644b3799a8ac97c77a6f9918b0283ba260815f91052377bf4b414d2f600358ace444314d43dde59b54bc546e15dfda211d1b27f98083cb6d38c05beeb3122f65eba73b80368b1f7ad1df4730485712b283f0d7b80737c5298aa947e55cf500c3ea3e1546658c142e32c40a7fd600f64eede5090c5611fd7aee6fdace70a0b7f21a7f3de2a8aa3ed0eda07e2ce1ee0224c9688d86239c7235744ecf718ac0c5b2009805bbc0e8c1d4c5daf5f810df429a7ef", 0xf9}], 0x7, &(0x7f00000018c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee00, r8}}}], 0x60, 0xc840}, 0x20040000) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r9, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r9, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r10, r9) [ 2362.529244][T20778] usb 6-1: USB disconnect, device number 121 06:36:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x200000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0xffffffc1, @mcast2, 0x8}}, 0x4, 0x7}, &(0x7f0000000300)=0x90) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000340)={r3, 0xfeff, 0x0, 0x6, 0x4}, &(0x7f0000000380)=0x18) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r4) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x5, 0x6, 0x5, @mcast2, @empty, 0x700, 0x700, 0x2, 0x5}}) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newaddr={0x54, 0x14, 0x20, 0x70bd2b, 0x25dfdbff, {0x2, 0x80, 0x82, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x405}, @IFA_CACHEINFO={0x14, 0x6, {0xffffffff, 0x7, 0x0, 0x8001}}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_LOCAL={0x8, 0x2, @empty}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 06:36:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x300000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2363.032232][T20778] usb 6-1: new high-speed USB device number 122 using dummy_hcd 06:36:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x400000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x500000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x8) dup2(r7, r6) 06:36:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x120) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@getaddr={0x14, 0x16, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000014) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) [ 2363.411117][T13897] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2363.414937][T20778] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2363.619643][T20778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2363.628726][T20778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2363.709499][T13897] usb 3-1: Using ep0 maxpacket: 16 [ 2363.760493][T20778] usb 6-1: Product: syz [ 2363.771150][T20778] usb 6-1: Manufacturer: syz [ 2363.775773][T20778] usb 6-1: SerialNumber: syz [ 2363.860774][T20778] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2363.870724][T13897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2363.894461][T13897] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2363.928196][T13897] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2363.944287][T13897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2364.066976][T13253] udc-core: couldn't find an available UDC or it's busy [ 2364.076119][T13253] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2364.096219][T10810] usb 6-1: USB disconnect, device number 122 [ 2364.158487][T13897] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2364.167991][T13897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2364.183262][T13897] usb 3-1: Product: syz [ 2364.187442][T13897] usb 3-1: Manufacturer: syz [ 2364.194159][T13897] usb 3-1: SerialNumber: syz [ 2364.208492][T13897] usb 3-1: config 0 descriptor?? [ 2364.268281][T13897] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2364.286226][T13897] usb 3-1: selecting invalid altsetting 0 [ 2364.310274][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2364.345952][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2364.390120][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2364.410724][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2364.433868][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2364.444215][ T2087] pvrusb2: Failure uploading firmware1 [ 2364.450449][ T2087] pvrusb2: Device initialization was not successful. [ 2364.457249][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2364.478861][T20778] usb 3-1: USB disconnect, device number 80 [ 2364.486498][T20778] pvrusb2: Device being rendered inoperable [ 2364.879463][T10810] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2365.240130][T10810] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2365.409630][T10810] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2365.419702][T10810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.427841][T10810] usb 6-1: Product: syz [ 2365.433792][T10810] usb 6-1: Manufacturer: syz [ 2365.438492][T10810] usb 6-1: SerialNumber: syz [ 2365.482624][T10810] usb-storage 6-1:1.0: USB Mass Storage device detected 06:36:12 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x17, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x600000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0xc) dup2(r7, r6) 06:36:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) 06:36:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x6000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:36:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'nl80211\x00'}, {0x20, 'nl80211\x00'}, {0x20, ',)+'}, {0x20, '-'}, {0x20, '-%\x0e'}, {0x20, 'nl80211\x00'}, {0x20, 'nl80211\x00'}, {0x20, 'nl80211\x00'}], 0xa, "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"}, 0x13f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f00000002c0)='./file0\x00', 0x52000, 0x20) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x20, r3, 0xf21, 0x0, 0x25dfdbfd, {{0x5}, {@void, @val={0xc, 0x99, {0x0, 0xffc00000}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r5, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc2}, 0xc, &(0x7f0000000340)={&(0x7f0000001400)={0x244, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10dd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xba}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb37}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x10}, 0x4) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/1, 0x1}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000080)=""/188, 0xbc}], 0x3, 0x3, 0x1) [ 2365.645338][T21568] usb 6-1: USB disconnect, device number 123 06:36:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x700000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x800000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x900000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2366.110222][T17472] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2366.199375][T21568] usb 6-1: new high-speed USB device number 124 using dummy_hcd 06:36:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xa00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2366.380587][T17472] usb 3-1: Using ep0 maxpacket: 16 06:36:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xb00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xe00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2366.520036][T17472] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2366.537209][T17472] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2366.553068][T17472] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2366.566362][T17472] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2366.570379][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2366.791305][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2366.799368][T17472] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2366.816651][T17472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.818557][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.825134][T17472] usb 3-1: Product: syz [ 2366.837635][T17472] usb 3-1: Manufacturer: syz [ 2366.844843][T17472] usb 3-1: SerialNumber: syz [ 2366.863264][T17472] usb 3-1: config 0 descriptor?? [ 2366.885303][T21568] usb 6-1: Product: syz [ 2366.893602][T21568] usb 6-1: Manufacturer: syz [ 2366.898400][T21568] usb 6-1: SerialNumber: syz [ 2366.931981][T17472] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2366.951560][T17472] usb 3-1: selecting invalid altsetting 0 [ 2366.961476][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2366.975661][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2367.005974][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2367.037512][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2367.077354][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2367.116317][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2367.137296][ T2087] pvrusb2: Failure uploading firmware1 [ 2367.157999][ T2087] pvrusb2: Device initialization was not successful. [ 2367.166588][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2367.186298][T13674] udc-core: couldn't find an available UDC or it's busy [ 2367.193736][T13674] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2367.199129][T10810] usb 3-1: USB disconnect, device number 81 [ 2367.207599][T10810] pvrusb2: Device being rendered inoperable [ 2367.227297][T20778] usb 6-1: USB disconnect, device number 124 [ 2367.999275][T10810] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2367.999311][T20778] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2368.239199][T10810] usb 3-1: Using ep0 maxpacket: 16 [ 2368.359661][T10810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2368.375127][T10810] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2368.387497][T10810] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2368.401421][T10810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2368.409292][T20778] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2368.559226][T10810] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2368.568815][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2368.577516][T10810] usb 3-1: Product: syz [ 2368.582380][T10810] usb 3-1: Manufacturer: syz [ 2368.587161][T10810] usb 3-1: SerialNumber: syz [ 2368.594435][T10810] usb 3-1: config 0 descriptor?? [ 2368.599945][T20778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2368.617998][T20778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2368.627736][T20778] usb 6-1: Product: syz [ 2368.632906][T20778] usb 6-1: Manufacturer: syz [ 2368.637629][T20778] usb 6-1: SerialNumber: syz [ 2368.641686][T10810] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2368.650655][T10810] usb 3-1: selecting invalid altsetting 0 [ 2368.657053][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2368.685597][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2368.698827][T20778] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2368.748500][T10810] usb 3-1: USB disconnect, device number 82 [ 2368.800580][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2368.838260][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? 06:36:16 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x3, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xf00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) 06:36:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0)={0x0, 0x9ff9}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r8) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r9) fanotify_mark(r8, 0x80, 0x9, r9, &(0x7f00000001c0)='./file0\x00') dup2(r7, r6) 06:36:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0xf) dup2(r7, r6) 06:36:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2368.852295][T21568] usb 6-1: USB disconnect, device number 125 [ 2368.856028][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2368.961679][ T2087] pvrusb2: Failure uploading firmware1 [ 2368.978826][ T2087] pvrusb2: Device initialization was not successful. [ 2369.006460][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. 06:36:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x1000000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2369.047794][T10810] pvrusb2: Device being rendered inoperable 06:36:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x1100000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x3f00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2369.395327][T21568] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2369.419350][T10810] usb 3-1: new high-speed USB device number 83 using dummy_hcd 06:36:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x6000000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x8001000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2369.659549][T10810] usb 3-1: Using ep0 maxpacket: 16 06:36:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x833f000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2369.780109][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2369.794048][T10810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2369.830602][T10810] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2369.918204][T10810] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2369.959144][T10810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2370.030414][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2370.041233][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2370.053673][T21568] usb 6-1: Product: syz [ 2370.058195][T21568] usb 6-1: Manufacturer: syz [ 2370.066034][T21568] usb 6-1: SerialNumber: syz [ 2370.120051][T10810] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2370.131075][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2370.150642][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2370.176194][T10810] usb 3-1: Product: syz [ 2370.188306][T10810] usb 3-1: Manufacturer: syz [ 2370.205190][T10810] usb 3-1: SerialNumber: syz [ 2370.256972][T10810] usb 3-1: config 0 descriptor?? [ 2370.322750][T10810] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2370.348468][T13910] udc-core: couldn't find an available UDC or it's busy [ 2370.376269][T13910] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2370.420747][T10810] usb 3-1: selecting invalid altsetting 0 [ 2370.455785][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2370.511892][T13897] usb 6-1: USB disconnect, device number 126 [ 2370.528671][T20778] usb 3-1: USB disconnect, device number 83 [ 2370.530267][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2370.584838][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2370.618617][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2370.629235][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2370.640130][ T2087] pvrusb2: Failure uploading firmware1 [ 2370.645642][ T2087] pvrusb2: Device initialization was not successful. [ 2370.656665][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2370.678842][T20778] pvrusb2: Device being rendered inoperable [ 2371.228986][T20778] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2371.349070][T17472] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2371.609064][T17472] usb 3-1: Using ep0 maxpacket: 16 [ 2371.619806][T20778] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2371.739285][T17472] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2371.750264][T17472] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2371.763249][T17472] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2371.776888][T17472] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2371.799950][T20778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2371.809277][T20778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2371.817289][T20778] usb 6-1: Product: syz [ 2371.824929][T20778] usb 6-1: Manufacturer: syz [ 2371.830691][T20778] usb 6-1: SerialNumber: syz [ 2371.901188][T20778] usb-storage 6-1:1.0: USB Mass Storage device detected 06:36:19 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x5, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x4812, &(0x7f00000003c0)={0x0, 0x3f8c, 0x2, 0xb, 0xf1}, &(0x7f00006d6000/0x1000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x4000, @fd_index=0x9, 0x7fff, &(0x7f00000001c0), 0x0, 0x14, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) sendto$inet(r7, &(0x7f0000000440)="769d02ab73c4c4b87f88a5ddca52bdd3af7bf37bb92d25be9d4e71523fe0f94618937d8eafc64886f94977c09ba8a5326e8d80decde42bafce092c3d9274a3af47290f052af3a9f43e44f791a2fef810d18641f920ab5959769e8432fb7b732a7a60a56c0fec012f800cb776cbdeee19cc11360861f5ebb549c5c9e22577c71020824053bfb5fa932ce602170332844ff93f7efa", 0x94, 0x40, &(0x7f0000000500)={0x2, 0x4e23, @local}, 0x10) 06:36:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x9effffff00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x10) dup2(r7, r6) 06:36:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r7, r6) 06:36:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b651040201002008301020301070000000100000000a6a2258812514163000905744c000000000009"], 0x0) [ 2372.027089][T18024] usb 6-1: USB disconnect, device number 127 [ 2372.061857][T17472] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c 06:36:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xf0ffffff00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2372.106461][T17472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.151619][T17472] usb 3-1: Product: syz [ 2372.172539][T17472] usb 3-1: Manufacturer: syz [ 2372.209878][T17472] usb 3-1: config 0 descriptor?? 06:36:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2372.259022][T17472] usb 3-1: can't set config #0, error -71 [ 2372.276064][T17472] usb 3-1: USB disconnect, device number 84 06:36:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0xfffffffffffff000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2372.688956][T17472] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2372.696650][T18024] usb 6-1: new high-speed USB device number 2 using dummy_hcd 06:36:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2372.970851][T17472] usb 3-1: Using ep0 maxpacket: 16 [ 2373.240032][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2373.253824][T17472] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2373.290147][T17472] usb 3-1: can't read configurations, error -61 [ 2373.461016][T17472] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2373.478962][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2373.488060][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2373.497632][T18024] usb 6-1: Product: syz [ 2373.514201][T18024] usb 6-1: Manufacturer: syz [ 2373.519701][T18024] usb 6-1: SerialNumber: syz [ 2373.575267][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2373.718888][T17472] usb 3-1: Using ep0 maxpacket: 16 [ 2373.779892][T14124] udc-core: couldn't find an available UDC or it's busy [ 2373.786846][T14124] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2373.805030][T20778] usb 6-1: USB disconnect, device number 2 [ 2373.908885][T17472] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2373.916599][T17472] usb 3-1: can't read configurations, error -61 [ 2373.925727][T17472] usb usb3-port1: attempt power cycle [ 2374.348852][T17472] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2374.439499][T17472] usb 3-1: Using ep0 maxpacket: 16 [ 2374.588805][T10810] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2374.600124][T17472] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2374.607725][T17472] usb 3-1: can't read configurations, error -61 [ 2374.758707][T17472] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2374.848817][T17472] usb 3-1: Using ep0 maxpacket: 16 [ 2374.958755][T10810] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2375.029455][T17472] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2375.037128][T17472] usb 3-1: can't read configurations, error -61 [ 2375.045622][T17472] usb usb3-port1: unable to enumerate USB device [ 2375.128849][T10810] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2375.137930][T10810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2375.147239][T10810] usb 6-1: Product: syz [ 2375.158616][T10810] usb 6-1: Manufacturer: syz [ 2375.163238][T10810] usb 6-1: SerialNumber: syz 06:36:22 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x6, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r7, r6) 06:36:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) recvmmsg$unix(r4, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/4, 0x4}, {&(0x7f00000003c0)=""/91, 0x5b}, {&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000000500)=""/66, 0x42}, {&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000280)=""/57, 0x39}], 0x6, &(0x7f0000000700)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}], 0x1, 0x2000, &(0x7f0000000880)={r8, r9+10000000}) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000008c0)=0xd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:36:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x3e) dup2(r7, r6) 06:36:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x41) [ 2375.269071][T10810] usb 6-1: can't set config #1, error -71 [ 2375.298959][T10810] usb 6-1: USB disconnect, device number 3 06:36:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x6}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2375.608773][T20594] usb 3-1: new high-speed USB device number 89 using dummy_hcd 06:36:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x7}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2375.838777][T10810] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2375.859568][T20594] usb 3-1: Using ep0 maxpacket: 16 06:36:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x8}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2375.979589][T20594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2375.997150][T20594] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2376.014627][T20594] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2376.030014][T20594] usb 3-1: config 0 interface 0 has no altsetting 0 06:36:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xa}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x700) dup2(r7, r6) [ 2376.195071][T20594] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2376.209431][T10810] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2376.253237][T20594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2376.280996][T20594] usb 3-1: Product: syz [ 2376.287908][T20594] usb 3-1: Manufacturer: syz [ 2376.301948][T20594] usb 3-1: SerialNumber: syz [ 2376.318885][T20594] usb 3-1: config 0 descriptor?? [ 2376.361428][T20594] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2376.395684][T20594] usb 3-1: selecting invalid altsetting 0 [ 2376.418995][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2376.429386][T10810] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2376.429421][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2376.443164][T10810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2376.467298][T10810] usb 6-1: Product: syz [ 2376.479039][T10810] usb 6-1: Manufacturer: syz [ 2376.493106][T10810] usb 6-1: SerialNumber: syz [ 2376.509026][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2376.517804][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2376.573147][T20594] usb 3-1: USB disconnect, device number 89 [ 2376.589951][T10810] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2376.626354][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2376.637180][ T2087] pvrusb2: Failure uploading firmware1 [ 2376.644864][ T2087] pvrusb2: Device initialization was not successful. [ 2376.652282][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2376.663066][T20594] pvrusb2: Device being rendered inoperable [ 2376.801248][T14309] udc-core: couldn't find an available UDC or it's busy [ 2376.826990][T14309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2376.855831][T13897] usb 6-1: USB disconnect, device number 4 [ 2377.389629][T13897] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2377.628548][T13897] usb 3-1: Using ep0 maxpacket: 16 [ 2377.638922][T20778] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2377.748554][T13897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2377.759689][T13897] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2377.771733][T13897] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2377.785609][T13897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2377.949377][T13897] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2377.958516][T13897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.966520][T13897] usb 3-1: Product: syz [ 2377.972675][T13897] usb 3-1: Manufacturer: syz [ 2377.977295][T13897] usb 3-1: SerialNumber: syz [ 2377.993916][T13897] usb 3-1: config 0 descriptor?? [ 2378.009445][T20778] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2378.051183][T13897] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2378.059781][T13897] usb 3-1: selecting invalid altsetting 0 [ 2378.066148][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2378.091832][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2378.123146][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2378.132589][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2378.145655][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2378.156847][ T2087] pvrusb2: Failure uploading firmware1 [ 2378.170887][ T2087] pvrusb2: Device initialization was not successful. [ 2378.177587][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2378.179409][T20778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2378.195998][T20778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2378.204321][T20778] usb 6-1: Product: syz [ 2378.212091][T20778] usb 6-1: Manufacturer: syz [ 2378.216691][T20778] usb 6-1: SerialNumber: syz [ 2378.259592][T20778] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2378.267236][T17472] usb 3-1: USB disconnect, device number 90 [ 2378.276257][T17472] pvrusb2: Device being rendered inoperable 06:36:25 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x7, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xb}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x8001, 0x1, 0x4, 0x1f, 0x7, r1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) r7 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r7) ptrace$setopts(0x4200, 0x0, 0xffffffffffffffff, 0x100038) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x9, 0x8140, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x5, 0x401}, 0x18002, 0x4, 0x5, 0x8, 0x4, 0x5, 0x8, 0x0, 0xd7, 0x0, 0xf414}, r7, 0x4, r0, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r8, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r9, r8) 06:36:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x100000) dup2(r7, r6) 06:36:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r7, r6) 06:36:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r3, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) writev(r2, &(0x7f0000001500)=[{&(0x7f0000000100)="053400229d1efe2b6fd25748fd39f0713cb20c79cc2be9982943172588aac45066b6a01e76ed6d542bb5b9f7cdd0a8f2f9ea02616e46e4a4b0b72ce2684effdebfa65c7ce50bd9a668b2c03e5d83e37941aa277725ff6e10ac93c556a704db183452eb538f827d11f752794febef40d951c25e3b335404c2c7b639db9a2576df7b792b5c6e1344a314da51af321b035884c8ad99d4c3d3718aa9a1de56760e0c701c7fddf03158a9a66cd13f6f6b843c58adb6a1ab777afcf9919bf48402fa2cbaad9a", 0xc3}, {&(0x7f0000000200)="ae8f6bfcef6a26571df43f439a1cd0226d8464f3a5cdf8cb7b5263e86262821a6671bb9598de483b7057bf6ebfef338496ec57fbb940a55f6964b8d56bccec50ec41781fcdea5627c1640465e275f6e333feee1c55ce4706d86e04e89191ad8ea64096325bf40bc45320ed3f13f2030ff39bc197847a2028e69af65e00fffcb08bea84e1dd318b204069b3ef654203c2ce0bc0c030bb5b894224b8c8cb40f6959242466852460c0807f33dc143a6d9f08aee8b629a9d401edd73ecc4cf68f5485184d5ad1fc0d28955c334ec9fae176f344b680808d30524bc28da58b12588ba", 0xe0}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000300)="6272365cfde6de0b82eef2133bc547e12e2b8af2fad6bc6d9b365f59e5e494de832c0e8b3b47870a7cc48dc71fa1fbd475b1cd07c69be429155d440736023d26ea65e0b077141c64c39af71f2cc79bac3bb5738b204d88455d3e66d7aac26dab827890cc45b6ec", 0x67}], 0x5) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x80, 0x5, 0x7, 0x0, 0x8, 0x128, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0x10001, 0x5, 0x8, 0x1, 0x7fff, 0x2a38, 0x0, 0x4, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, r1, 0x3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r5, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000001700)=ANY=[@ANYRES32=r2, @ANYBLOB="00009192bb7e517899ecd44f9a2b5ddb11000096c6e6adec4911ee893e4140ae984cc5d56c80a517f4850207b7cfa9c0ba047e258f5a3dd64edc4193620d3e844fc60f3ec738d9e68ae909dfe416888726036d0025ce7bb4f03dfdb9a548a12656dab3dcbd35558e8b7883d742c9d4aab75a073343fb5bf048557eccdd8ef50806d66905fe965826321a2d84850ee5de72daba82da2a8d19ba632057eee22ef29ba02aece762cee65a8904b5012436414e746ceeb54de6e2be81dff0bba3f28013d2bf5aa0f79e5ab259c14f55d4617f618ad6140e16bf08dffd07334b6f76c215947573bac93b9c41530ac189b1547bfa03737c799934000a3e483e5962f362588396edcb412264eae6f59d539398673300000000", @ANYRESDEC=0x0, @ANYBLOB=':-00000000000000000032p']) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x8, 0x0) [ 2378.416201][T18024] usb 6-1: USB disconnect, device number 5 06:36:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xe}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xf}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2378.799593][T13897] usb 3-1: new high-speed USB device number 91 using dummy_hcd 06:36:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x10}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x11}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2378.998505][T18024] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2379.087026][T13897] usb 3-1: Using ep0 maxpacket: 16 06:36:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x60}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2379.236771][T13897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2379.252845][T13897] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping 06:36:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xf0}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2379.304922][T13897] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2379.358657][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2379.371220][T13897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2379.558631][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2379.567714][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2379.589147][T13897] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2379.615223][T13897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2379.625669][T18024] usb 6-1: Product: syz [ 2379.629981][T18024] usb 6-1: Manufacturer: syz [ 2379.634594][T18024] usb 6-1: SerialNumber: syz [ 2379.653095][T13897] usb 3-1: Product: syz [ 2379.657306][T13897] usb 3-1: Manufacturer: syz [ 2379.678576][T13897] usb 3-1: SerialNumber: syz [ 2379.684937][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2379.709825][T13897] usb 3-1: config 0 descriptor?? [ 2379.751443][T13897] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2379.759998][T13897] usb 3-1: selecting invalid altsetting 0 [ 2379.766646][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2379.791296][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2379.838490][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2379.859434][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2379.873518][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2379.890609][T14525] udc-core: couldn't find an available UDC or it's busy [ 2379.897584][T14525] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2379.897928][ T2087] pvrusb2: Failure uploading firmware1 [ 2379.931929][T13897] usb 6-1: USB disconnect, device number 6 [ 2379.936649][ T2087] pvrusb2: Device initialization was not successful. [ 2379.960233][T20594] usb 3-1: USB disconnect, device number 91 [ 2379.971452][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2380.010470][T20594] pvrusb2: Device being rendered inoperable [ 2380.698921][T20594] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2380.748287][T13897] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2380.988245][T13897] usb 3-1: Using ep0 maxpacket: 16 [ 2381.058427][T20594] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2381.109454][T13897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2381.120263][T13897] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2381.132925][T13897] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2381.146935][T13897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2381.238409][T20594] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2381.247513][T20594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.257450][T20594] usb 6-1: Product: syz [ 2381.262415][T20594] usb 6-1: Manufacturer: syz [ 2381.267011][T20594] usb 6-1: SerialNumber: syz [ 2381.308428][T13897] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2381.319983][T20594] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2381.327861][T13897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.344957][T13897] usb 3-1: Product: syz [ 2381.355720][T13897] usb 3-1: Manufacturer: syz [ 2381.361947][T13897] usb 3-1: SerialNumber: syz [ 2381.376179][T13897] usb 3-1: config 0 descriptor?? [ 2381.421162][T13897] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2381.430907][T13897] usb 3-1: selecting invalid altsetting 0 [ 2381.437302][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2381.449790][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2381.479044][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2381.514218][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2381.531335][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2381.532900][T14632] udc-core: couldn't find an available UDC or it's busy [ 2381.542191][ T2087] pvrusb2: Failure uploading firmware1 [ 2381.564047][T17472] usb 3-1: USB disconnect, device number 92 [ 2381.584716][ T2087] pvrusb2: Device initialization was not successful. [ 2381.600221][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2381.610494][T14632] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2381.629104][T17472] pvrusb2: Device being rendered inoperable 06:36:28 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x8, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0xffffc90000000000) dup2(r7, r6) 06:36:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x180}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0x77b, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x3ba}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop4', 0x0, 0x3) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r11, &(0x7f00000000c0), 0x0, 0x0, 0x81000, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, {0x0, r12}}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:36:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r7, r6) 06:36:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x3, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2381.664590][T18024] usb 6-1: USB disconnect, device number 7 06:36:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x300}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x500}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x600}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x700}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2382.189140][T17472] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2382.284202][T18024] usb 6-1: new high-speed USB device number 8 using dummy_hcd 06:36:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x900}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xa00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2382.448922][T17472] usb 3-1: Using ep0 maxpacket: 16 [ 2382.608583][T17472] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2382.619121][T17472] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2382.631753][T17472] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2382.645877][T17472] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2382.709500][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2382.808423][T17472] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2382.818802][T17472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.826812][T17472] usb 3-1: Product: syz [ 2382.833487][T17472] usb 3-1: Manufacturer: syz [ 2382.839510][T17472] usb 3-1: SerialNumber: syz [ 2382.845873][T17472] usb 3-1: config 0 descriptor?? [ 2382.910553][T17472] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2382.918620][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2382.928576][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.937031][T17472] usb 3-1: selecting invalid altsetting 0 [ 2382.953578][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2382.953717][T18024] usb 6-1: Product: syz [ 2382.974682][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2382.979463][T18024] usb 6-1: Manufacturer: syz [ 2382.993455][T18024] usb 6-1: SerialNumber: syz [ 2383.044173][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2383.049214][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2383.065634][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2383.104177][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2383.111283][T10810] usb 3-1: USB disconnect, device number 93 [ 2383.143245][ T2087] pvrusb2: Failure uploading firmware1 [ 2383.150818][ T2087] pvrusb2: Device initialization was not successful. [ 2383.157875][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2383.171364][T10810] pvrusb2: Device being rendered inoperable [ 2383.254093][T14678] udc-core: couldn't find an available UDC or it's busy [ 2383.262406][T14678] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2383.278541][T13897] usb 6-1: USB disconnect, device number 8 [ 2384.048000][T17472] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2384.408053][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2384.583517][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2384.593693][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.603778][T17472] usb 6-1: Product: syz [ 2384.609172][T17472] usb 6-1: Manufacturer: syz [ 2384.613777][T17472] usb 6-1: SerialNumber: syz [ 2384.659264][T17472] usb-storage 6-1:1.0: USB Mass Storage device detected 06:36:31 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x10, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xb00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:36:31 executing program 1: fork() perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_XOR={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1c8, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x81}, 0x20000005) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r4, r7) dup2(r7, r6) 06:36:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r7, r6) 06:36:31 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r1, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x7f000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2384.785579][T10810] usb 6-1: USB disconnect, device number 9 06:36:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xe00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xf00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x1100}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x3f00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x3f83}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2385.388342][T10810] usb 6-1: new high-speed USB device number 10 using dummy_hcd 06:36:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)) [ 2385.797939][T10810] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2385.862887][T20594] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2385.998121][T10810] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2386.007488][T10810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2386.016677][T10810] usb 6-1: Product: syz [ 2386.021623][T10810] usb 6-1: Manufacturer: syz [ 2386.027693][T10810] usb 6-1: SerialNumber: syz [ 2386.069238][T10810] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2386.117968][T20594] usb 3-1: Using ep0 maxpacket: 16 [ 2386.248036][T20594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2386.258396][T20594] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2386.271330][T20594] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2386.276783][T14851] udc-core: couldn't find an available UDC or it's busy [ 2386.286224][T20594] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2386.303498][T14851] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2386.323800][T10810] usb 6-1: USB disconnect, device number 10 [ 2386.477971][T20594] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2386.487103][T20594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2386.495669][T20594] usb 3-1: Product: syz [ 2386.500282][T20594] usb 3-1: Manufacturer: syz [ 2386.504917][T20594] usb 3-1: SerialNumber: syz [ 2386.516930][T20594] usb 3-1: config 0 descriptor?? [ 2386.570330][T20594] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2386.581284][T20594] usb 3-1: selecting invalid altsetting 0 [ 2386.587630][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2386.611330][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2386.635743][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2386.660336][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2386.671970][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2386.682482][ T2087] pvrusb2: Failure uploading firmware1 [ 2386.688763][ T2087] pvrusb2: Device initialization was not successful. [ 2386.695456][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2386.780810][T17472] usb 3-1: USB disconnect, device number 94 [ 2386.787248][T17472] pvrusb2: Device being rendered inoperable [ 2387.108053][T18024] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2387.467870][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2387.567863][ T6186] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2387.637845][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2387.647174][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2387.655844][T18024] usb 6-1: Product: syz [ 2387.660990][T18024] usb 6-1: Manufacturer: syz [ 2387.665804][T18024] usb 6-1: SerialNumber: syz [ 2387.709018][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2387.807859][ T6186] usb 3-1: Using ep0 maxpacket: 16 06:36:35 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x17, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000006b40)={0x4, 0x80, 0x0, 0x40, 0x80, 0x7f, 0x0, 0x7, 0x200, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x1, @perf_bp={&(0x7f0000006b00), 0x6}, 0x6, 0xfff, 0xab9, 0x5, 0x2, 0x4bb0, 0x8000, 0x0, 0x1f, 0x0, 0x2}, 0x0, 0xa, r0, 0xf) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r7, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x101400, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000280)={0x2, 0x8, 0x101, 0x8, 0x6, "7d0bd121c45a7b2f2c7d71e356f1c4efa3daa2"}) write(0xffffffffffffffff, 0x0, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) r10 = dup2(r8, r7) recvmmsg(r10, &(0x7f00000068c0)=[{{&(0x7f00000003c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/193, 0xc1}, {&(0x7f0000000540)=""/79, 0x4f}, {&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f0000000780)=""/94, 0x5e}, {&(0x7f0000000800)=""/149, 0x95}], 0x6, &(0x7f0000000940)=""/52, 0x34}, 0x567a}, {{&(0x7f0000000980)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a00)=""/78, 0x4e}, {&(0x7f0000000a80)=""/215, 0xd7}], 0x2, &(0x7f0000000bc0)=""/88, 0x58}, 0x1}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000c40)=""/143, 0x8f}, {&(0x7f0000000d00)=""/143, 0x8f}, {&(0x7f0000000dc0)=""/191, 0xbf}, {&(0x7f0000000e80)=""/228, 0xe4}, {&(0x7f0000000f80)=""/144, 0x90}, {&(0x7f0000001040)=""/107, 0x6b}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x7}, 0x40}, {{&(0x7f0000002140)=@generic, 0x80, &(0x7f00000027c0)=[{&(0x7f00000021c0)=""/225, 0xe1}, {&(0x7f00000022c0)=""/146, 0x92}, {&(0x7f0000002380)=""/160, 0xa0}, {&(0x7f0000002440)=""/159, 0x9f}, {&(0x7f0000002500)=""/173, 0xad}, {&(0x7f00000025c0)=""/195, 0xc3}, {&(0x7f00000026c0)=""/229, 0xe5}], 0x7}, 0x7f}, {{&(0x7f0000002840)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003a00)=[{&(0x7f00000028c0)=""/95, 0x5f}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/178, 0xb2}], 0x3, &(0x7f0000003a40)=""/39, 0x27}, 0xae6}, {{&(0x7f0000003a80)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003b00)=""/23, 0x17}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)=""/197, 0xc5}], 0x3, &(0x7f0000004c80)=""/4096, 0x1000}, 0xfffffffd}, {{&(0x7f0000005c80)=@tipc=@id, 0x80, &(0x7f0000006200)=[{&(0x7f0000005d00)=""/228, 0xe4}, {&(0x7f0000005e00)=""/104, 0x68}, {&(0x7f0000005e80)=""/51, 0x33}, {&(0x7f0000005ec0)=""/94, 0x5e}, {&(0x7f0000005f40)=""/17, 0x11}, {&(0x7f0000005f80)=""/113, 0x71}, {&(0x7f0000006000)=""/67, 0x43}, {&(0x7f0000006080)=""/177, 0xb1}, {&(0x7f0000006140)=""/170, 0xaa}], 0x9, &(0x7f00000062c0)=""/229, 0xe5}, 0x1}, {{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f00000063c0)=""/137, 0x89}, {&(0x7f0000006480)=""/183, 0xb7}, {&(0x7f0000006540)=""/177, 0xb1}, {&(0x7f0000006600)=""/90, 0x5a}, {&(0x7f0000006680)=""/199, 0xc7}], 0x5, &(0x7f0000006800)=""/140, 0x8c}, 0x30}], 0x8, 0x2101, &(0x7f0000006ac0)) 06:36:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x6000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) ptrace(0x10, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:36:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r7, r6) [ 2387.906686][T20594] usb 6-1: USB disconnect, device number 11 [ 2387.928504][ T6186] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2387.961205][ T6186] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping 06:36:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x833f}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2388.046880][ T6186] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2388.105993][ T6186] usb 3-1: config 0 interface 0 has no altsetting 0 06:36:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xf000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x34000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2388.288624][ T6186] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2388.298251][ T6186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2388.306264][ T6186] usb 3-1: Product: syz [ 2388.330654][ T6186] usb 3-1: Manufacturer: syz [ 2388.335296][ T6186] usb 3-1: SerialNumber: syz [ 2388.348561][ T6186] usb 3-1: config 0 descriptor?? [ 2388.390379][ T6186] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2388.422071][ T6186] usb 3-1: selecting invalid altsetting 0 [ 2388.441051][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2388.467204][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2388.477842][T20594] usb 6-1: new high-speed USB device number 12 using dummy_hcd 06:36:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x400300}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2388.582017][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. 06:36:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000040)=""/15, 0xf}, {&(0x7f0000000080)=""/226, 0xe2}], 0x3, 0x4, 0x1) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2388.640021][T21568] usb 3-1: USB disconnect, device number 95 [ 2388.656774][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2388.665969][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2388.676654][ T2087] pvrusb2: Failure uploading firmware1 [ 2388.686207][ T2087] pvrusb2: Device initialization was not successful. [ 2388.693048][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2388.702784][T21568] pvrusb2: Device being rendered inoperable 06:36:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xf0ffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2388.908842][T20594] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 06:36:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2389.138318][T20594] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2389.147402][T20594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2389.177721][T21568] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 2389.212660][T20594] usb 6-1: Product: syz [ 2389.217224][T20594] usb 6-1: Manufacturer: syz [ 2389.231585][T20594] usb 6-1: SerialNumber: syz [ 2389.303980][T20594] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2389.447715][T21568] usb 3-1: Using ep0 maxpacket: 16 [ 2389.522189][T15055] udc-core: couldn't find an available UDC or it's busy [ 2389.546311][T15055] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2389.576356][T10810] usb 6-1: USB disconnect, device number 12 [ 2389.618585][T21568] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2389.643702][T21568] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2389.689623][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2389.725653][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2389.887922][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2389.897187][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2389.907961][T21568] usb 3-1: Product: syz [ 2389.912260][T21568] usb 3-1: Manufacturer: syz [ 2389.919768][T21568] usb 3-1: SerialNumber: syz [ 2389.926044][T21568] usb 3-1: config 0 descriptor?? [ 2389.980329][T21568] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2389.993609][T21568] usb 3-1: selecting invalid altsetting 0 [ 2390.001637][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2390.019204][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2390.046464][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2390.056171][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2390.067350][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2390.085529][ T2087] pvrusb2: Failure uploading firmware1 [ 2390.092118][ T2087] pvrusb2: Device initialization was not successful. [ 2390.099957][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2390.184921][T10810] usb 3-1: USB disconnect, device number 96 [ 2390.192264][T10810] pvrusb2: Device being rendered inoperable [ 2390.369773][T18024] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2390.758690][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2390.951911][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2390.961190][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2390.970677][T18024] usb 6-1: Product: syz [ 2390.974927][T18024] usb 6-1: Manufacturer: syz [ 2390.981044][T18024] usb 6-1: SerialNumber: syz 06:36:38 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(0xffffffffffffffff, r6) 06:36:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000440)={0x8000, 0x100, {r0}, {0xee01}, 0x7f, 0xffffffff80000000}) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000480)={{0x1, r4, 0xee00, 0xee01, 0xffffffffffffffff, 0x10, 0x3}, 0x0, 0x0, 0x1, 0xfff, 0xffffffff, 0x1, 0x1000, 0x2, 0x300, 0x9, r5, 0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r8, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r9, r8) 06:36:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) syz_io_uring_setup(0x584a, &(0x7f00000003c0)={0x0, 0xd54a, 0x2, 0x3, 0x262}, &(0x7f00006d6000/0x8000)=nil, &(0x7f00006da000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000280)) dup2(r7, r6) 06:36:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fe251a84de5925276c6aca900"], 0x0) [ 2391.050370][T18024] usb 6-1: can't set config #1, error -71 [ 2391.088587][T18024] usb 6-1: USB disconnect, device number 13 06:36:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x4000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x5000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2391.417713][T21568] usb 3-1: new high-speed USB device number 97 using dummy_hcd 06:36:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x6000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x7000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2391.658415][T18024] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2391.668945][T21568] usb 3-1: Using ep0 maxpacket: 16 06:36:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x8000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2391.788400][T21568] usb 3-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config [ 2391.806872][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2391.845281][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2392.041263][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2392.063301][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.078378][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2392.098368][T21568] usb 3-1: Product: syz [ 2392.103268][T21568] usb 3-1: Manufacturer: syz [ 2392.120772][T21568] usb 3-1: SerialNumber: syz [ 2392.134137][T21568] usb 3-1: config 0 descriptor?? [ 2392.288526][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2392.298017][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2392.306202][T18024] usb 6-1: Product: syz [ 2392.310892][T18024] usb 6-1: Manufacturer: syz [ 2392.315887][T18024] usb 6-1: SerialNumber: syz [ 2392.388922][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2392.419769][T21568] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2392.428331][T21568] usb 3-1: selecting invalid altsetting 0 [ 2392.434612][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2392.462589][T21568] usb 3-1: USB disconnect, device number 97 [ 2392.468197][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2392.528212][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2392.546537][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2392.555928][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2392.566534][ T2087] pvrusb2: Failure uploading firmware1 [ 2392.574575][ T2087] pvrusb2: Device initialization was not successful. [ 2392.600269][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2392.611563][T15251] udc-core: couldn't find an available UDC or it's busy [ 2392.611648][T21568] pvrusb2: Device being rendered inoperable [ 2392.623075][T15251] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2392.643233][T18024] usb 6-1: USB disconnect, device number 14 [ 2393.167365][T21568] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2393.407273][T21568] usb 3-1: Using ep0 maxpacket: 16 [ 2393.417819][T20594] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2393.527467][T21568] usb 3-1: config 0 has an invalid descriptor of length 168, skipping remainder of the config [ 2393.538147][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2393.552721][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2393.719218][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2393.728507][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.736556][T21568] usb 3-1: Product: syz [ 2393.742025][T21568] usb 3-1: Manufacturer: syz [ 2393.746975][T21568] usb 3-1: SerialNumber: syz [ 2393.754025][T21568] usb 3-1: config 0 descriptor?? [ 2393.779989][T20594] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2393.947363][T20594] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2393.956499][T20594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.972003][T20594] usb 6-1: Product: syz [ 2393.976172][T20594] usb 6-1: Manufacturer: syz [ 2393.982505][T20594] usb 6-1: SerialNumber: syz [ 2394.028504][T20594] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2394.046939][T21568] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2394.060796][T21568] usb 3-1: selecting invalid altsetting 0 [ 2394.073272][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2394.114188][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2394.129630][T21568] usb 3-1: USB disconnect, device number 98 06:36:41 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x9000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_dev$rtc(&(0x7f00000001c0), 0x0, 0x10900) mmap(&(0x7f00006d5000/0x4000)=nil, 0x4000, 0x4, 0x10, r1, 0x7cc0f000) r2 = syz_io_uring_setup(0x66d, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e22}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r8, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 06:36:41 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4002040}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@getroute={0x14, 0x1a, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x108) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x7fffffff, 0x4080) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x41c2, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x0, 0x0, r1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x2370, 0xb212, 0x0, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r8, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r9, r8) 06:36:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(0xffffffffffffffff, r6) 06:36:41 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0x9e0000, 0x7f, 0x7fff, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x980910, 0x8, '\x00', @p_u16=&(0x7f0000000040)=0x7}}) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2394.221103][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2394.228995][T18024] usb 6-1: USB disconnect, device number 15 [ 2394.240322][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2394.313564][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2394.365580][ T2087] pvrusb2: Failure uploading firmware1 [ 2394.386055][ T2087] pvrusb2: Device initialization was not successful. 06:36:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xa000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2394.428120][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2394.467915][T21568] pvrusb2: Device being rendered inoperable 06:36:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xb000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xe000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xf000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2394.837607][T21568] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 2394.857883][T18024] usb 6-1: new high-speed USB device number 16 using dummy_hcd 06:36:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x10000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2395.087290][T21568] usb 3-1: Using ep0 maxpacket: 16 06:36:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x11000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2395.208888][T21568] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2395.225642][T21568] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2395.238794][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2395.275162][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2395.309114][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2395.494513][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2395.508588][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2395.514280][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2395.534965][T21568] usb 3-1: Product: syz [ 2395.549021][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2395.551039][T21568] usb 3-1: Manufacturer: syz [ 2395.573161][T21568] usb 3-1: SerialNumber: syz [ 2395.601338][T21568] usb 3-1: config 0 descriptor?? [ 2395.617259][T18024] usb 6-1: Product: syz [ 2395.621504][T18024] usb 6-1: Manufacturer: syz [ 2395.626117][T18024] usb 6-1: SerialNumber: syz [ 2395.655822][T21568] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2395.709644][T21568] usb 3-1: selecting invalid altsetting 0 [ 2395.716244][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2395.749345][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2395.756831][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2395.878351][T21568] usb 3-1: USB disconnect, device number 99 [ 2395.906051][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2395.956327][T15409] udc-core: couldn't find an available UDC or it's busy [ 2395.986143][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2395.990384][T15409] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2396.034475][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2396.062036][T18024] usb 6-1: USB disconnect, device number 16 [ 2396.101982][ T2087] pvrusb2: Failure uploading firmware1 [ 2396.130886][ T2087] pvrusb2: Device initialization was not successful. [ 2396.146126][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2396.156405][T21568] pvrusb2: Device being rendered inoperable [ 2396.727133][T21568] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2396.857373][T18024] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2396.967069][T21568] usb 3-1: Using ep0 maxpacket: 16 [ 2397.087518][T21568] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2397.098129][T21568] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2397.110715][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2397.124442][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2397.268000][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2397.293266][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2397.302438][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2397.312260][T21568] usb 3-1: Product: syz [ 2397.316453][T21568] usb 3-1: Manufacturer: syz [ 2397.322864][T21568] usb 3-1: SerialNumber: syz [ 2397.334284][T21568] usb 3-1: config 0 descriptor?? [ 2397.407224][T21568] usb 3-1: can't set config #0, error -71 [ 2397.416128][T21568] usb 3-1: USB disconnect, device number 100 06:36:44 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x3f000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(0xffffffffffffffff, r6) 06:36:44 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xb0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000540)={r0, 0x81, 0xf2, 0x655}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r7, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48001, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r6, 0x0, 0x0, 0x3, 0x4, 0x1, {0x0, 0x0, r8}}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r9, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r9, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r10, r9) 06:36:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x23}, 0x0, 0x0, 0x0, 0x7, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x400000, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/124, 0x7c}], 0x1) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r8 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r8) ptrace$setopts(0x4206, r8, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x4, 0xf7f, 0x1, 0x17, 0x14e3b9f3, r8}) dup2(r7, r6) 06:36:44 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803946fa9000905008a953bc1cf9d74"], 0x0) 06:36:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x60000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2397.591489][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2397.614029][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2397.640446][T18024] usb 6-1: Product: syz 06:36:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x80010000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2397.687105][T18024] usb 6-1: can't set config #1, error -71 [ 2397.702161][T18024] usb 6-1: USB disconnect, device number 17 06:36:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x833f0000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x9effffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2397.950538][T21568] usb 3-1: new high-speed USB device number 101 using dummy_hcd 06:36:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xf0ffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) syz_open_procfs(r0, &(0x7f00000001c0)='smaps_rollup\x00') io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) [ 2398.098905][T18024] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2398.229123][T21568] usb 3-1: Using ep0 maxpacket: 16 [ 2398.349421][T21568] usb 3-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 2398.372420][T21568] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2398.404314][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2398.420465][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2398.527893][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2398.602648][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2398.612560][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2398.628843][T21568] usb 3-1: Product: syz [ 2398.633033][T21568] usb 3-1: Manufacturer: syz [ 2398.641282][T21568] usb 3-1: SerialNumber: syz [ 2398.656726][T21568] usb 3-1: config 0 descriptor?? [ 2398.688755][T15552] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2398.709463][T21568] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2398.735409][T21568] usb 3-1: selecting invalid altsetting 0 [ 2398.774897][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2398.785496][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2398.795952][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2398.807465][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2398.816018][T18024] usb 6-1: Product: syz [ 2398.831173][T18024] usb 6-1: Manufacturer: syz [ 2398.836002][T18024] usb 6-1: SerialNumber: syz [ 2398.852888][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2398.863520][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2398.876019][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2398.895959][ T2087] pvrusb2: Failure uploading firmware1 [ 2398.905867][ T2087] pvrusb2: Device initialization was not successful. [ 2398.928060][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2398.945212][ T6186] usb 3-1: USB disconnect, device number 101 [ 2398.973193][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2398.995089][ T6186] pvrusb2: Device being rendered inoperable [ 2399.141871][T15556] udc-core: couldn't find an available UDC or it's busy [ 2399.148946][T15556] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2399.163327][T21568] usb 6-1: USB disconnect, device number 18 [ 2399.727018][T21568] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 2399.936958][T13897] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2399.966846][T21568] usb 3-1: Using ep0 maxpacket: 16 [ 2400.087735][T21568] usb 3-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 2400.098262][T21568] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2400.110087][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2400.124224][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2400.287014][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2400.296524][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2400.306262][T13897] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2400.319289][T21568] usb 3-1: Product: syz [ 2400.323445][T21568] usb 3-1: Manufacturer: syz [ 2400.330898][T21568] usb 3-1: SerialNumber: syz [ 2400.342421][T21568] usb 3-1: config 0 descriptor?? [ 2400.369232][T15883] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 2400.389481][T21568] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2400.398710][T21568] usb 3-1: selecting invalid altsetting 0 [ 2400.405118][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2400.429338][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2400.465100][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2400.481654][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2400.487547][T13897] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2400.497521][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2400.519833][T13897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2400.520458][ T2087] pvrusb2: Failure uploading firmware1 [ 2400.534972][ T2087] pvrusb2: Device initialization was not successful. [ 2400.536916][T13897] usb 6-1: Product: syz [ 2400.559258][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2400.567557][T13897] usb 6-1: Manufacturer: syz 06:36:47 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x5, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xfffff000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) r8 = dup2(r7, r6) syz_io_uring_setup(0x600c, &(0x7f00000003c0)={0x0, 0x7f2c, 0x4, 0x2, 0xdd}, &(0x7f00006d6000/0x3000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000280)) r10 = mmap$IORING_OFF_SQES(&(0x7f00006d4000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, r8, 0x10000000) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r11, 0x80, &(0x7f0000000440)=@ipx={0x4, 0x1352, 0x7ff, "4802a9dfa5c4"}}, 0x9) 06:36:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r6, 0xffffffffffffffff) 06:36:47 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x3, 0x80, 0x4, 0x80, 0x0, 0x4, 0xa0040, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x6}, 0x0, 0x0, 0x1, 0x4, 0xa06, 0x26d3, 0x6, 0x0, 0x20, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x8) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x1, 0x16, 0x1f, 0xff, 0x0, 0x9, 0x40, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x3, 0x4}, 0x2, 0x80000001, 0x80000001, 0x3, 0x1f, 0x9, 0x200, 0x0, 0x7ff, 0x0, 0xfffffffeffffffff}, r1, 0x9, 0xffffffffffffffff, 0xb) tkill(r0, 0x38) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2cc}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd_index=0x6, 0x200, &(0x7f0000000280)=""/16, 0x10, 0x1e}, 0x800) write(0xffffffffffffffff, &(0x7f00000005c0)="2400fffbf3bf28adfe76b877b61798478e30484910d63bfdcccae57f284753894694f4ab234f78479a7d8d1924a5079f826655d4c7db08272df1285531db2d604c76afd2269d162e83edb81c180ea3420d353b6ca957159c42200488a80cfee374656f0918a814b54c3173b4037b6a19e0ac43e4e7a6e6d06c80dc06132668241106297d563a2276c30ae06b19bd6b40cde6ced44de770b97c3ca28a3299d32c30f4d0f3318313733acfaa42a3239682e02f6cf874a082a394a8dcfc1245512c2d3ad7f2ef", 0xffffffffffffff9d) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) [ 2400.596831][T13897] usb 6-1: SerialNumber: syz [ 2400.656226][T21568] usb 3-1: USB disconnect, device number 102 [ 2400.674207][T13897] usb 6-1: can't set config #1, error -71 [ 2400.681800][T21568] pvrusb2: Device being rendered inoperable [ 2400.719811][T13897] usb 6-1: USB disconnect, device number 19 06:36:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xffffff7f}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:47 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x34002, 0x140) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000002c0)=""/101) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r4, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) dup3(r0, r3, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@private0, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x28c0060, &(0x7f0000000440)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r5, @ANYBLOB=',s$ype=*[-&,\x00\x00']) r6 = getuid() r7 = getgid() lchown(&(0x7f0000000140)='./file0\x00', r6, r7) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {}, [{0x2, 0x5, 0xffffffffffffffff}, {0x2, 0x0, r5}], {0x4, 0x2}, [{0x8, 0xa, r7}], {0x10, 0x2}, {0x20, 0x3}}, 0x3c, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000500)=ANY=[], 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x144) 06:36:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xfffffff0}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x1000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2401.177715][T13897] usb 6-1: new high-speed USB device number 20 using dummy_hcd 06:36:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x40030000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xf0ffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2401.276749][ T6186] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 2401.533544][ T6186] usb 3-1: device descriptor read/64, error 18 [ 2401.556802][T13897] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2401.717639][T13897] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2401.726804][T13897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2401.734781][T13897] usb 6-1: Product: syz [ 2401.740396][T13897] usb 6-1: Manufacturer: syz [ 2401.744985][T13897] usb 6-1: SerialNumber: syz [ 2401.787980][T13897] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2401.820158][ T6186] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 2401.993116][T15917] udc-core: couldn't find an available UDC or it's busy [ 2402.001197][T15917] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2402.020357][T17472] usb 6-1: USB disconnect, device number 20 [ 2402.046168][ T6186] usb 3-1: device descriptor read/64, error 18 [ 2402.167758][ T6186] usb usb3-port1: attempt power cycle [ 2402.576675][ T6186] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 2402.766864][ T6186] usb 3-1: device descriptor read/8, error -61 [ 2402.796594][T13897] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2403.036717][ T6186] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 2403.167525][T13897] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2403.216670][ T6186] usb 3-1: device descriptor read/8, error -61 [ 2403.336887][ T6186] usb usb3-port1: unable to enumerate USB device [ 2403.345472][T13897] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2403.354549][T13897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2403.364248][T13897] usb 6-1: Product: syz [ 2403.369148][T13897] usb 6-1: Manufacturer: syz [ 2403.373760][T13897] usb 6-1: SerialNumber: syz [ 2403.418035][T13897] usb-storage 6-1:1.0: USB Mass Storage device detected 06:36:50 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x6, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x100000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0)={0x0, 0x2, 0x10, 0x4, 0x141}, &(0x7f00006d9000/0x1000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) syz_open_dev$midi(&(0x7f00000001c0), 0x3fd0, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="210f00000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x1, 0x1}, 0x3) dup2(r7, r1) 06:36:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r6, 0xffffffffffffffff) 06:36:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0)={0x0, 0x4d1e, 0x1, 0x0, 0x331}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r9, 0x0) preadv(r9, &(0x7f0000000280), 0x18, 0xd9f, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9d, 0xfe, 0x4, 0x18, 0x0, 0xfffffffffffffb5f, 0x10, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x2098, 0x0, 0x3, 0x0, 0x9, 0xffffffff, 0x800, 0x0, 0x7fff, 0x0, 0x9}, r8, 0x1, r9, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) [ 2403.619449][T16015] udc-core: couldn't find an available UDC or it's busy [ 2403.626665][T16015] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2403.646908][T21568] usb 6-1: USB disconnect, device number 21 06:36:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) 06:36:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x300000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x400000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x500000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x600000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2404.176759][T21568] usb 6-1: new high-speed USB device number 22 using dummy_hcd 06:36:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r6, 0xffffffffffffffff) [ 2404.377354][ T6186] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 2404.577460][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2404.616662][ T6186] usb 3-1: Using ep0 maxpacket: 16 [ 2404.736578][ T6186] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2404.746888][ T6186] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2404.759457][ T6186] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2404.767317][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2404.774912][ T6186] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2404.789333][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2404.797921][T21568] usb 6-1: Product: syz [ 2404.802258][T21568] usb 6-1: Manufacturer: syz [ 2404.807142][T21568] usb 6-1: SerialNumber: syz [ 2404.867640][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2404.947387][ T6186] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2404.956730][ T6186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2404.964729][ T6186] usb 3-1: Product: syz [ 2404.970040][ T6186] usb 3-1: Manufacturer: syz [ 2404.974696][ T6186] usb 3-1: SerialNumber: syz [ 2404.985851][ T6186] usb 3-1: config 0 descriptor?? [ 2405.039014][ T6186] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2405.047256][ T6186] usb 3-1: selecting invalid altsetting 0 [ 2405.053531][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2405.076841][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2405.083648][T16042] udc-core: couldn't find an available UDC or it's busy [ 2405.101711][T16042] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2405.121867][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2405.133529][T20778] usb 6-1: USB disconnect, device number 22 [ 2405.158219][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2405.184197][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2405.195384][ T2087] pvrusb2: Failure uploading firmware1 [ 2405.202403][ T2087] pvrusb2: Device initialization was not successful. [ 2405.210320][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2405.242213][ T6186] usb 3-1: USB disconnect, device number 107 [ 2405.249126][ T6186] pvrusb2: Device being rendered inoperable [ 2405.667998][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.674332][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.926523][ T6186] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2406.307206][ T6186] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2406.486554][ T6186] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2406.495636][ T6186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2406.504958][ T6186] usb 6-1: Product: syz [ 2406.510004][ T6186] usb 6-1: Manufacturer: syz [ 2406.514633][ T6186] usb 6-1: SerialNumber: syz [ 2406.557724][ T6186] usb-storage 6-1:1.0: USB Mass Storage device detected 06:36:53 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x8, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x700000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r6, r5) 06:36:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r6, 0x0) recvmsg$unix(r6, &(0x7f0000000700)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)=""/224, 0xe0}, {&(0x7f0000000540)=""/69, 0x45}, {&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f00000005c0)=""/170, 0xaa}], 0x4, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x20002001) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r7, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:36:53 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) r6 = dup2(r5, r4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r7}}, 0x3f) 06:36:53 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000040)={@id={0x2, 0x0, @a}}) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000079090025bfe4dd752c830102030109022d0001000000000904000603996fa90009050040000000000009c540eb752549fa1f7aaddefebb63203564803b0a98d2f40d0bd5f8fd63b870caec0235c5c0d3a62da6023d1f000000000000008d517988059149858d1d2c51572355be745e383816d302ddab6128ff862d8c77aa"], 0x0) [ 2406.776013][T20778] usb 6-1: USB disconnect, device number 23 06:36:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x800000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x900000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xa00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2407.157242][T20594] usb 3-1: new high-speed USB device number 108 using dummy_hcd 06:36:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xb00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xe00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xf00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2407.366235][T20594] usb 3-1: device descriptor read/64, error 18 [ 2407.396259][T20778] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2407.637192][T20594] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 2407.788153][T20778] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2407.827316][T20594] usb 3-1: device descriptor read/64, error 18 [ 2407.946768][T20594] usb usb3-port1: attempt power cycle [ 2408.007045][T20778] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2408.024428][T20778] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2408.042416][T20778] usb 6-1: Product: syz [ 2408.051389][T20778] usb 6-1: Manufacturer: syz [ 2408.060764][T20778] usb 6-1: SerialNumber: syz [ 2408.120902][T20778] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2408.329716][T16142] udc-core: couldn't find an available UDC or it's busy [ 2408.341513][T16142] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2408.360388][T20594] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 2408.400996][T21568] usb 6-1: USB disconnect, device number 24 [ 2408.457265][T20594] usb 3-1: Invalid ep0 maxpacket: 37 [ 2408.606186][T20594] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 2408.696990][T20594] usb 3-1: Invalid ep0 maxpacket: 37 [ 2408.703369][T20594] usb usb3-port1: unable to enumerate USB device [ 2409.146100][ T6186] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2409.506193][ T6186] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2409.676919][ T6186] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2409.686157][ T6186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2409.694174][ T6186] usb 6-1: Product: syz [ 2409.700082][ T6186] usb 6-1: Manufacturer: syz [ 2409.704687][ T6186] usb 6-1: SerialNumber: syz [ 2409.757323][ T6186] usb-storage 6-1:1.0: USB Mass Storage device detected 06:36:57 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x10, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:36:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r6, r5) 06:36:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x1000000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x8, &(0x7f00000003c0)=""/206) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r8 = syz_open_procfs(r0, &(0x7f00000001c0)='task\x00') mq_notify(r8, &(0x7f0000000280)={0x0, 0x38, 0x2, @tid=r0}) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:36:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/87, 0x57}, {&(0x7f00000001c0)=""/50, 0x32}], 0x2, 0x4, 0x800) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r7, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) r9 = getuid() r10 = getgid() lchown(&(0x7f0000000140)='./file0\x00', r9, r10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006480)=[{{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="d85f97dd7f0cfc7255b754fb72a7cc785f14ac4c8269b26f814f1c5f8f6b2ff9e5d38c88939dbb60520688a5a4ae8cc1db5653527c52920c973da0830fe4a85f1e73057d212a68885baca14b173fac1b1f8e8f14e727ddde10084dbdffa40ac4affe974e38075fe8a34d158e08482ff5", 0x70}, {&(0x7f0000001580)="f174f8a61de2687fa930ff0e0ad3f4747f89017be342752119643c976ead2786b01dcbb082a58cef7daa1562f9ce0204bcbe9c3afd8dbb79c6b44b3c91003a498df7c769417027269f89983014560d69fa4d4dc81d95ad2833c94572e32255f5e1b3c676ee8a6a5d1841b1311417e2db689df12212cc2e959721a09f8476a9424542f0b4e8c27ef3808f388f38cdb54eaa5fa5e938a2e2f16a1bb28a5a5f7c3eb1f83feb590712536171633bc37ab585fdc4feff2628e6d9b4ec2efdaafc85454fe3", 0xc2}, {&(0x7f0000001680)}, {&(0x7f00000016c0)="5dfe757434b93dc962b41730e0fa2e8d0d76c9788f69a3040b8af454cc191863d58826", 0x23}, {&(0x7f0000001700)="9adc3bfbbd58ffaa8dcd032b593e76b714b0040c0a7e3a2c1ec9863ad3e3837d06d8a82d698dbdd519ccd4eb34cbd33011c7576dd99e00b1d0af1e5401b222f50bc3c6db3a2568fbcb42ea17fb8cdfb39eb2eb61c1", 0x55}], 0x6, &(0x7f0000001fc0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r7, r7, r6, r7, 0xffffffffffffffff, r8, r8]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r5, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r7, r5]}}], 0x108, 0x8088}}, {{&(0x7f0000002100)=@file={0x0, '.\x00'}, 0x6e, &(0x7f0000002280)=[{&(0x7f0000002180)="64c799562c590ff6ac49396fc3a0848225f64af6e6d8bea227e3c22d92ceb3a741dbc4975375e6f70468ea2f9e68bbec7ee3994c21c461c07d473ca2cf96020410bf2f", 0x43}, {&(0x7f0000002200)="51078ac9f8db601d55af51cc67745c2c7e2b4c4a460a1ab32f161a25aec10a729a1d856aa9718ac42858e8ab956c3ac298cd992eccefc203aa0dda00fe083bcbc6880f6e7f25f128b834", 0x4a}], 0x2, 0x0, 0x0, 0x4000004}}, {{&(0x7f00000022c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002680)=[{&(0x7f0000002340)="75b6948d0ed54ef92e9fbc30c205f747cba6eba5040781bf4bb10c9ecbcaecb3f821e841028b9e5040f3d8a9b4d7ee11aa69714c70c39f148b1e0123276913a83eb44b5fd5cbe95c0c", 0x49}, {&(0x7f00000023c0)="8e7f8942f28af72f53073086de8c3cbd2164cbdb9d75e334b1db86c081bc03fe2c4cb5583dcba21a79fa3bf91780891d79110fc265171790181403c69c70be1a96bced096879a256bd8dbbdd78f3aab679cc05922dcf497511c654560707650775d24fabfde4393504f3065b93927f907b2ebbe27f5543d898498418a564bfb26872c00a305b8c72c38190829d607c1dc2e9d225fb0feab468d15f6eafcba4dd57e302868092c62370be87c3b323b9d6070933cb9f727ee077057cd4a9c89393c72767a49ff33f428539576d9ce99bdac89f605d665abf4d70fcfbb937ed853287159199a92657478d7380a91a387ea54163c3e138df5a69", 0xf8}, {&(0x7f00000024c0)="661eea686d529c4598c56eb0f93deb658718bde9e8ae2ff33e49eb8fb6ca09891e", 0x21}, {&(0x7f0000002500)="0898c1c4d368a27f1843c95ddda190a2cf3fb6eb303e807a14c521f298ace1de35e635018a90c307886805c987a126337f0decea2e860cb06556b536aab201403726666e49f6f569a0a16ad54b025041d4ca1656d2d1f42e301bdcb2a8837755ad2349e162245a19db2c0e2f7b1c0e4eee51d12ead8914f4d89387e351ffe49d1fec58ecd635ba3fbb73b22266f878c4803e7439b2d84dfa3b7f9d3cb210fe6ac4f0ba394ae5c42040eae99f9a591471051e8c50c08c4a88ab7c48d22407cab68a9dcc496e376759c7883cc383", 0xcd}, {&(0x7f0000002600)="ab24afcec559f34803c90be9107c8a25b5fe6235360300245681980e4beaa2b47b2006e6ba4f59fcbfce8ce59426d5edaceda576bfe4359093be4bc8d4cf613f98d38574bcf551e482a3e21a9ed0793a56a72dc79699afcdebd864367db6ad04059efadd3f3fdc23dc535161d5", 0x6d}], 0x5, &(0x7f00000027c0)=[@rights={{0x20, 0x1, 0x1, [r0, r5, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x40}}, {{&(0x7f0000002800)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000002880)="b2f44706ed99b7eb03826ee9616c1b8170bea1b2d61a5fa482ee15758fafbe443b4bb5a9accf1121705b9759e082b6ffed9d97b40b4623edc622e97f95ea3c308370c03cc74761d8f081a26129613a53a09c8b87e65d241d5542d1a5f4da6d70c0b457bc365a370393b530a5a54969904c3d04e0ff4bc939b47eb67e0fbf0528044b7bf10a92094a26598aa37696e871ab80270ec1ed0635aa818c09887152422eed5cd2086a07077460a8dcacd01f8795d1f823eb72e8490c03ba63be1abc22c1380426baacf9903907e95febedbf8817fd8dae30fab88407186cfd8bf9ff6c5ce1ce391ea85ffe8023342ad3277b30f3a5712e58c3", 0xf6}, {&(0x7f0000002980)="4d2884affa65a8132bcc3f0d81974c00d1be6a4a384decee41837ade491900a6258f957155195047da1a0b051dd43c9df97234cc292881bf7280a951089641b6b035327c4aa4150abedddb0a14b07af24ca815ebae", 0x55}], 0x2, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r7, r7, r8, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x2c, 0x1, 0x1, [r5, 0xffffffffffffffff, r5, r5, r5, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0xf0, 0x48000}}, {{&(0x7f0000002dc0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000002e40)="17941c98939acfea215b7534beb7bc5a211e318718849e85a4cd0db44e8dc8779d5e13fae5102578bc2600cb3627a675ac767b54a3b0778936bf39d7f2738a2efa4c5a7d3558357f498f0db05b56de07d2d582253a742018cd2776ffcb096cb921b1f68b4fd482b70f1b85c3441fe65efd18f27352c47110ac0077275e69c9e10210983565a49f51860cac9e1318fc742e7fe46c6882181516935d3db34537bbf207844093ddc4db434503fd9fe8ba5856736770d32f632a74261effff3c29bea0a309ef37ef915c63080d4bfbe9c80d456313782de2a6756e37cc3bf9", 0xdd}, {&(0x7f0000002f40)="3f078d208a85acf7e4c8136dfc719b70b60d7c11ecaa5d4ee359f36720b6dd72fd3a345fa9021ce266c4f5cc8a9ac372b2ffaa0de201a99cf7d3ff007c503ab9e6d8c9757f7365", 0x47}, {&(0x7f0000002fc0)="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", 0xfa}, {&(0x7f00000030c0)="96c8ef2d83e1b67d644a517bce21acf9ccb2087d6bf08a9a86cc10b74abf56c4ddb7ffc17e8d27e5a5884426840393af0687fd22a0c567b8023784e48c2cdf791689f81b71e5f983c0a5feee42406dcef98bdd435d8f146fb097e7b6a37db7c2e35377dce409bc28e7edb75456837d24238a6656138a6da805fb709b70c3fa36366c8ae911945e2a28efcbdc2d7a022321c10b49c7a8d10d8cae4bec2d3745f620", 0xa1}], 0x4, &(0x7f00000034c0)=[@rights={{0x30, 0x1, 0x1, [r0, r5, 0xffffffffffffffff, 0xffffffffffffffff, r0, r7, 0xffffffffffffffff, r5]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r5, r5, r2, r7, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r8]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x118, 0x20000080}}, {{&(0x7f0000003600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004940)=[{&(0x7f0000003680)="ddc32305b7ca2bba3ee2cbb58ad1994462c5ece4a5b54c770d98899c489e156378c53a5d027c06df4cd509ae550c4bc4a7462eb2769583a638b5b33eecaac6ec282d47684d154b0c7b1dad512e1d2d626ac861c10d446b274da72ecc47f76c99e48f9fffffb6021151363eae1033577a04c9dd8e7bc8db88947e9e21d362eafc7962d56bd122c2be14b63324ab7cfdfabad55c70492a14218dd6e3e6fb", 0x9d}, {&(0x7f0000003740)="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", 0x1000}, {&(0x7f0000004740)="0099c2581366cf5523727469c249172ea255a4975b85a19f29ab45e60203378da06307aa0caa7e2b8506edacedfe52544595e600481b8a0dc4d520cfef87683e0c1a7e737d6494b696cf8df66d1e05a1272632e68fe47805c0a075abd5", 0x5d}, {&(0x7f00000047c0)="c45345514944d9d6b41acc9791bdead46c060e7f5d561995b2c200deff842dc1a1f8a52a725d0016d09f143669e474984111636a2ae57895f0906e42231a8ca925ea2bb404489e1f87d14ed1867ce7628a13", 0x52}, {&(0x7f0000004840)="1d22164b9bbabf05936e32f8fa32587e2f9bfbe98c5ba0f61bfda9bfc6ba9b6e47bf6b09d671746b64a660185ff70e73940c50d46e81e3c3cab870a0a152128ab4b33fb6725464eea46005509c4249f33719ddca78b34b28921e30b1d2f1ddcbf51dbb225bd659787db09ce54c5cd080e980dce1156b0a9df9bfab7447ec72e439c149cc35a93390206245f8d8b86bc3123193f3257dddaf29a551df36ff8248baeb", 0xa2}, {&(0x7f0000004900)="5b0dc90efe64f9cfdec7ee50d8709423300c604a51a2f1e1736b9b72edff7ed9ed0e93a1d37fa2cb2d7019972d962c7d7d27096a5e0dc524a5f5", 0x3a}], 0x6, &(0x7f00000049c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x58, 0x4000}}, {{&(0x7f0000004a40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000006140)=[{&(0x7f0000004ac0)="1e2cc21d4fb4593460c86ec6a5b94af2d6ea92ab2ef9d1c6051a51f324e3eb70bcff2fea3ec87c6c668f1b1dcff4f949f983ed5dbd54dece3b2a1e61d5f57cca89b59b75dd49d44b57aa5d4a47302306611897b501b286903b2ec3c9072049f73d82c43def983cf9c585ad469b977c933d0a9e810a649c2fa39fd0d86c84551a68c8dacb37c237f942736c16684133316706468f6d9c03a8d9cdc4bf9bada67a59f3c1c9fc6861ac1ee755d2db1202c8ac7d2c5485019b6923e717433d74fd91667c701afa677917e0a0c6bc716f01741365a8fe5195d1936b430f0dd793dd03e5", 0xe1}, {&(0x7f0000004bc0)="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", 0x1000}, {&(0x7f0000005bc0)="e7a29ff10a860ea0e6051293f03e4d43b3910af2a2c8fc215581be7f22ae09fd09c02166ad92e2ec624154be5bba6d8e7126908e037dbaaa05443f28458e48a01359704e624e53f6f1871c1007167cf6bf62473db86e9c0c9a02275b2418539e058d11888abcd972bb385778a2d187cc67057f8799587e032e569ad754cea7a444b3cc14160b25", 0x87}, {&(0x7f0000005c80)="23224aedfc76451d4ce8ce7c5aad09a40bbdf918ab47840ef0c7a170673043f0970d1c8767991ea113227b2cd09ce74a7c25c1d8e9c827ab2ba64e203e", 0x3d}, {&(0x7f0000005cc0)="1351792ef0922827c2ad086fa1022551e57d7a4fb4a41e31572b7743a298a706a92e69b0578fd4f61fa3d04d0e92d3bfdd9ec20074386be22fb628759c10dd06f6e35349cb4475368b993d4e8ae3bf5a3b7210de1959dd6faa5c6eafb88dc347aa9e58d4dab332e49c5799a58ac57c7d42a38d06221039b90968bf8978f48f6b2b33e2f65a86fb3a1cec63af60f2211e233854afc5697acd05a023bee51637ca5b8dc9612344ff2c5d0f43a9a89ad313d280f8814d621352948f650684174747d19c30d76e3084d2c7e350dab0e31bb9dd9713cbd14ab911", 0xd8}, {&(0x7f0000005dc0)="0e887458eb45e584ae332484feca72d72dc2f0fba673e90f7df415d19dd12cf793095c8809fcd4ab22bce1cdf2f50658d8b498747323e8d344a4960a4ad41cee54f8738aa4a8c471155949a20da59698efd64680143c65525b37443e5e133dab8df7ca9010a2f1638c7d5aa6c5d3afc74111be6406d7ceadefe5a90f12dedbecc2c1c49bb338d19da733f36e8b1fc51c2dea902523295523a01dfa57a1bff822cd18d20a17c3a71dd057bc025fca806f03ec5553915dc51e0f7d41289a2b2772715046f733b11476a1f278fa85c0a8691f", 0xd1}, {&(0x7f0000005ec0)="f54a7d3cd35f2c0521930aa225960bdc28d22e3a660fbe89a4e0980d20b0895b876f172b7877818af5212a32a3d0a16a37c9e5ae90c291ad014fb2736e1b237780466afdd84c38b19587552eb0a07d28521e15bb964a5c1a51256a85759637b223e050a352c601959a070c117e2547d598956dd5cfbbe9b35633a398480102189562a1dc1c5cdd5893d54706001f1a36182258edbaf456", 0x97}, {&(0x7f0000005f80)="8e697b2ade150d3564ca4d55a506d16c21cf052d1097785850fd9d810dd1d2c0e74a8dc5e6158131b321524b5125c6b69609bfc69296ce5193067b30f2f176449045315feb91e8b685a89109c29f3116f3f60c13c95b4974b10ee953f377b4346876fc550fa033a6c1f390facfe8a5e12e5721ada3824193a35216869111a1792d", 0x81}, {&(0x7f0000006040)="12881ecb5f345c764978930ca02285143ff587ba520e85ff72bba7e184da9295f1c08e701e9473f93d5fb3a17270588452edd20d10cc211c4c640fa5cafed64b7491fbd2169609f95eaeafe08b70098dde7f84c0102711834bd45d7e57e6c2614001b32fa939a71a74fbae5b04b221bd5aed5e7be64f0f41e1dc2205ac75c9f01ac0a90231d6e1cfc6f4b67e782172d8b3e811e1e087862f2398fcd8c4fa849da183ba612b95a2338c58a5eeaf3b4201508abe45a2c87a9ced5eca5c4f85e00546a6d234a4ee3dbf6f5004b3f01d3dfbf0fb34d9191226ecaf8773e1dd3507ca78d0331822a0f393630656", 0xeb}], 0x9, &(0x7f0000006380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r7]}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r10}}}], 0xc8}}], 0x7, 0x40840) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:36:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d00010000000a0904000803996fa90009050000000000000009"], 0x0) [ 2409.922833][T21568] usb 6-1: USB disconnect, device number 25 06:36:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x1100000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:36:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x3f00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2410.327276][T18024] usb 3-1: new high-speed USB device number 112 using dummy_hcd 06:36:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x6000000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2410.476007][T21568] usb 6-1: new high-speed USB device number 26 using dummy_hcd 06:36:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x8001000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2410.612853][T18024] usb 3-1: Using ep0 maxpacket: 16 06:36:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x833f000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2410.746278][T18024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2410.756641][T18024] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2410.768366][T18024] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2410.786096][T18024] usb 3-1: config 0 interface 0 has no altsetting 0 06:36:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x9effffff00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2410.847608][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2410.986236][T18024] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2410.995324][T18024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.003625][T18024] usb 3-1: Product: syz [ 2411.008178][T18024] usb 3-1: Manufacturer: syz [ 2411.012799][T18024] usb 3-1: SerialNumber: syz [ 2411.025574][T18024] usb 3-1: config 0 descriptor?? [ 2411.060597][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2411.075990][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.085125][T21568] usb 6-1: Product: syz [ 2411.092332][T21568] usb 6-1: Manufacturer: syz [ 2411.098724][T21568] usb 6-1: SerialNumber: syz [ 2411.121862][T18024] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2411.137544][T18024] usb 3-1: selecting invalid altsetting 0 [ 2411.152695][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2411.157279][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2411.189665][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2411.323148][T13897] usb 3-1: USB disconnect, device number 112 [ 2411.331737][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2411.353708][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2411.363938][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2411.377047][ T2087] pvrusb2: Failure uploading firmware1 [ 2411.378987][T16232] udc-core: couldn't find an available UDC or it's busy [ 2411.383000][ T2087] pvrusb2: Device initialization was not successful. [ 2411.397525][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2411.410929][T16232] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2411.448820][T13897] pvrusb2: Device being rendered inoperable [ 2411.478706][T20594] usb 6-1: USB disconnect, device number 26 [ 2412.095979][T20594] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2412.245979][T18024] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2412.335871][T20594] usb 3-1: Using ep0 maxpacket: 16 [ 2412.455976][T20594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2412.466368][T20594] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2412.478328][T20594] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2412.491379][T20594] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2412.646093][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2412.659254][T20594] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2412.671356][T20594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2412.679446][T20594] usb 3-1: Product: syz [ 2412.683618][T20594] usb 3-1: Manufacturer: syz [ 2412.688363][T20594] usb 3-1: SerialNumber: syz [ 2412.700357][T20594] usb 3-1: config 0 descriptor?? [ 2412.738310][T20594] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2412.758282][T20594] usb 3-1: selecting invalid altsetting 0 [ 2412.764622][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2412.779388][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2412.810563][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2412.820168][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2412.832582][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2412.846707][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2412.853182][ T2087] pvrusb2: Failure uploading firmware1 [ 2412.860113][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2412.866153][ T2087] pvrusb2: Device initialization was not successful. [ 2412.876410][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2412.878975][T18024] usb 6-1: Product: syz [ 2412.890266][T18024] usb 6-1: Manufacturer: syz [ 2412.894919][T18024] usb 6-1: SerialNumber: syz [ 2412.946419][T20594] usb 3-1: USB disconnect, device number 113 [ 2412.959216][T20594] pvrusb2: Device being rendered inoperable [ 2412.961285][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected 06:37:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:37:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xf0ffffff00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r6, r5) 06:37:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:37:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) 06:37:00 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x17, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) [ 2413.101726][ T6186] usb 6-1: USB disconnect, device number 27 06:37:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0xfffffffffffff000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2413.555967][T18024] usb 3-1: new high-speed USB device number 114 using dummy_hcd 06:37:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2413.756013][ T6186] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2413.816080][T18024] usb 3-1: Using ep0 maxpacket: 16 06:37:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2413.962605][T18024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2413.987152][T18024] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2414.009887][T18024] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2414.029628][T18024] usb 3-1: config 0 interface 0 has no altsetting 0 06:37:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) tkill(0x0, 0x21) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$poke(0x5, r4, &(0x7f00000001c0), 0x81) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r7, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:37:01 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x3, 0xfffffffd}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000440)=0x0) r5 = fcntl$dupfd(r2, 0x0, r0) sendmsg$AUDIT_SET(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x28100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x38, 0x3e9, 0x200, 0x70bd29, 0x25dfdbfc, {0x34, 0x1, 0x2, r1, 0x0, 0x77, 0x80000001, 0x4, 0x0, 0xdbb2}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap$usbmon(&(0x7f00006d8000/0x4000)=nil, 0x4000, 0x9, 0x810, r5, 0x100000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r8, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r9, r8) [ 2414.166746][ T6186] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2414.226605][T18024] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2414.236500][T18024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2414.245931][T18024] usb 3-1: Product: syz [ 2414.250299][T18024] usb 3-1: Manufacturer: syz [ 2414.255075][T18024] usb 3-1: SerialNumber: syz [ 2414.271711][T18024] usb 3-1: config 0 descriptor?? 06:37:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r5, r4) 06:37:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x6}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2414.328388][T18024] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2414.342342][T18024] usb 3-1: selecting invalid altsetting 0 [ 2414.364048][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2414.392672][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2414.410861][ T6186] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2414.420993][ T6186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2414.453411][ T6186] usb 6-1: Product: syz [ 2414.471425][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2414.474047][ T6186] usb 6-1: Manufacturer: syz [ 2414.498674][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2414.514154][ T6186] usb 6-1: SerialNumber: syz [ 2414.546552][T20594] usb 3-1: USB disconnect, device number 114 [ 2414.566919][ T6186] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2414.586978][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2414.620315][ T2087] pvrusb2: Failure uploading firmware1 [ 2414.629858][ T2087] pvrusb2: Device initialization was not successful. [ 2414.656163][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2414.683683][T20594] pvrusb2: Device being rendered inoperable [ 2414.775432][T16454] udc-core: couldn't find an available UDC or it's busy [ 2414.784009][T16454] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2414.812602][T17472] usb 6-1: USB disconnect, device number 28 [ 2415.335899][T17472] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2415.575633][T17472] usb 3-1: Using ep0 maxpacket: 16 [ 2415.585702][T21568] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2415.696162][T17472] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2415.706415][T17472] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2415.718918][T17472] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2415.732622][T17472] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2415.896402][T17472] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2415.906479][T17472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2415.914564][T17472] usb 3-1: Product: syz [ 2415.919785][T17472] usb 3-1: Manufacturer: syz [ 2415.924578][T17472] usb 3-1: SerialNumber: syz [ 2415.931798][T17472] usb 3-1: config 0 descriptor?? [ 2415.976700][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2415.978016][T17472] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2416.021868][T17472] usb 3-1: selecting invalid altsetting 0 [ 2416.032957][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2416.042796][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2416.072247][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2416.081543][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2416.092962][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2416.104077][ T2087] pvrusb2: Failure uploading firmware1 [ 2416.111658][ T2087] pvrusb2: Device initialization was not successful. [ 2416.120078][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2416.156485][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 06:37:03 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=@dellinkprop={0x58, 0x6d, 0x10, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50600, 0x804}, [@IFLA_GROUP={0x8, 0x1b, 0xc000}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8811}, 0x800) sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r7, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) r9 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r9) ptrace$setopts(0x4206, r9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x3, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x900, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9fa5}, 0x20000, 0x200, 0x6, 0x5, 0x5, 0x40, 0x2, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffd}, r9, 0xa, r0, 0x8) write(0xffffffffffffffff, 0x0, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) [ 2416.166190][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.174215][T21568] usb 6-1: Product: syz [ 2416.195093][T21568] usb 6-1: Manufacturer: syz [ 2416.206246][T21568] usb 6-1: SerialNumber: syz [ 2416.234667][T20594] usb 3-1: USB disconnect, device number 115 [ 2416.250967][T20594] pvrusb2: Device being rendered inoperable 06:37:03 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:37:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x7}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r5, r4) 06:37:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r8, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x3) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r9, r6) 06:37:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x8) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2416.345766][T21568] usb 6-1: can't set config #1, error -71 [ 2416.352892][T21568] usb 6-1: USB disconnect, device number 29 06:37:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x8}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2416.885729][T20594] usb 3-1: new high-speed USB device number 116 using dummy_hcd 06:37:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xb}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2416.955821][T21568] usb 6-1: new high-speed USB device number 30 using dummy_hcd 06:37:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xe}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2417.165868][T20594] usb 3-1: Using ep0 maxpacket: 16 06:37:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xf}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2417.327400][T20594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2417.339227][T20594] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2417.353715][T20594] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2417.369836][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2417.386639][T20594] usb 3-1: config 0 interface 0 has no altsetting 0 06:37:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2417.586625][T20594] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2417.596530][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2417.606054][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.614150][T21568] usb 6-1: Product: syz [ 2417.621881][T20594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.630966][T20594] usb 3-1: Product: syz [ 2417.635223][T21568] usb 6-1: Manufacturer: syz [ 2417.641203][T20594] usb 3-1: Manufacturer: syz [ 2417.646726][T21568] usb 6-1: SerialNumber: syz [ 2417.651487][T20594] usb 3-1: SerialNumber: syz [ 2417.671260][T20594] usb 3-1: config 0 descriptor?? [ 2417.736841][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2417.746811][T20594] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2417.754541][T20594] usb 3-1: selecting invalid altsetting 0 [ 2417.785609][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2417.815213][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2417.879687][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2417.895897][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2417.904932][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2417.923770][ T2087] pvrusb2: Failure uploading firmware1 [ 2417.950740][T20594] usb 3-1: USB disconnect, device number 116 [ 2417.969804][T16669] udc-core: couldn't find an available UDC or it's busy [ 2417.979017][ T2087] pvrusb2: Device initialization was not successful. [ 2417.995286][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2417.998102][T16669] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2418.018315][T20594] pvrusb2: Device being rendered inoperable [ 2418.023457][ T6186] usb 6-1: USB disconnect, device number 30 [ 2418.745454][T20594] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2418.805407][T21568] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2418.985367][T20594] usb 3-1: Using ep0 maxpacket: 16 [ 2419.106205][T20594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2419.121428][T20594] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2419.133608][T20594] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2419.147544][T20594] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2419.166877][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2419.305430][T20594] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2419.314490][T20594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2419.324848][T20594] usb 3-1: Product: syz [ 2419.330013][T20594] usb 3-1: Manufacturer: syz [ 2419.334706][T20594] usb 3-1: SerialNumber: syz [ 2419.340393][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2419.357199][T20594] usb 3-1: config 0 descriptor?? [ 2419.362324][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2419.395408][T21568] usb 6-1: Product: syz [ 2419.399613][T21568] usb 6-1: Manufacturer: syz [ 2419.407613][T21568] usb 6-1: SerialNumber: syz [ 2419.435461][T20594] usb 3-1: can't set config #0, error -71 [ 2419.444413][T20594] usb 3-1: USB disconnect, device number 117 [ 2419.467083][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected 06:37:06 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:37:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x11}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x7168, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x40000}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f00000001c0)=0x1, 0x0, 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop4', 0x0, 0x3) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r6, &(0x7f00000000c0), 0x0, 0x0, 0x81000, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001580)={&(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f00000014c0)=""/162, 0xa2}, 0x0, 0x40002143}, 0xce3) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r8, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r9, r8) 06:37:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f00000003c0)="240000001a005f0214f90900001e4134887f466500000000000000", 0x1b) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x1a) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:37:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r5, r4) 06:37:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x58, 0x58, 0xe7, 0x20, 0x403, 0xc631, 0xfa6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x48, 0xa4, 0x34}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x4, "36ce0ab5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0xe1, {0xe1, 0x1, "16a98cb5d7802d6d925e5f991bcd7c13846005615f5d5c334da0e7901df36d417570568a196ffd778602b7b9fa53d13a9c0527eb1644e7fe4030253479cf3420f091b283c148c302cfe6e2cdbc654a5b69bc901a881ea1de843a5eb3db4e81eea23c52e0d9d45ac6a026cf9da04af04b9f776e92c5949ccea55daa2c502d0aaa14bf7bb82ac831a8d436f6299f6608d8dc7d6e8aaafe7bda49b5001b67c2213c14225970fc55b5d29eab1dfbbdfc56bcdd29010eda8dab7229044b32c695c01b4b3abcb24f918a55d1f469018ed0bcdd2a8cce1f6e821f135a1922c38a8614"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f0000000180)={0x0, 0xf, 0x61, {0x5, 0xf, 0x61, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x6, 0x5, 0x8, 0xf007, 0x5, [0xc030, 0xf, 0x7e0f, 0x0, 0xff00f0]}, @ssp_cap={0x1c, 0x10, 0xa, 0xb0, 0x4, 0x5, 0xff00, 0x7f, [0xff0000, 0xff00, 0x0, 0x3f00]}, @ssp_cap={0x20, 0x10, 0xa, 0x7f, 0x5, 0x1ff, 0x0, 0x20, [0xfe809f, 0x9f, 0x0, 0xff1f8f, 0x0]}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x8, 0x1f, 0x3, "561c2c0b", "10a92d7e"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x18, 0x7f, 0x20, 0x2, 0xffe1, 0x4}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x40, 0x16, 0x5d, "a9d0855f468279cbed9b6d546e57a6acd44a340611c81eeae674dcfe18ce03c31af030440599ca82253f6df88a795809784fea80fa8eb9a3f86dc6bae4018133941003785a93f7783de94d020b897699f651b03b02d5f834d43fa6026f"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x100, 0x4}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x100}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000500)={0x40, 0xb, 0x2, '4l'}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x3801}, &(0x7f0000000580)={0x40, 0x13, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000600)={0x40, 0x19, 0x2, "4fd9"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0xff}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x20}}) [ 2419.566355][T17472] usb 6-1: USB disconnect, device number 31 06:37:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x60}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xf0}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x180}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x300}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2420.075386][T20594] usb 3-1: new high-speed USB device number 118 using dummy_hcd 06:37:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x500}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x600}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2420.165445][T17472] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2420.335364][T20594] usb 3-1: Using ep0 maxpacket: 16 [ 2420.470644][T20594] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2420.489255][T20594] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2420.513185][T20594] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2420.530343][T20594] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2420.566434][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2420.695587][T20594] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2420.706414][T20594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.714535][T20594] usb 3-1: Product: syz [ 2420.718954][T20594] usb 3-1: Manufacturer: syz [ 2420.723680][T20594] usb 3-1: SerialNumber: syz [ 2420.739002][T20594] usb 3-1: config 0 descriptor?? [ 2420.766101][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2420.777950][T20594] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2420.783094][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.797870][T20594] usb 3-1: selecting invalid altsetting 0 [ 2420.811716][T17472] usb 6-1: Product: syz [ 2420.812373][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2420.822902][T17472] usb 6-1: Manufacturer: syz [ 2420.839050][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2420.841143][T17472] usb 6-1: SerialNumber: syz [ 2420.902902][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2420.912941][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2420.916397][T17472] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2420.932240][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2420.955013][ T2087] pvrusb2: Failure uploading firmware1 [ 2420.961286][ T2087] pvrusb2: Device initialization was not successful. [ 2420.969442][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2420.998720][T16917] udc-core: couldn't find an available UDC or it's busy [ 2421.007263][T16917] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2421.030553][T13897] usb 3-1: USB disconnect, device number 118 [ 2421.042667][T13897] pvrusb2: Device being rendered inoperable [ 2421.123774][T16921] udc-core: couldn't find an available UDC or it's busy [ 2421.131135][T16921] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2421.151235][T17472] usb 6-1: USB disconnect, device number 32 [ 2421.825356][T17472] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2421.925230][T20594] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2422.085249][T17472] usb 3-1: Using ep0 maxpacket: 16 [ 2422.205245][T17472] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2422.215484][T17472] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2422.228307][T17472] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2422.241705][T17472] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2422.295299][T20594] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2422.405309][T17472] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2422.414554][T17472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2422.423229][T17472] usb 3-1: Product: syz [ 2422.427733][T17472] usb 3-1: Manufacturer: syz [ 2422.432406][T17472] usb 3-1: SerialNumber: syz [ 2422.439825][T17472] usb 3-1: config 0 descriptor?? [ 2422.465976][T20594] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2422.478613][T20594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2422.487669][T17472] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2422.489713][T20594] usb 6-1: Product: syz [ 2422.500795][T20594] usb 6-1: Manufacturer: syz [ 2422.507829][T20594] usb 6-1: SerialNumber: syz [ 2422.507845][T17472] usb 3-1: selecting invalid altsetting 0 [ 2422.554236][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2422.571338][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2422.586162][T20594] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2422.606926][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2422.652952][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2422.680376][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2422.706027][T13897] usb 3-1: USB disconnect, device number 119 [ 2422.735098][ T2087] pvrusb2: Failure uploading firmware1 [ 2422.740654][ T2087] pvrusb2: Device initialization was not successful. [ 2422.761783][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2422.772302][T13897] pvrusb2: Device being rendered inoperable [ 2422.776880][T17472] usb 6-1: USB disconnect, device number 33 06:37:09 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:37:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x700}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000001b00)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=@nfc={0x27, 0x1, 0x2, 0x5}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000440)="a1b734924f7d706276178dda366abbbc2b6b3035dc02f295c13adc0469d7c189632a8ca0c14bbaf90586b9ba7f6e4abb383b9a8c6fc76e27c2cb5df081386d313b9abb58759c4a3a69afced78f35f6eff9d15caa297dbf4c76d9be945505c76b1a5863e80feeca01bbea4ede4d4a981d0e97b8797c1965f0e7cf75c855f36c38f1b163cce968ee3369046825ce4f38be56bbd201e2fd64b38d560d5abdc7926f3cb141ac6487c49b719d6947b005e62e8b3cf4453ec1235cf27c96e79e19fe04c76d70466c779b9b8182586fb89fc849d16d303d1f6b75dea4367c8c4951634cee90fd80487ba59397c5", 0xea}, {&(0x7f0000000540)="8d8c5e3011a368de1c6e2b271cf85c1e92b0cb8cd1c6b76db831eacfc81dd30422121a027723f3a09aa5cbfbacaa350bdc627be08573b49b39ecfe4ded232c02ca3770d1705b6878a6e78722c0d1d3e9dff66c6d284773e30db2b19fb288ff92aeed055ffac623edaafbaae24ae92b2da016165dd4886a1d87fadc15be53899d00a8f8949b6f763c509d9532cca3231aa17ddd8afc6e9280c24631cc02b005acb90c453750dad3f1a74572a0f79eb72e187b8e6b32f6dacfcdaa0fa2c9ec2663b88b9379cf0bb2ac91eb5f457c886ae105e6437e9e374727c13784cb4be51c1bb317a47265", 0xe5}, {&(0x7f0000000640)="547483d11ded63a11389c293e8c9838734c73e3ac5e322d2878a9d1914257a06ba3c296fdbfc962b120d262a942074bd838a10dcb21277608956c84000a0ff3366fb8cca7416723574258a3e65da5135f6ca8da952d98db79646dbc000a8d7f515805bdac1026eb49b3fa5dd62bdf40ab43210ca5e45f9575b8ad8104fc0d4f0691d4aeba01e23aba6998ebd948c15a05e0c71c170242095e85c41818d0a64", 0x9f}, {&(0x7f00000001c0)="bb16f1c2bc615e8a0c23213c31c1f649a21bec872291645db6192488", 0x1c}, {&(0x7f0000000700)="e909fc2af2313e19eb48dff3a950703ce1af216ece2eed2408745fc8dd1f588f1921e9605d422b2b23a6ecddb71aa07792a64a935ad5b57a22f5da3718b3608db11e5341143a1087eb0955d5312f408e87de873943bbb2d9d1df7d66e9ac81ebe85495481fa1e965f7c74f5bc18a01ca56adc7d822ac9c124098631eda5e36e1e07d8d729ab1915f8e1e35b1460c76cf027d0e23e3ce11fdbdf7f76fa3fabdaad56fc425de23df1ae2346bbd81f1529aa918212f16e8fc40fa6fb781cb9b1178e05a2cc2ba638c082616aad7072e8d2254ec1209732246bdc09b05e0872daf4629071e6ca630fcf8643dc7f542a59d", 0xef}, {&(0x7f0000000800)="a8391dc58699cf5b7c7e89b4d8a97e6c63edbf710288d1cade60986ceb0ba089bb852a85e02c1f4a42a61696fa6be6c4f90b99fbcf033a6549e832faa6526b2fdf3ceafb43d424b8415b53f36a3d0dc573edb675773358acf149ca9876a7be7e210447c1f31dcd2359", 0x69}, {&(0x7f0000000280)="d6860028d526f071d42e683d127440b9792bfa8a1e816e835974f971965a0d6e1bed", 0x22}, {&(0x7f0000000880)="4f4304b18255bf379a6601206d66acc9728eb564a80300837b88e661ea53d39bfb8784e29ac051dfc1", 0x29}, {&(0x7f00000008c0)="84e91034a748b1ab6ab8fb49913787ab8ec418f31ec642fa09672403d8f6891f9c89bc0c3f391bede2d066174ad6", 0x2e}, {&(0x7f0000000900)="af1f60287ba9966c48ff01e032bc237ad3d35af8fa5ec643d3243d70cc37bb1eb5e92baba8d260c63fadbe3a7394690ab948caa8e617cc8d61e21a9f3489d608558c29d9a9d52b79badcdecfbbb7f507dda8351e2c2fe42c45bcf3534d9f0ac30e8220a2f94b59cde047d97d8c15eab4df28b2fa1048dad4e971d17a2723875fb0bba9143686dade65", 0x89}], 0xa, &(0x7f0000000a80)=[{0x1010, 0x114, 0x4, "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"}], 0x1010}, 0x0, 0x40004, 0x0, {0x0, r8}}, 0x7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r9, r6) 06:37:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r7, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:37:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r6, r5) 06:37:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000903996fa900090500000000000000c8888d3f069f0e13100159a0912fbe9e288eea9d9a722b6da7d108eb2f2d01b8a4f29a202b2b7828c6f6f3cf521e8a04"], 0x0) syz_usb_control_io(r2, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x0, 0xe, 0x99, {0x99, 0x24, "cd6283a07bff487af553e6411684851a3742bb20642961027e292269d6cc3ca9e373ff84ad731f5e92c654c251a9ee662e22e739b75a341183de712bebdcc035d2b1294a4e12d868a3d8e1a2e3ffcf2ed109c1980517d080ac868815dede1612c4a82171d346accf81a8754566672baf80f19378268319ff6a3d2c43fd722bc84845853d1dfe7b0c3be5b8be2db92b259cbba58f499bdf"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1809}}, &(0x7f0000000200)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x1, 0x1, "cc409438", '&\rQ\t'}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6d, 0x0, 0x7, 0x4, 0x44, 0x1, 0xfffd}}}, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x0, 0xd, 0x3b, "d44baef968eedefb3b9065f0f560d07cd0d395fb5e4c24e895dc88c606a8ed5d75bcdf2aa28b617424780e22ea043174b55f3cdb85a38968cefa09"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x20, 0x1, [0x0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xec}, &(0x7f0000000500)={0x40, 0xb, 0x2, "26ac"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, &(0x7f0000000600)={0x40, 0x19, 0x2, '\v$'}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x3019}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x4}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x7f}}) 06:37:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x900}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xa00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xb00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xe00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2423.278747][T17472] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2423.283614][T13897] usb 3-1: new high-speed USB device number 120 using dummy_hcd 06:37:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xf00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_io_uring_setup(0x5d0c, &(0x7f00000002c0)={0x0, 0xb09c, 0x0, 0x0, 0x35a}, &(0x7f00006d5000/0x1000)=nil, &(0x7f00006d5000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000000400)=0xc) r6 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r6) ptrace$setopts(0x4206, r6, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000280)=0x3) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x622b, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000001c0)='net/vlan/config\x00') r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x27773465d5af2a40, @fd=r8, 0x0, &(0x7f00000003c0)=""/49, 0x31, 0x5, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) [ 2423.605554][T13897] usb 3-1: Using ep0 maxpacket: 16 [ 2423.655628][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2423.735163][T13897] usb 3-1: config 0 has an invalid descriptor of length 200, skipping remainder of the config [ 2423.745592][T13897] usb 3-1: config 0 interface 0 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 2423.758175][T13897] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2423.772132][T13897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2423.825985][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2423.836729][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2423.846747][T17472] usb 6-1: Product: syz [ 2423.851179][T17472] usb 6-1: Manufacturer: syz [ 2423.856127][T17472] usb 6-1: SerialNumber: syz [ 2423.906438][T17472] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2423.955985][T13897] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2423.972794][T13897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2423.983978][T13897] usb 3-1: Product: syz [ 2423.996369][T13897] usb 3-1: Manufacturer: syz [ 2424.013719][T13897] usb 3-1: SerialNumber: syz [ 2424.025676][T13897] usb 3-1: config 0 descriptor?? [ 2424.077517][T13897] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2424.086505][T13897] usb 3-1: selecting invalid altsetting 0 [ 2424.092942][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2424.121978][T17020] udc-core: couldn't find an available UDC or it's busy [ 2424.135037][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2424.143653][T17020] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2424.166306][T18024] usb 6-1: USB disconnect, device number 34 [ 2424.192827][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2424.211920][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2424.232748][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2424.246574][ T2087] pvrusb2: Failure uploading firmware1 [ 2424.257613][ T2087] pvrusb2: Device initialization was not successful. [ 2424.264393][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2424.934978][T18024] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2425.295001][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2425.465046][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2425.474212][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2425.482758][T18024] usb 6-1: Product: syz [ 2425.487451][T18024] usb 6-1: Manufacturer: syz [ 2425.492205][T18024] usb 6-1: SerialNumber: syz [ 2425.536202][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2425.738433][T17136] udc-core: couldn't find an available UDC or it's busy [ 2425.745988][T17136] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2425.756545][T17472] usb 6-1: USB disconnect, device number 35 06:37:12 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:37:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x1100}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r6, r5) 06:37:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000001c0)={0x9, 0x2, 0x2fcd, 0xcc00, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x4010, r1, 0x9252000) r2 = syz_io_uring_setup(0x21bc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2f0}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x301000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r7, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:37:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:37:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r3, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x0, '\x00', [{0xffffffff, 0x0, 0x8, 0x78, 0x2, 0x2}, {0xffff, 0x7fff, 0x4, 0x6, 0x4, 0x5eb}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f000061e000/0x1000)=nil, 0x1000, 0xa, 0x2010, r1, 0x5e6bf000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x7}, 0x8) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000000402010752c830102030109022d00010000000009040000000000000009"], 0x0) [ 2425.906303][T18024] usb 3-1: USB disconnect, device number 120 [ 2425.931493][T18024] pvrusb2: Device being rendered inoperable 06:37:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x3f00}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x3f83}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x6000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2426.335051][T17472] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2426.386215][T18024] usb 3-1: new high-speed USB device number 121 using dummy_hcd 06:37:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x833f}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xf000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2426.574941][T18024] usb 3-1: device descriptor read/64, error 18 06:37:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x34000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2426.715731][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2426.845243][T18024] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2426.895710][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2426.922789][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2426.965160][T17472] usb 6-1: Product: syz [ 2426.969528][T17472] usb 6-1: Manufacturer: syz [ 2426.974289][T17472] usb 6-1: SerialNumber: syz [ 2427.026072][T17472] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2427.041978][T18024] usb 3-1: device descriptor read/64, error 18 [ 2427.165637][T18024] usb usb3-port1: attempt power cycle [ 2427.255572][T17163] udc-core: couldn't find an available UDC or it's busy [ 2427.268928][T17163] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2427.342410][T17472] usb 6-1: USB disconnect, device number 36 [ 2427.574916][T18024] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2427.664885][T18024] usb 3-1: Invalid ep0 maxpacket: 0 [ 2427.815021][T18024] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2427.905148][T18024] usb 3-1: Invalid ep0 maxpacket: 0 [ 2427.910669][T18024] usb usb3-port1: unable to enumerate USB device [ 2428.124701][T21565] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2428.526002][T21565] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2428.695093][T21565] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2428.704166][T21565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2428.714285][T21565] usb 6-1: Product: syz [ 2428.719341][T21565] usb 6-1: Manufacturer: syz [ 2428.724179][T21565] usb 6-1: SerialNumber: syz [ 2428.766157][T21565] usb-storage 6-1:1.0: USB Mass Storage device detected 06:37:16 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:37:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x400300}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r7) ioctl$TCXONC(r7, 0x540a, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r6) 06:37:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r5, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r5, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r6, r5) 06:37:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x5f4, r9, 0xf21, 0x0, 0x25dfdbfc, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3f}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}]}, @NL80211_ATTR_NAN_FUNC={0x18, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "5ab0f5e2bb04"}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xdc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x40}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x8}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xbfcd}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf5}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x94, 0xe, 0x0, 0x1, [{0x56, 0x0, "29c1297108f4ab1a67886bf639f99d97ef6d135e2a39164b0494af3d3a7215ae41286a779f30d9a6d946528a06e437524b1a7f36947581a3433cba2af3b4409addcb99e6851496cc79531ceb41b621a0b17e"}, {0x11, 0x0, "68f116fd7b601dd0ee90d1fed9"}, {0x24, 0x0, "f22c1a0547005cb29712a06e01ab859e0e4359a84691262f7baca58949355884"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}]}, @NL80211_ATTR_NAN_FUNC={0x488, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x8}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x2a8, 0xe, 0x0, 0x1, [{0xf4, 0x0, "812ffebbebc4365ce95100a4a7814f4c3811a1e6660c61848994bfff8c1b4a0b5733cb6f69b43a4df93feb597d4eb1d3d72e392b285e60d1e83da0db25f48695d0e2be24a0f80abb5cfcfde9d6c2ed053f757ae841d6b0e0bd45d3dfc6d160e74c11bb72d8b55db1b9e6c845b9a2c651a83b3dfd09c35f66012dad54022d39c7de5aadb02d71170cab9059d44949345003f7be1f030a9534ac1e7574cc479bba37b102c9a3348ca08cb19fddce6934422b85549fe1e7b66aa9ab25bb0111e982a469240036b1b754694c207d0601d337c3c093a63f73b38b2cdcb1c0f53a2c0b2d46218fe6a6650d8bbc3c523bbc65b5"}, {0x42, 0x0, "d1d4d427dacf64f774f8c0e87555323073b343063d5ce2ca771e467c3e1b1cdf0aa86ac420296305f262d6b3879f1d2d987ec52a3b27a7eabfb98117a0b4"}, {0xb0, 0x0, "283df6069a151745ec84dff2958b34e4a5e4ef7bab624f378ab29dc3c1afc51b04af9464cfd8d37101fe7b9731ead8851f6a2ab6326b6e8b3e8623d9bb0c1b4eb7a2e4c11315e5376a7b7375e6095fd570a7b648a0052247e7016ebc33182017004021e870a462ac5f20e734c7866ebf6d2856a8c7f608c52b3fa5ade30bbcf897c5aa3d75bdd748a155bf6bebe67c66a7e41d3b6a423954fa439afea60ff709df703158d0511c526d573514"}, {0xba, 0x0, "2090f15bd305c6f2b25bb85b60f981f9cd725ef2ec3ab5d59a3892c02fe8d24f88f89f538745f799419414dd5165df5e0b845c3f7d0e31e6ea3fc7a27d19ebc46c67bb8a356d0e7b3cd1d476b1a05575b10e295ab5842a0d40deee14b67ba446538d2f55ac7ef754a0949f781b931a5595914b60a753d066896e8887f70caf6c05533be51f240b83a2e5e2a3936e621adf69b7d27c76c6bf09f68d8ef55a148da2fc610fc4e8bd65a3a79bd346da48131083dc3c269a"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xfd}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x5}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1c4, 0xd, 0x0, 0x1, [{0xe1, 0x0, "54d6e6b17e6341bd76df600b63e03b0f8083df53c82f4a4c7d9354382069a30917aea8f4c86fbe1ba39938447ba105a21f4a2c77391edfb75c8c2c955d38f78d3c78f47cfeece801863398aa41c7272f663b2a3a1a7a779a927d7544f9b03c09e960be41cac594a5cf2b7e898b5e12b4d2f179917f3a560946c7752c5df5b6419b559dccb77adbbf2c11b20349e5c06bdb8892991cc0e88ba37e16b885a44d6c666caad3c4122b5f9958b1785cc27fedcf0f81a54d933062d0d09668592e48f5d79322c0137a2258989d428753778bfe8e67732dd100fea1825184a897"}, {0x45, 0x0, "45963c27082b802c028c2f3f8b5e25a5c668e7be7a5ad82ca862f9d07dcfaaa19d713b14e3fe86962ff73b88e9b31bdbfac06c8b7e8f7419c3211e78c67379fbf6"}, {0x24, 0x0, "bc254a9dd8268bebf0191c6427e090d51ce3bb21b51f03b1014032603fbf8d9e"}, {0x60, 0x0, "5341bcb97c1ea2600aa9e0984cddd61fff9f6fd0bcfa962600f6de42769bb1ae3cea91042dfbbce8dabd9e843f5dd659dc7a642229278edb02ebc4bf6658678830fa7d334eb1552817735db8f98410f63620754176c124594ca9bada"}, {0x10, 0x0, "ea4506a801beb016770bbda5"}]}]}]}, 0x5f4}}, 0x0) close(r8) dup2(r7, r6) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000000a80)={{0x0, 0x100, 0x5, 0x0, 0x4524894, 0x6, 0x400, 0x9, 0x958a, 0x10000, 0x8, 0x1, 0xbece, 0x8001, 0x7}}) [ 2428.894694][T13897] usb 6-1: USB disconnect, device number 37 06:37:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r2) renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00') preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x3f0, 0xffffffff, 0x210, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xff000000, 0xff], 'veth0_to_bridge\x00', 'wg2\x00', {0xff}, {0xff}, 0x2b, 0x0, 0x0, 0xb}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@mh={{0x28}, {"6cf5"}}, @common=@icmp6={{0x28}, {0x8, "806a", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x72, 'syz0\x00'}}}, {{@ipv6={@empty, @mcast2, [0x0, 0xffffff80, 0xff, 0xff000000], [0xffffffff, 0x0, 0xffffff00, 0xff], 'veth1_to_hsr\x00', 'bridge_slave_0\x00', {}, {}, 0x8, 0x3, 0x4, 0x6a}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@mh={{0x28}, {"b98a", 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x20, 0x9, 0x2, 0x4, 0x5, 0x1, 0x9, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) 06:37:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xf0ffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2429.444635][T21568] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2429.452555][T13897] usb 6-1: new high-speed USB device number 38 using dummy_hcd 06:37:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x4000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2429.704736][T21568] usb 3-1: Using ep0 maxpacket: 16 [ 2429.825670][T13897] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2429.839534][T21568] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2429.853481][T21568] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping 06:37:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x5000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2429.873200][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2429.935413][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2430.024910][T13897] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2430.033998][T13897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2430.075540][T13897] usb 6-1: Product: syz [ 2430.079781][T13897] usb 6-1: Manufacturer: syz [ 2430.084405][T13897] usb 6-1: SerialNumber: syz [ 2430.128500][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2430.147150][T13897] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2430.156959][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2430.178416][T21568] usb 3-1: Product: syz [ 2430.186482][T21568] usb 3-1: Manufacturer: syz [ 2430.191107][T21568] usb 3-1: SerialNumber: syz [ 2430.206013][T21568] usb 3-1: config 0 descriptor?? [ 2430.247974][T21568] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2430.278775][T21568] usb 3-1: selecting invalid altsetting 0 [ 2430.319298][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2430.341920][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2430.354910][T17287] udc-core: couldn't find an available UDC or it's busy [ 2430.378525][T17287] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2430.407619][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2430.452711][T21568] usb 3-1: USB disconnect, device number 125 [ 2430.471802][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2430.492406][T21565] usb 6-1: USB disconnect, device number 38 [ 2430.556379][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2430.609083][ T2087] pvrusb2: Failure uploading firmware1 [ 2430.662624][ T2087] pvrusb2: Device initialization was not successful. [ 2430.672936][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2430.696129][T21568] pvrusb2: Device being rendered inoperable [ 2431.284590][T21565] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2431.675032][T21565] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2431.854667][T21565] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2431.863776][T21565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2431.872354][T21565] usb 6-1: Product: syz [ 2431.877089][T21565] usb 6-1: Manufacturer: syz [ 2431.881706][T21565] usb 6-1: SerialNumber: syz [ 2431.935723][T21565] usb-storage 6-1:1.0: USB Mass Storage device detected 06:37:19 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x6, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:37:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x6000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r5, r4) 06:37:19 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r7, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/25, 0x19}, {&(0x7f00000013c0)=""/203, 0xcb}, {&(0x7f00000014c0)=""/165, 0xa5}], 0x5, 0x0, 0x10001) write(0xffffffffffffffff, 0x0, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:37:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) prlimit64(r0, 0xb, &(0x7f00000001c0)={0x8}, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000440)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000480)={'\x00', 0xfff7, 0xfffffffc, 0xfb2, 0x4, 0x20, r5}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r3, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) bind$alg(r4, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) dup2(0xffffffffffffffff, r3) 06:37:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) fallocate(r0, 0x28, 0x40, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2432.028361][T18024] usb 6-1: USB disconnect, device number 39 06:37:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x7000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x8000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2432.394534][T10810] usb 3-1: new high-speed USB device number 126 using dummy_hcd 06:37:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x9000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xa000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2432.544879][T18024] usb 6-1: new high-speed USB device number 40 using dummy_hcd 06:37:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xb000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2432.634482][T10810] usb 3-1: Using ep0 maxpacket: 16 06:37:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280), 0x800) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xad, 0x5, 0x80, 0x7f, 0x0, 0x7f, 0x20, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000001c0), 0x7}, 0x882, 0x4, 0x15c0000, 0x4, 0x3793, 0x5, 0x9, 0x0, 0xffffff3e, 0x0, 0x8}, 0xffffffffffffffff, 0x10, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000440), 0x202002, 0x0) io_uring_enter(r7, 0x7a9a, 0xc3e0, 0x4, &(0x7f0000000480)={[0x765]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r8, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r9, r8) [ 2432.755349][T10810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2432.766033][T10810] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2432.779560][T10810] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2432.794567][T10810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2432.955375][T10810] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2432.966234][T10810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2432.975140][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2432.979247][T10810] usb 3-1: Product: syz [ 2433.000121][T10810] usb 3-1: Manufacturer: syz [ 2433.004910][T10810] usb 3-1: SerialNumber: syz [ 2433.013360][T10810] usb 3-1: config 0 descriptor?? [ 2433.076281][T10810] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2433.084028][T10810] usb 3-1: selecting invalid altsetting 0 [ 2433.097291][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2433.112169][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2433.144979][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2433.153810][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2433.166982][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2433.180281][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2433.181141][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2433.200379][ T2087] pvrusb2: Failure uploading firmware1 [ 2433.210238][ T2087] pvrusb2: Device initialization was not successful. [ 2433.223926][T18024] usb 6-1: Product: syz [ 2433.228702][T18024] usb 6-1: Manufacturer: syz [ 2433.231062][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2433.233457][T18024] usb 6-1: SerialNumber: syz [ 2433.283973][T10810] usb 3-1: USB disconnect, device number 126 [ 2433.290814][T10810] pvrusb2: Device being rendered inoperable [ 2433.305600][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2433.514776][T17500] udc-core: couldn't find an available UDC or it's busy [ 2433.521767][T17500] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2433.544885][ T1913] usb 6-1: USB disconnect, device number 40 [ 2434.344245][T21565] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2434.714504][T21565] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2434.885121][T21565] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2434.894283][T21565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2434.902296][T21565] usb 6-1: Product: syz [ 2434.906598][T21565] usb 6-1: Manufacturer: syz [ 2434.911263][T21565] usb 6-1: SerialNumber: syz [ 2434.965721][T21565] usb-storage 6-1:1.0: USB Mass Storage device detected 06:37:22 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:37:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xe000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:22 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = fcntl$dupfd(r0, 0x406, r0) sendmsg$nl_route(r2, &(0x7f0000004dc0)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004d80)={&(0x7f0000005080)=ANY=[@ANYBLOB="740000004800bc32c5843b001427bf7000fedbdf7a2bf8cc3829d25334cd7d46e9cf0deed609d2787abcbfe0dbfd165272aeb0f2a1a5656d93cecb2c2cd24f591786334f2383a60435cebbc49180994837f1ab10c14809f12f86286f4e95a1d727e9e477ac7522238dd6cdc8e051d675ecb7a539da9ed6816f0eb451611d68c8364972033e92a2339bbf1cc28f68b575613ad0c27d94f3405545554b90c3ff33d07836e3dca5b9f86740dd8c1b5e95f959583285f540d8e9dda1bb007d382713a1593ea6b222ff8b6e63c89427f1bd9217b93a9baacc8033504f0c442f48a1a5a7f6bcb309f0b70903168f548fbe7488", @ANYRES32=0x0, @ANYBLOB="c000000014000100fe88000000000000000000000000000114000100fc01000000000000000000000000000114000100fe8000000200000000000000000000aa080002000400000014000100fe8000000000000000000000000000aa8bc0a902491998e85166fe877992b567fcc71854cb75c82a9fb04a3f321b0e0f5bfd0146f7e19bd12437c7"], 0x74}, 0x1, 0x0, 0x0, 0x4008014}, 0x4040000) r3 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) io_uring_enter(r3, 0x2a6e, 0x0, 0x1, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = openat(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x10) syz_io_uring_submit(r4, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r8, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) r10 = syz_open_dev$vcsa(&(0x7f0000004ec0), 0x7fff, 0x0) perf_event_open(&(0x7f0000004e40)={0x4, 0x80, 0x7, 0x20, 0x2, 0xf9, 0x0, 0x81, 0xa84cd, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000004e00), 0x1}, 0x50000, 0x1, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r10, 0x1) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) recvmmsg(r7, &(0x7f0000004ac0)=[{{&(0x7f00000003c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/25, 0x19}, {&(0x7f0000000440)=""/254, 0xfe}], 0x2, &(0x7f0000000540)=""/237, 0xed}, 0x5}, {{&(0x7f0000000640)=@nfc_llcp, 0x80, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/145, 0x91}, {&(0x7f0000000780)=""/210, 0xd2}], 0x2, &(0x7f00000008c0)=""/223, 0xdf}, 0x9}, {{&(0x7f00000009c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1}, 0xffffffff}, {{&(0x7f0000001a80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001b00)=""/181, 0xb5}, {&(0x7f0000001bc0)=""/131, 0x83}, {&(0x7f0000001c80)=""/74, 0x4a}, {&(0x7f0000001d00)=""/83, 0x53}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x5}, 0xffffffff}, {{&(0x7f0000002e00)=@qipcrtr, 0x80, &(0x7f0000003100)=[{&(0x7f0000002e80)=""/255, 0xff}, {&(0x7f0000002f80)=""/163, 0xa3}, {&(0x7f0000003040)=""/175, 0xaf}], 0x3, &(0x7f0000003140)=""/158, 0x9e}, 0x3}, {{&(0x7f0000003200)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003280)=""/61, 0x3d}, {&(0x7f00000032c0)=""/46, 0x2e}, {&(0x7f0000003300)=""/127, 0x7f}], 0x3, &(0x7f00000033c0)=""/87, 0x57}, 0x80000001}, {{&(0x7f0000003440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}}, 0x80, &(0x7f0000003500)=[{&(0x7f00000034c0)=""/9, 0x9}], 0x1, &(0x7f0000003540)=""/245, 0xf5}, 0xdd7}, {{&(0x7f0000003640)=@tipc, 0x80, &(0x7f00000049c0)=[{&(0x7f00000036c0)=""/173, 0xad}, {&(0x7f0000003780)=""/247, 0xf7}, {&(0x7f0000003880)}, {&(0x7f00000038c0)=""/131, 0x83}, {&(0x7f0000003980)=""/37, 0x25}, {&(0x7f00000039c0)=""/4096, 0x1000}], 0x6, &(0x7f0000004a40)=""/91, 0x5b}, 0x53ab}], 0x8, 0x12160, &(0x7f0000004cc0)={0x77359400}) readv(r8, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r9, r8) 06:37:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xffff) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r8) openat(r8, &(0x7f00000001c0)='./file0\x00', 0x80100, 0x4) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:37:22 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r5, r4) 06:37:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = io_uring_setup(0x6c6e, &(0x7f0000000040)={0x0, 0xe273, 0x2, 0x8cce, 0x9b, 0x0, r1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="210f00000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000c66495ba2e2a8e6531cef02290e23cd8a8a3c5af8784671f1cb590d253cc3c5c7954571896a4b97f20528e5235ffe6178559"], 0x28}}, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000100)) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f00000000c0)={0x3, 0x7}) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa9ea08050000000000000009"], 0x0) [ 2435.141092][T17472] usb 6-1: USB disconnect, device number 41 06:37:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xf000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x10000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x11000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2435.584154][T21568] usb 3-1: new high-speed USB device number 127 using dummy_hcd 06:37:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x3f000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2435.714404][T17472] usb 6-1: new high-speed USB device number 42 using dummy_hcd 06:37:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x60000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x80010000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2435.863567][T21568] usb 3-1: Using ep0 maxpacket: 16 [ 2436.015259][T21568] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2436.025971][T21568] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2436.051083][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2436.086870][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2436.087842][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2436.264495][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2436.273773][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2436.282279][T17472] usb 6-1: Product: syz [ 2436.287170][T17472] usb 6-1: Manufacturer: syz [ 2436.292060][T17472] usb 6-1: SerialNumber: syz [ 2436.297987][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2436.315042][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2436.323115][T21568] usb 3-1: Product: syz [ 2436.327406][T21568] usb 3-1: Manufacturer: syz [ 2436.332013][T21568] usb 3-1: SerialNumber: syz [ 2436.338685][T21568] usb 3-1: config 0 descriptor?? [ 2436.346128][T17472] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2436.571205][T17775] udc-core: couldn't find an available UDC or it's busy [ 2436.578546][T17775] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2436.597971][T13897] usb 6-1: USB disconnect, device number 42 [ 2436.675806][T21568] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2436.683557][T21568] usb 3-1: selecting invalid altsetting 0 [ 2436.708206][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2436.722674][T21568] usb 3-1: USB disconnect, device number 127 [ 2436.735231][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2436.766790][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2436.779466][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2436.790186][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2436.801213][ T2087] pvrusb2: Failure uploading firmware1 [ 2436.807770][ T2087] pvrusb2: Device initialization was not successful. [ 2436.815745][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2436.825841][T21568] pvrusb2: Device being rendered inoperable [ 2437.384152][T18024] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2437.404148][T21568] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2437.644020][T21568] usb 3-1: Using ep0 maxpacket: 16 [ 2437.764901][T21568] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2437.775136][T21568] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2437.786994][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2437.794907][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2437.801861][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2437.974463][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2437.984472][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2437.992667][T21568] usb 3-1: Product: syz [ 2437.998592][T21568] usb 3-1: Manufacturer: syz [ 2438.003356][T21568] usb 3-1: SerialNumber: syz [ 2438.012366][T21568] usb 3-1: config 0 descriptor?? [ 2438.024984][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2438.035654][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2438.056410][T18024] usb 6-1: Product: syz [ 2438.060706][T18024] usb 6-1: Manufacturer: syz [ 2438.070067][T18024] usb 6-1: SerialNumber: syz [ 2438.145458][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected 06:37:25 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:37:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x833f0000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) accept4$unix(r5, &(0x7f00000003c0), &(0x7f00000001c0)=0x6e, 0x1000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) sendmsg$nl_route(r7, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getstats={0x1c, 0x5e, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) r8 = syz_open_dev$video4linux(&(0x7f0000001b80), 0x0, 0x109000) r9 = pidfd_getfd(r7, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000001c40)={0xa20000, 0x186400, 0x3, r9, 0x0, &(0x7f0000001c00)={0xa2093d, 0x4, '\x00', @string=&(0x7f0000001bc0)=0x4}}) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:37:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:37:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r4, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r5, r4) 06:37:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301100, 0x100) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000400)={0x0, 0x3, 0x10001, 0x1}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000040)) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) mmap(&(0x7f0000546000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, r0, 0x5f8fb000) [ 2438.286275][T21568] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2438.316654][T21568] usb 3-1: selecting invalid altsetting 0 [ 2438.366887][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2438.372205][T21568] usb 3-1: USB disconnect, device number 2 [ 2438.405852][T13897] usb 6-1: USB disconnect, device number 43 [ 2438.416101][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw 06:37:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x9effffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2438.483356][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2438.505567][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2438.533998][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2438.559738][ T2087] pvrusb2: Failure uploading firmware1 [ 2438.571080][ T2087] pvrusb2: Device initialization was not successful. [ 2438.597212][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2438.612516][T21568] pvrusb2: Device being rendered inoperable 06:37:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xf0ffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xfffff000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2438.834212][T13897] usb 6-1: new high-speed USB device number 44 using dummy_hcd 06:37:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xffffff7f}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2438.977334][T21568] usb 3-1: new high-speed USB device number 3 using dummy_hcd 06:37:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) syz_io_uring_setup(0x1d3d, &(0x7f00000003c0)={0x0, 0x5576, 0x1, 0x1, 0x55, 0x0, r1}, &(0x7f00006d4000/0x3000)=nil, &(0x7f00006d4000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000280)=0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0x1, 0x9f, 0xfb, 0x5}, {0x5c, 0x3f, 0x0, 0xfffff78e}, {0x100, 0x5, 0x8}, {0x1000, 0x4, 0x9}, {0x5, 0x0, 0xd0, 0x1}, {0x7, 0x5, 0x8, 0x1}, {0x800, 0x55, 0x3, 0x3ff}, {0x8, 0xf7, 0x2, 0x2}, {0x3, 0x7f, 0x3, 0xffff}]}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000500)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r7, 0x80, 0x0, 0x6, 0x5, 0x1, {0x0, r8}}, 0x1c) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r9, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r9, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r10, r9) [ 2439.195528][T13897] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2439.254475][T21568] usb 3-1: Using ep0 maxpacket: 16 [ 2439.373143][T13897] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2439.392736][T21568] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2439.403361][T13897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2439.426991][T21568] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2439.451057][T13897] usb 6-1: Product: syz [ 2439.456991][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2439.472703][T13897] usb 6-1: Manufacturer: syz [ 2439.485901][T13897] usb 6-1: SerialNumber: syz [ 2439.515985][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2439.560079][T13897] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2439.684875][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2439.699569][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2439.710761][T21568] usb 3-1: Product: syz [ 2439.717037][T21568] usb 3-1: Manufacturer: syz [ 2439.721882][T21568] usb 3-1: SerialNumber: syz [ 2439.737361][T21568] usb 3-1: config 0 descriptor?? [ 2439.771640][T18096] udc-core: couldn't find an available UDC or it's busy [ 2439.781514][T18096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2439.796539][T21568] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2439.821024][T21568] usb 3-1: selecting invalid altsetting 0 [ 2439.841588][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2439.868185][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2439.885703][T21568] usb 6-1: USB disconnect, device number 44 [ 2439.927108][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2439.946263][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2439.966171][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2439.988763][ T2087] pvrusb2: Failure uploading firmware1 [ 2440.005860][T13897] usb 3-1: USB disconnect, device number 3 [ 2440.009116][ T2087] pvrusb2: Device initialization was not successful. [ 2440.032855][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2440.043274][T13897] pvrusb2: Device being rendered inoperable [ 2440.583799][T13897] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2440.783805][T21568] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 2440.943825][T13897] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2441.023911][T21568] usb 3-1: Using ep0 maxpacket: 16 [ 2441.114313][T13897] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2441.123417][T13897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2441.132559][T13897] usb 6-1: Product: syz [ 2441.136852][T13897] usb 6-1: Manufacturer: syz [ 2441.141459][T13897] usb 6-1: SerialNumber: syz [ 2441.147061][T21568] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2441.163189][T21568] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2441.178940][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2441.191865][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2441.199848][T13897] usb-storage 6-1:1.0: USB Mass Storage device detected 06:37:28 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x18, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:37:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_NOP={0x0, 0x1}, 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r9, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@un=@abs, 0x80, &(0x7f0000000280)=[{&(0x7f0000000440)=""/100, 0x64}], 0x1, &(0x7f00000004c0)=""/154, 0x9a}, 0x0, 0x40, 0x1, {0x1}}, 0x3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:37:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xfffffff0}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r7, r6) 06:37:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x99) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)={0x28, r8, 0xf21, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000dc0)=0x14) sendmmsg$sock(r4, &(0x7f0000002340)=[{{&(0x7f00000003c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000440)="a3d2f400ac228cd97c22ac208623cc78ad2cb3bdc7c41d2fdf538eecae5787b6bb70ea7e91887cd4637c9e97e149ea87192ea9ba4e736202bcc8d904d9ff3af50053ed608d14071e2e385445d84e272dde05414a1d4b116a7c0122928041ef882cf4e373a34bfbc9553b39cdc9d0181634f74f79de7792449246aaed9e0cb401ad24054298da84cb48511e723c4bc01049e5cde9487f8251bf3bbe843e38a1481e46806cf9214ca17c22393633e65bd4df447e8570d7fdb9ac87bb02de0cbc2633891fb0afc1b49b52", 0xc9}, {&(0x7f0000000540)="ce8af4e13c9f49cd7f439428fc4e48fdcc1f1c943a62bf6aecb8f8983e2f9cec67e975bbcb723a938c4293be8d2cf51999ad2aefeb39c19783c583cc34994924f7d37358a25d583c3559663a68699009476001a75ff276", 0x57}, {&(0x7f00000005c0)="f5da6952aa375b9343d3d48eb8795ca81bb218555586445ee291d7d360734f86666e61bf2c5c05a6a6a9f4f406669f1258dd07937c47024826d12b548d52d6cd75037f32830d51a158ccf592b846ce4c2470111b6c5c096896f2351f7539181151b9617cac2ec5f4e88c7d2353ab38480dd1c1a2aea60e0d190e94ca2bb3c12730bd985396dda61ac9ba1891955a20db7ac927a076bca331dc68ed7574f9674b8bfcb6c0bb6a636c22a8fa60557a11282214f89495d6848153a79adb31168f82b80dc5a804c9bc2c507d333267d0b643e8a16cba0c", 0xd5}, {&(0x7f00000006c0)="9afa9cbe7d8f84c45858e99f4e01ef42885d8b30266bfd5d7063c59103758e31c58b3c261d5711ab7216c86d2630a33e75101a42fab69974ac5860f3008f89aa24ef46b5d580043923fcf6441798bbcfb5a7500752d8f0cd81dfa975180d716770497be9f5b3882bebd500b4b3036bcec1d4fedf115516f3fc55560d", 0x7c}, {&(0x7f0000000740)="d858143ddf114acf4a2088edb0b34da5f4efaf20dfd9c4ac7a130e823a81852effe9e8e06b83e0bf3f663b0916e887f4363bf714d51448ffd291acbfbae6161f96a3f6affc0538a51ba5cf05616e3f8dbb47105f3def5370f9901e4261ae5a77186dcfcc", 0x64}], 0x5}}, {{&(0x7f0000000840)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xa6d00000}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x34432978}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14}}], 0xa8}}, {{&(0x7f0000000980)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000280)="86f49c9aa6d36e64116af34fbfd2af73d9ace66e920cea88fddf6879fe65ef62804961c298f7b129ec5db0", 0x2b}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x510}}], 0x30}}, {{&(0x7f0000000a80)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @empty}, 0x2, 0x4, 0x1, 0x2}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000b00)="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", 0xfc}], 0x1, &(0x7f0000000c40)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x158c}}, @timestamping={{0x14, 0x1, 0x25, 0x22}}], 0x60}}, {{&(0x7f0000000e00)=@ll={0x11, 0x6, r9, 0x1, 0x5}, 0x80, &(0x7f0000002280)=[{&(0x7f0000000e80)="ce49b0440d63793b7fffbf43b8d9da0394171913664b85c19a6155b5c4a922c3875a47227653d24bbd821f300d83a9a3bed60ea99082", 0x36}, {&(0x7f0000000ec0)="0df48d5a203bc35ce7de28a9915bfac0b2394a3f89e712db7daa23678886a69155083564e7b63b35b29ca5cbc70fa24dcedeebc78136233f05b44ff30d76cdc5c71f2be7ec13a8f8da982af4ef931d197e614a78", 0x54}, {&(0x7f0000000f40)="c709290c6fc10c542a91ed54588c4e68bd68d221eba92245f82b14735a7ad81e519c98e57b7087d3b46313f43c6a9f9088dcd98627673b8f9c2819171b2cf72e730e37", 0x43}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="260d94260020edb52fa43cedab1d933dd47d1ab2b3d7932147b7434ba723bf1e9a54b864828c0cd9f335435bdb638c3b7cea9925bfc9c1964db034c33825d4d73fe333466fefb014830e8797838975c9a9e26992f64b7d245385aa3b40", 0x5d}, {&(0x7f0000002040)="c174df0c2faf71afbe5b52dee1aa5e059b673baa97e5c7e908928d519f9f574e1ef7e71c33", 0x25}, {&(0x7f0000002080)="7e7f9c05d1cffa6d0d0f86f0cddf3719512f34da17f37907583817694ed4c003baba546510a2311558d8fa8a2c096471dbe30ad93af5aa91fa21d1db53ecbeedbcadbde2114e0c8076966159eca1d1b601525a607e3fe73d52b50d2853cb8312e2aca288cca6936f2c041760f1a27b472c996a319a9fa32e8ee31e12353f17549fd3cdcbeb53c562edf922977a1151612c09f962e3ccdd5d64a4723466fb1f0f3b01", 0xa2}, {&(0x7f0000002140)="ebfc26a0b35eeab73aab0fa6bb3da138e1d62b5b5342acebfd491fcbd089ea23ea2d777c4fee1cf8ccd0cfcecf5c2883347d8ab9037b05822c68ee9b9d542beed64ca2d1a25db61036a7cdda27b6c59039f985499f1955d413f8372fd5f77a5d7d8749ac42a1c31c710b1a02135837abfe9683b6a815b14fbdb7b4624eb4403321cecbea3c68fcbcebbd97acd6a01681b83659edea636b4812fcc3316e6e36b9a5ecaa3ea1974525dbc8e6ca02054db88e6a41e16fd4d81d07", 0xb9}, {&(0x7f0000002200)="ec3d46ebcb6fe5a3043e5f4a779b237d7d44bd1a9e555f7e4c2cc02bfee6f6cba529692f4434473275617930a7dd19f2b590ef296d91eeda6bffdb596c3b1b2138390e342bd2d40e72c15d2340d3d1fcf3295a981935e5be70541eb521859ef481ca381f3b194c3bad298899b37e854cdab64938ef4853841175ee3ce68200", 0x7f}], 0x9}}], 0x5, 0x8000) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r10, r6) 06:37:28 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000040)=""/217, 0xd9}, {&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000200)=""/114, 0x72}], 0x4, 0x8001, 0x7) [ 2441.388740][T20594] usb 6-1: USB disconnect, device number 45 [ 2441.410110][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2441.449749][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2441.477780][T21568] usb 3-1: Product: syz [ 2441.499169][T21568] usb 3-1: Manufacturer: syz [ 2441.546968][T21568] usb 3-1: config 0 descriptor?? 06:37:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x1000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2441.604011][T21568] usb 3-1: can't set config #0, error -71 [ 2441.637184][T21568] usb 3-1: USB disconnect, device number 4 06:37:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x40030000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xf0ffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2441.913728][T20594] usb 6-1: new high-speed USB device number 46 using dummy_hcd 06:37:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x100000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2442.027109][T21568] usb 3-1: new high-speed USB device number 5 using dummy_hcd 06:37:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) r8 = dup2(r7, r6) fchmodat(r8, &(0x7f00000001c0)='./file0\x00', 0x44) [ 2442.274699][T20594] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2442.287827][T21568] usb 3-1: Using ep0 maxpacket: 16 [ 2442.413055][T21568] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2442.431779][T21568] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2442.451771][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2442.471942][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2442.490048][T20594] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2442.499209][T20594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.514842][T20594] usb 6-1: Product: syz [ 2442.519038][T20594] usb 6-1: Manufacturer: syz [ 2442.529839][T20594] usb 6-1: SerialNumber: syz [ 2442.576939][T20594] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2442.639572][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2442.669962][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.680012][T21568] usb 3-1: Product: syz [ 2442.692014][T21568] usb 3-1: Manufacturer: syz [ 2442.698090][T21568] usb 3-1: SerialNumber: syz [ 2442.716988][T21568] usb 3-1: config 0 descriptor?? [ 2442.756265][T21568] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2442.770215][T21568] usb 3-1: selecting invalid altsetting 0 [ 2442.790663][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2442.812656][T18319] udc-core: couldn't find an available UDC or it's busy [ 2442.815611][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2442.836614][T18319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2442.856942][T21568] usb 6-1: USB disconnect, device number 46 [ 2442.892676][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2442.922987][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2442.934230][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2442.953398][ T2087] pvrusb2: Failure uploading firmware1 [ 2442.962430][ T2087] pvrusb2: Device initialization was not successful. [ 2442.971927][T20594] usb 3-1: USB disconnect, device number 5 [ 2442.982096][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2443.013784][T20594] pvrusb2: Device being rendered inoperable [ 2443.643711][T20594] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2443.763685][T18024] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2444.004093][T20594] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2444.023760][T18024] usb 3-1: Using ep0 maxpacket: 16 [ 2444.153755][T18024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2444.164888][T18024] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2444.177941][T18024] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2444.183675][T20594] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2444.193766][T18024] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2444.208944][T20594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.217388][T20594] usb 6-1: Product: syz [ 2444.221562][T20594] usb 6-1: Manufacturer: syz [ 2444.227578][T20594] usb 6-1: SerialNumber: syz [ 2444.274784][T20594] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2444.393916][T18024] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2444.403220][T18024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2444.412449][T18024] usb 3-1: Product: syz [ 2444.416875][T18024] usb 3-1: Manufacturer: syz [ 2444.421536][T18024] usb 3-1: SerialNumber: syz [ 2444.434372][T18024] usb 3-1: config 0 descriptor?? [ 2444.476130][T18024] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2444.490816][T18024] usb 3-1: selecting invalid altsetting 0 [ 2444.493080][T18404] udc-core: couldn't find an available UDC or it's busy [ 2444.511878][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2444.518997][T18404] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2444.558863][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2444.579594][T18024] usb 3-1: USB disconnect, device number 6 06:37:31 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:37:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) ioctl$TIOCSERGETLSR(r5, 0x5459, &(0x7f00000001c0)) dup2(r7, r6) 06:37:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x300000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r7, r6) 06:37:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffea5, 0x0, 0xff, 0x0, 0x0, 0x0, 0x41c5, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0)={0x0, 0x2c10, 0x10}, &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) io_uring_enter(r7, 0x559f, 0xeadb, 0x1, &(0x7f00000001c0)={[0xfff]}, 0x8) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:37:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2444.621231][T17472] usb 6-1: USB disconnect, device number 47 [ 2444.687310][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2444.722367][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? 06:37:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x400000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2444.798775][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2444.817299][ T2087] pvrusb2: Failure uploading firmware1 [ 2444.822994][ T2087] pvrusb2: Device initialization was not successful. [ 2444.831494][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2444.869373][T18024] pvrusb2: Device being rendered inoperable 06:37:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x500000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x600000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x700000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) readlinkat(r7, &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)=""/153, 0x99) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:37:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003040), 0x4800, 0x0) io_uring_register$IORING_REGISTER_PROBE(r8, 0x8, &(0x7f0000005b80)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1f) recvmmsg(r7, &(0x7f0000005980)=[{{&(0x7f00000003c0)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000440)=""/195, 0xc3}], 0x1, &(0x7f0000000540)=""/98, 0x62}, 0x80000001}, {{&(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000640)=""/233, 0xe9}, {&(0x7f0000000740)=""/213, 0xd5}, {&(0x7f0000000840)=""/97, 0x61}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/231, 0xe7}], 0x5, &(0x7f0000001a40)=""/137, 0x89}}, {{&(0x7f0000001b00)=@alg, 0x80, &(0x7f0000000280)=[{&(0x7f0000001b80)=""/162, 0xa2}, {&(0x7f0000001c40)=""/218, 0xda}], 0x2, &(0x7f0000001d40)=""/43, 0x2b}, 0xffff}, {{&(0x7f0000001d80)=@llc, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001e00)=""/118, 0x76}], 0x1, &(0x7f0000001ec0)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002ec0)=""/50, 0x32}, {&(0x7f0000002f00)=""/115, 0x73}, {&(0x7f0000002f80)=""/25, 0x19}, {&(0x7f0000002fc0)=""/44, 0x2c}], 0x4, &(0x7f0000003040)}, 0x2}, {{&(0x7f0000003080)=@tipc=@id, 0x80, &(0x7f0000003480)=[{&(0x7f0000003100)=""/20, 0x14}, {&(0x7f0000003140)=""/129, 0x81}, {&(0x7f0000003200)}, {&(0x7f0000003240)=""/238, 0xee}, {&(0x7f0000003340)=""/238, 0xee}, {&(0x7f0000003440)=""/49, 0x31}], 0x6, &(0x7f0000003500)=""/239, 0xef}, 0x7c}, {{0x0, 0x0, &(0x7f0000005900)=[{&(0x7f0000003600)=""/124, 0x7c}, {&(0x7f0000003680)=""/193, 0xc1}, {&(0x7f0000003780)=""/4096, 0x1000}, {&(0x7f0000004780)=""/233, 0xe9}, {&(0x7f0000004880)=""/118, 0x76}, {&(0x7f0000004900)=""/4096, 0x1000}], 0x6}, 0x2}], 0x7, 0x1, &(0x7f0000005b40)) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) [ 2445.269438][T17472] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2445.277315][T18024] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 2445.574394][T18024] usb 3-1: Using ep0 maxpacket: 16 [ 2445.726671][T17472] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2445.739819][T18024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2445.750221][T18024] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2445.766161][T18024] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2445.780444][T18024] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2445.943676][T17472] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2445.952758][T17472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2445.962594][T17472] usb 6-1: Product: syz [ 2445.967481][T17472] usb 6-1: Manufacturer: syz [ 2445.972074][T17472] usb 6-1: SerialNumber: syz [ 2445.993484][T18024] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2446.002555][T18024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2446.021334][T18024] usb 3-1: Product: syz [ 2446.028303][T17472] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2446.035489][T18024] usb 3-1: Manufacturer: syz [ 2446.040099][T18024] usb 3-1: SerialNumber: syz [ 2446.054456][T18024] usb 3-1: config 0 descriptor?? [ 2446.111327][T18024] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2446.125220][T18024] usb 3-1: selecting invalid altsetting 0 [ 2446.132208][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2446.163871][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2446.241725][T18449] udc-core: couldn't find an available UDC or it's busy [ 2446.265945][T18449] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2446.295108][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2446.323923][T21568] usb 3-1: USB disconnect, device number 7 [ 2446.348862][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2446.365933][ T1913] usb 6-1: USB disconnect, device number 48 [ 2446.460918][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2446.525363][ T2087] pvrusb2: Failure uploading firmware1 [ 2446.574344][ T2087] pvrusb2: Device initialization was not successful. [ 2446.606598][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2446.618585][T21568] pvrusb2: Device being rendered inoperable [ 2447.153306][ T1913] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2447.194000][T21568] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2447.433573][T21568] usb 3-1: Using ep0 maxpacket: 16 [ 2447.513596][ T1913] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2447.563462][T21568] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2447.574025][T21568] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2447.586209][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2447.600006][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2447.693471][ T1913] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2447.702558][ T1913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2447.712074][ T1913] usb 6-1: Product: syz [ 2447.716935][ T1913] usb 6-1: Manufacturer: syz [ 2447.721532][ T1913] usb 6-1: SerialNumber: syz [ 2447.763545][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2447.774441][ T1913] usb-storage 6-1:1.0: USB Mass Storage device detected 06:37:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) syz_io_uring_setup(0x1557, &(0x7f00000003c0)={0x0, 0xeb4f, 0xcda15c9970af0701, 0x1, 0x95, 0x0, r7}, &(0x7f00006d6000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r8, &(0x7f0000000500)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r7, 0x0, &(0x7f0000000440)="7f30d876ce9fe00a2cc6e3c1b7d2de16f58b390b5e3ef2adee11b10d11d990a83ac57b3c026b81c31185a22c9adaa360c00207d4142dafe4cdefd8482e2faedcf373da454ffdd6f81364424d1dee66a97f9896e9f3ae1036ed6e264cb5fc8a7f0d60ce7d2ae9087b7b1c383d7f88baf251b56987b32deb236a67ede42a331e4c027180d1c84984c32473aa8a346336c3457c71ec85c8eb1b4b38d2bce67e255cf977a6aa5a13b44e20e0d2f56144a08e87cc8e", 0xb3, 0x40000000, 0x1}, 0x986) dup2(r7, r6) 06:37:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x800000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r7, r6) [ 2447.803921][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2447.813910][T21568] usb 3-1: Product: syz [ 2447.818101][T21568] usb 3-1: Manufacturer: syz [ 2447.822699][T21568] usb 3-1: SerialNumber: syz 06:37:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) 06:37:35 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) [ 2447.878114][ T1913] usb 6-1: USB disconnect, device number 49 [ 2447.948443][T21568] usb 3-1: config 0 descriptor?? 06:37:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2448.003983][T21568] usb 3-1: can't set config #0, error -71 [ 2448.035797][T21568] usb 3-1: USB disconnect, device number 8 06:37:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x900000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xa00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xb00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xe00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2448.453331][ T1913] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2448.474329][T21568] usb 3-1: new high-speed USB device number 9 using dummy_hcd 06:37:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xf00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x1, 0x2, 0x8, 0x94, 0x0, 0x0, 0x1000, 0xc, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x900, 0x6, 0x5, 0x8, 0x8, 0x1, 0x4, 0x0, 0x401, 0x0, 0x1}, r1, 0xc, r0, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) io_uring_enter(r2, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r7, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:37:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x1000000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x1100000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2448.727373][T21568] usb 3-1: Using ep0 maxpacket: 16 06:37:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r3, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r4, r3) [ 2448.848958][ T1913] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2448.862727][T21568] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2448.896958][T21568] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2448.942944][T21568] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2449.010729][T21568] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2449.078805][ T1913] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2449.130524][ T1913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.157788][ T1913] usb 6-1: Product: syz [ 2449.162440][ T1913] usb 6-1: Manufacturer: syz [ 2449.184347][ T1913] usb 6-1: SerialNumber: syz [ 2449.207491][T21568] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2449.231151][T21568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.276483][ T1913] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2449.289554][T21568] usb 3-1: Product: syz [ 2449.312124][T21568] usb 3-1: Manufacturer: syz [ 2449.318674][T21568] usb 3-1: SerialNumber: syz [ 2449.350334][T21568] usb 3-1: config 0 descriptor?? 06:37:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_XOR={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@mpls_getnetconf={0x2c, 0x52, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @NETCONFA_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008800}, 0x40) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) [ 2449.425751][T21568] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2449.435152][T21568] usb 3-1: selecting invalid altsetting 0 [ 2449.441447][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2449.457721][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2449.485547][T18801] udc-core: couldn't find an available UDC or it's busy [ 2449.492523][T18801] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2449.523525][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2449.532318][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2449.554561][T10810] usb 6-1: USB disconnect, device number 50 [ 2449.593530][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2449.645886][ T1913] usb 3-1: USB disconnect, device number 9 [ 2449.664166][ T2087] pvrusb2: Failure uploading firmware1 [ 2449.669648][ T2087] pvrusb2: Device initialization was not successful. [ 2449.703112][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2449.720283][ T1913] pvrusb2: Device being rendered inoperable [ 2450.353139][T21565] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2450.443124][T18024] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 2450.703089][T18024] usb 3-1: Using ep0 maxpacket: 16 [ 2450.733270][T21565] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2450.833302][T18024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2450.845098][T18024] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2450.858008][T18024] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2450.873171][T18024] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2450.923266][T21565] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2450.932560][T21565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2450.942192][T21565] usb 6-1: Product: syz [ 2450.947868][T21565] usb 6-1: Manufacturer: syz [ 2450.952476][T21565] usb 6-1: SerialNumber: syz 06:37:38 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) [ 2450.997338][T21565] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2451.074054][T18024] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2451.111626][T21565] usb 6-1: USB disconnect, device number 51 06:37:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r8, &(0x7f00000003c0)=@abs, &(0x7f0000000280)=0x6e, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:37:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x3f00000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) getpid() io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:37:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r3, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r4, r3) 06:37:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000002040)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000001ec0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000000180)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000000300)=""/24, 0x18}], 0x2, &(0x7f0000001400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000001540)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/213, 0xd5}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f00000016c0)=""/109, 0x6d}, {&(0x7f0000001740)=""/46, 0x2e}], 0x4, &(0x7f00000017c0)=[@rights={{0x10}}], 0x10}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001800)=""/53, 0x35}, {&(0x7f0000001840)=""/145, 0x91}, {&(0x7f0000001900)=""/242, 0xf2}, {&(0x7f0000001a00)=""/186, 0xba}], 0x4, &(0x7f0000001b00)}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b40)=""/44, 0x2c}, {&(0x7f0000001b80)=""/189, 0xbd}, {&(0x7f0000001c40)=""/114, 0x72}], 0x3, &(0x7f0000001d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001dc0)=""/147, 0x93}], 0x1}}], 0x6, 0x40000001, &(0x7f0000002080)={r2, r3+10000000}) open_tree(r4, &(0x7f00000020c0)='./file0\x00', 0x1) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2451.125748][T18024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2451.154585][T18024] usb 3-1: Product: syz [ 2451.169461][T18024] usb 3-1: Manufacturer: syz [ 2451.213096][T18024] usb 3-1: SerialNumber: syz [ 2451.273866][T18024] usb 3-1: config 0 descriptor?? 06:37:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x6000000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2451.312875][T18024] usb 3-1: can't set config #0, error -71 [ 2451.337104][T18024] usb 3-1: USB disconnect, device number 10 06:37:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x8001000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2451.553813][T21565] usb 6-1: new high-speed USB device number 52 using dummy_hcd 06:37:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x833f000000000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2451.762925][T18024] usb 3-1: new high-speed USB device number 11 using dummy_hcd 06:37:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x9effffff00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0x77b, &(0x7f0000001500), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000014c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000180)=0x307c, 0x0, 0x4) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop4', 0x0, 0x3) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r11, &(0x7f00000000c0), 0x0, 0x0, 0x81000, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2004, @fd=r5, 0x8001, &(0x7f00000003c0)=""/191, 0xbf, 0x10, 0x0, {0x0, r12}}, 0x800) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:37:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xf0ffffff00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2451.945549][T21565] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2452.023335][T18024] usb 3-1: Using ep0 maxpacket: 16 [ 2452.164598][T18024] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2452.193772][T21565] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2452.210517][T18024] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2452.224490][T21565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2452.232508][T21565] usb 6-1: Product: syz [ 2452.313630][T18024] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2452.353125][T21565] usb 6-1: Manufacturer: syz [ 2452.357767][T21565] usb 6-1: SerialNumber: syz [ 2452.364634][T18024] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2452.410338][T21565] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2452.535538][T18024] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2452.544906][T18024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2452.554881][T18024] usb 3-1: Product: syz [ 2452.559438][T18024] usb 3-1: Manufacturer: syz [ 2452.566125][T18024] usb 3-1: SerialNumber: syz [ 2452.587804][T18024] usb 3-1: config 0 descriptor?? [ 2452.614156][T19101] udc-core: couldn't find an available UDC or it's busy [ 2452.621128][T19101] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2452.659512][ T1913] usb 6-1: USB disconnect, device number 52 [ 2452.681687][T18024] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2452.719189][T18024] usb 3-1: selecting invalid altsetting 0 [ 2452.746755][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2452.768556][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2452.830337][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2452.845005][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2452.868500][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2452.893582][T18024] usb 3-1: USB disconnect, device number 11 [ 2452.931230][ T2087] pvrusb2: Failure uploading firmware1 [ 2452.937463][ T2087] pvrusb2: Device initialization was not successful. [ 2452.945940][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2452.956098][T18024] pvrusb2: Device being rendered inoperable [ 2453.453116][T18024] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2453.832992][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2454.003050][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2454.012811][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2454.021013][T18024] usb 6-1: Product: syz [ 2454.026858][T18024] usb 6-1: Manufacturer: syz [ 2454.031531][T18024] usb 6-1: SerialNumber: syz [ 2454.084263][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected 06:37:41 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:37:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffa) io_uring_enter(r1, 0x2a6e, 0xfa4, 0x0, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0\x00', 0xc0, 0x4081c0, 0x12345, {0x0, r6}}, 0x5) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r7, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r8, r7) 06:37:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r8 = gettid() tkill(r8, 0x3d) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1}, 0x800) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a005f0214f9f407000904001f000000", 0x14) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) 06:37:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r3, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0xfffffdef}], 0x1) dup2(r4, r3) 06:37:41 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800006, 0x12, r0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x6, 0x6, 0x10001}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000795b6510402010752c830102030109022d0001000000000904000803996fa90009050000000000000009"], 0x0) [ 2454.177993][T18024] usb 6-1: USB disconnect, device number 53 06:37:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0xfffffffffffff000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2454.583566][T21565] usb 3-1: new high-speed USB device number 12 using dummy_hcd 06:37:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2454.713106][T18024] usb 6-1: new high-speed USB device number 54 using dummy_hcd 06:37:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x0, 0x6}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) [ 2454.822954][T21565] usb 3-1: Using ep0 maxpacket: 16 [ 2454.942851][T21565] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2454.953312][T21565] usb 3-1: config 0 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 2454.964025][T21565] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2454.977024][T21565] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2455.083560][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2455.142915][T21565] usb 3-1: New USB device found, idVendor=2040, idProduct=7510, bcdDevice=83.2c [ 2455.152000][T21565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2455.167324][T21565] usb 3-1: Product: syz [ 2455.171508][T21565] usb 3-1: Manufacturer: syz [ 2455.177621][T21565] usb 3-1: SerialNumber: syz [ 2455.197448][T21565] usb 3-1: config 0 descriptor?? [ 2455.240257][T21565] pvrusb2: Hardware description: WinTV HVR-1975 Model 160000 [ 2455.253873][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2455.264022][T21565] usb 3-1: selecting invalid altsetting 0 [ 2455.269837][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2455.286192][ T2087] usb 3-1: Direct firmware load for v4l-pvrusb2-160xxx-01.fw failed with error -2 [ 2455.302953][ T2087] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-160xxx-01.fw [ 2455.313772][T18024] usb 6-1: Product: syz [ 2455.322750][T18024] usb 6-1: Manufacturer: syz [ 2455.327456][T18024] usb 6-1: SerialNumber: syz [ 2455.362891][ T2087] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 2455.383588][ T2087] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 2455.395237][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2455.424537][ T2087] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-160xxx-01.fw [ 2455.435355][ T2087] pvrusb2: Failure uploading firmware1 [ 2455.440936][ T2087] pvrusb2: Device initialization was not successful. [ 2455.448644][ T5709] usb 3-1: USB disconnect, device number 12 [ 2455.477356][ T2087] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 2455.497996][ T5709] pvrusb2: Device being rendered inoperable [ 2455.602957][T19400] udc-core: couldn't find an available UDC or it's busy [ 2455.609929][T19400] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2455.628875][T21565] usb 6-1: USB disconnect, device number 54 [ 2456.392652][T21568] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2456.792940][T21568] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2456.962671][T21568] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2456.971848][T21568] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2456.982629][T21568] usb 6-1: Product: syz [ 2456.986816][T21568] usb 6-1: Manufacturer: syz [ 2456.991417][T21568] usb 6-1: SerialNumber: syz [ 2457.043573][T21568] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2457.244870][T19458] udc-core: couldn't find an available UDC or it's busy [ 2457.251820][T19458] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 06:37:44 executing program 5: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xce, 0xb7, 0x65, 0x0, 0x177f, 0x323, 0x8f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x90, 0xf7, 0x3b, 0x0, [], [{}, {}]}}]}}]}}, 0x0) 06:37:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@private, {0x0, 0x0, 0x0, 0x7}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 06:37:44 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x50, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f00006d6000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x2a6e, 0x0, 0x0, 0x0, 0xe) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd=r6, 0x9, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/132, 0x84}], 0x1) dup2(r7, r6) [ 2457.291675][T18024] usb 6-1: USB disconnect, device number 55 [ 2457.762619][T18024] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2458.152660][T18024] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2458.353365][T18024] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2458.362568][T18024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2458.370571][T18024] usb 6-1: Product: syz [ 2458.375223][T18024] usb 6-1: Manufacturer: syz [ 2458.379838][T18024] usb 6-1: SerialNumber: syz [ 2458.433970][T18024] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2458.638725][T19483] udc-core: couldn't find an available UDC or it's busy [ 2458.645888][T19483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2458.661874][T17472] usb 6-1: USB disconnect, device number 56 [ 2459.422599][ T5709] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2459.814435][ T5709] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 2459.992487][ T5709] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2460.001563][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2460.011419][ T5709] usb 6-1: Product: syz [ 2460.016566][ T5709] usb 6-1: Manufacturer: syz [ 2460.021185][ T5709] usb 6-1: SerialNumber: syz [ 2460.073703][ T5709] usb-storage 6-1:1.0: USB Mass Storage device detected [ 2460.275500][T19724] udc-core: couldn't find an available UDC or it's busy [ 2460.284957][T19724] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 2460.294706][T17472] usb 6-1: USB disconnect, device number 57 [ 2467.092971][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.099296][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 2528.528466][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.534783][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 2589.974538][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 2589.980866][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 2612.362109][ T27] INFO: task syz-executor.4:19395 blocked for more than 143 seconds. [ 2612.370309][ T27] Not tainted 5.15.0-rc1-syzkaller #0 [ 2612.376789][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2612.385625][ T27] task:syz-executor.4 state:D stack:26176 pid:19395 ppid: 6979 flags:0x00004004 [ 2612.399848][ T27] Call Trace: [ 2612.405162][ T27] __schedule+0x940/0x26f0 [ 2612.409629][ T27] ? io_schedule_timeout+0x140/0x140 [ 2612.417875][ T27] schedule+0xd3/0x270 [ 2612.430423][ T27] schedule_timeout+0x1db/0x2a0 [ 2612.435812][ T27] ? usleep_range+0x170/0x170 [ 2612.440516][ T27] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2612.447425][ T27] ? trace_hardirqs_on+0x38/0x1c0 [ 2612.453239][ T27] ? _raw_spin_unlock_irq+0x25/0x40 [ 2612.458468][ T27] wait_for_completion+0x176/0x280 [ 2612.464112][ T27] ? io_wq_put_and_exit+0x45c/0xd20 [ 2612.469401][ T27] ? bit_wait_io_timeout+0x160/0x160 [ 2612.475189][ T27] ? xas_find+0x2fe/0x7d0 [ 2612.479661][ T27] ? kasan_quarantine_put+0xf5/0x210 [ 2612.485416][ T27] io_wq_put_and_exit+0x4b2/0xd20 [ 2612.490498][ T27] ? io_wq_exit_start+0x20/0x20 [ 2612.495975][ T27] io_uring_cancel_generic+0x5fe/0x740 [ 2612.501467][ T27] ? __io_uring_free+0x170/0x170 [ 2612.507478][ T27] ? trace_hardirqs_on+0x38/0x1c0 [ 2612.513650][ T27] ? finish_wait+0x270/0x270 [ 2612.518568][ T27] ? _raw_spin_unlock_irqrestore+0x38/0x70 [ 2612.524933][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2612.531273][ T27] ? __validate_process_creds+0x20c/0x370 [ 2612.537447][ T27] do_exit+0x265/0x2a30 [ 2612.542051][ T27] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2612.548236][ T27] ? lockdep_hardirqs_on+0x79/0x100 [ 2612.553652][ T27] ? mm_update_next_owner+0x7a0/0x7a0 [ 2612.559056][ T27] ? trace_hardirqs_on+0x38/0x1c0 [ 2612.564592][ T27] do_group_exit+0x125/0x310 [ 2612.569219][ T27] get_signal+0x47f/0x2160 [ 2612.574156][ T27] arch_do_signal_or_restart+0x2a9/0x1c40 [ 2612.580100][ T27] ? kcov_remote_stop+0x3a0/0x3a0 [ 2612.585544][ T27] ? queue_work_on+0xb3/0x110 [ 2612.590253][ T27] ? get_sigframe_size+0x10/0x10 [ 2612.595659][ T27] exit_to_user_mode_prepare+0x17d/0x290 [ 2612.601320][ T27] syscall_exit_to_user_mode+0x19/0x60 [ 2612.607342][ T27] do_syscall_64+0x42/0xb0 [ 2612.615219][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2612.622556][ T27] RIP: 0033:0x4665f9 [ 2612.626476][ T27] RSP: 002b:00007f28ff992188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2612.635111][ T27] RAX: 0000000000000080 RBX: 000000000056bf80 RCX: 00000000004665f9 [ 2612.643244][ T27] RDX: 0000000000000000 RSI: 0000000000002a6e RDI: 0000000000000004 [ 2612.651330][ T27] RBP: 00000000004bfcc4 R08: 0000000000000000 R09: 000000000000000e [ 2612.659404][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf80 [ 2612.667580][ T27] R13: 0000000000a9fb1f R14: 00007f28ff992300 R15: 0000000000022000 [ 2612.675736][ T27] [ 2612.675736][ T27] Showing all locks held in the system: [ 2612.684418][ T27] 3 locks held by kworker/u4:1/10: [ 2612.689540][ T27] 1 lock held by khungtaskd/27: [ 2612.696725][ T27] #0: ffffffff8b97fe20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 2612.708504][ T27] 1 lock held by in:imklog/6266: [ 2612.714316][ T27] #0: ffff88801b3f8d70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 2612.726015][ T27] 3 locks held by kworker/u4:10/25694: [ 2612.731486][ T27] #0: ffff8880b9c31a58 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x236/0x26f0 [ 2612.740663][ T27] #1: ffff8880b9c1f9c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39d/0x480 [ 2612.752549][ T27] #2: ffff88802227cd80 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0x93/0xe80 [ 2612.765372][ T27] [ 2612.767712][ T27] ============================================= [ 2612.767712][ T27] [ 2612.777642][ T27] NMI backtrace for cpu 1 [ 2612.781981][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc1-syzkaller #0 [ 2612.790137][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2612.800175][ T27] Call Trace: [ 2612.803445][ T27] dump_stack_lvl+0xcd/0x134 [ 2612.808049][ T27] nmi_cpu_backtrace.cold+0x47/0x144 [ 2612.813331][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 2612.818629][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 2612.824648][ T27] watchdog+0xc1d/0xf50 [ 2612.828811][ T27] ? reset_hung_task_detector+0x30/0x30 [ 2612.834363][ T27] kthread+0x3e5/0x4d0 [ 2612.838440][ T27] ? set_kthread_struct+0x130/0x130 [ 2612.843644][ T27] ret_from_fork+0x1f/0x30 [ 2612.849113][ T27] Sending NMI from CPU 1 to CPUs 0: [ 2612.854739][ C0] NMI backtrace for cpu 0 [ 2612.854751][ C0] CPU: 0 PID: 25694 Comm: kworker/u4:10 Not tainted 5.15.0-rc1-syzkaller #0 [ 2612.854781][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2612.854796][ C0] Workqueue: phy3 ieee80211_iface_work [ 2612.854824][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x18/0x80 [ 2612.854854][ C0] Code: 4c 38 f0 4e 89 54 c8 20 48 89 10 c3 66 0f 1f 44 00 00 53 41 89 fb 41 89 f1 bf 03 00 00 00 65 48 8b 0c 25 40 f0 01 00 48 89 ce <4c> 8b 54 24 08 e8 4e f1 ff ff 84 c0 74 51 48 8b 81 20 15 00 00 44 [ 2612.854876][ C0] RSP: 0018:ffffc900049c6ec0 EFLAGS: 00000246 [ 2612.854892][ C0] RAX: 0000000000000000 RBX: 0000000000000032 RCX: ffff88808e383900 [ 2612.854907][ C0] RDX: fffff52000938def RSI: ffff88808e383900 RDI: 0000000000000003 [ 2612.854922][ C0] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 2612.854936][ C0] R10: fffff52000938dee R11: 0000000000000000 R12: 0000000000000032 [ 2612.854950][ C0] R13: dffffc0000000000 R14: ffff88803e62c88e R15: ffff88803e62c88d [ 2612.854966][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 2612.854988][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2612.855004][ C0] CR2: 00007f9be081b000 CR3: 000000000b68e000 CR4: 00000000001506f0 [ 2612.855019][ C0] Call Trace: [ 2612.855026][ C0] _ieee802_11_parse_elems_crc+0x227/0x20f0 [ 2612.855127][ C0] ? ieee80211_handle_reconfig_failure+0x240/0x240 [ 2612.855156][ C0] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 2612.855182][ C0] ? cfg80211_find_elem_match+0x193/0x1d0 [ 2612.855246][ C0] ? __kmalloc+0x184/0x320 [ 2612.855274][ C0] ieee802_11_parse_elems_crc+0x89e/0xfe0 [ 2612.855309][ C0] ? ieee80211_wake_vif_queues+0x40/0x40 [ 2612.855333][ C0] ? cfg80211_inform_single_bss_frame_data+0xee0/0xee0 [ 2612.855363][ C0] ? mark_lock+0xef/0x17b0 [ 2612.855390][ C0] ieee80211_bss_info_update+0x468/0xb60 [ 2612.855417][ C0] ? ieee80211_rx_bss_put+0x50/0x50 [ 2612.855469][ C0] ? ieee80211_rx_mgmt_probe_beacon+0xc87/0x17c0 [ 2612.855497][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2612.855519][ C0] ? ieee80211_sta_get_rates+0x67f/0x960 [ 2612.855545][ C0] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 2612.855569][ C0] ? ieee80211_mandatory_rates+0x1ad/0x240 [ 2612.855597][ C0] ieee80211_rx_mgmt_probe_beacon+0xcce/0x17c0 [ 2612.855624][ C0] ? mark_lock+0xef/0x17b0 [ 2612.855650][ C0] ? ieee80211_ibss_add_sta+0x740/0x740 [ 2612.855677][ C0] ? __lock_acquire+0x162f/0x54a0 [ 2612.855732][ C0] ? mark_lock+0xef/0x17b0 [ 2612.855755][ C0] ? mark_lock+0xef/0x17b0 [ 2612.855780][ C0] ? mark_lock+0xef/0x17b0 [ 2612.855801][ C0] ? __lockdep_reset_lock+0x1a0/0x1a0 [ 2612.855824][ C0] ? lock_chain_count+0x20/0x20 [ 2612.855849][ C0] ieee80211_ibss_rx_queued_mgmt+0xd37/0x1610 [ 2612.855877][ C0] ? mark_lock+0xef/0x17b0 [ 2612.855899][ C0] ? ieee80211_ibss_rx_no_sta+0x830/0x830 [ 2612.855929][ C0] ? __lock_acquire+0x162f/0x54a0 [ 2612.855957][ C0] ? mark_lock+0xef/0x17b0 [ 2612.855979][ C0] ? mark_lock+0xef/0x17b0 [ 2612.856000][ C0] ? perf_trace_lock+0xeb/0x4d0 [ 2612.856023][ C0] ? lock_chain_count+0x20/0x20 [ 2612.856045][ C0] ? __lockdep_reset_lock+0x1a0/0x1a0 [ 2612.856071][ C0] ? find_held_lock+0x2d/0x110 [ 2612.856095][ C0] ? ieee80211_iface_work+0x28e/0xd00 [ 2612.856124][ C0] ? mark_held_locks+0x9f/0xe0 [ 2612.856147][ C0] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 2612.856176][ C0] ieee80211_iface_work+0xa65/0xd00 [ 2612.856206][ C0] process_one_work+0x9bf/0x16b0 [ 2612.856238][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 2612.856268][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 2612.856291][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 2612.856317][ C0] worker_thread+0x658/0x11f0 [ 2612.856343][ C0] ? process_one_work+0x16b0/0x16b0 [ 2612.856371][ C0] kthread+0x3e5/0x4d0 [ 2612.856394][ C0] ? set_kthread_struct+0x130/0x130 [ 2612.856420][ C0] ret_from_fork+0x1f/0x30 [ 2612.857181][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 2613.240079][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc1-syzkaller #0 [ 2613.248215][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2613.258255][ T27] Call Trace: [ 2613.261527][ T27] dump_stack_lvl+0xcd/0x134 [ 2613.266113][ T27] panic+0x2b0/0x6dd [ 2613.269995][ T27] ? __warn_printk+0xf3/0xf3 [ 2613.274571][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 2613.279759][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 2613.285120][ T27] ? nmi_trigger_cpumask_backtrace+0x191/0x220 [ 2613.291262][ T27] ? watchdog.cold+0x130/0x158 [ 2613.296024][ T27] watchdog.cold+0x141/0x158 [ 2613.300605][ T27] ? reset_hung_task_detector+0x30/0x30 [ 2613.306142][ T27] kthread+0x3e5/0x4d0 [ 2613.310199][ T27] ? set_kthread_struct+0x130/0x130 [ 2613.315386][ T27] ret_from_fork+0x1f/0x30 [ 2613.320234][ T27] Kernel Offset: disabled [ 2613.324559][ T27] Rebooting in 86400 seconds..