a32c7a2778944a2eacba03e3312fe968fa3be0e2ceb4d8526803e7a8f24618b1003860e424da518c9602cb092c9c6b930b72523bbf615ad8330e337e64ff82eb78d9a2384e86afece8aa9d9cb1b7ab27265261a3cf542e1655792ed66b28d27bf4f02d13e93413bfc5fae7dbec15aac85331ae3d4032679988ffd1c1750447f763ebc9ba8f8ba4521b74563af6ee8a996af3707dd03118c3f0d18d612a5105519310f7b8c5eb4b7e3a0d675374da18314d144b5d5d0ba2735dab4efdf68f78285ce4d35032427e23fe7c59c5844879550417dc93d2221fe0ff82c7e21ebba19c01fefc6f6eeb7078e7557f077ca089246e6f3901e127ca4685c191847ae720ce30d41939239b2835d9cfd126faabc88eb80d409d8ec1cdf6070c55109bdbbb668fd56c6ebd3503986cdf5ade19903a85516f0ed87872f397e6244b0f58c70b8dd0cbc408dd7a87c42d672d31fde7fbc31b3acff4be744b933ec0645f76b52481ba6f50a25a98f89d9989e347b682a459eb38004d0de0a7314f8319b1e0ce5152a4928d7f59769347a7f48af595d028b5012cf5b7fc081cbec3c5ad30801947b5d3f87a242b05691ef3f46f0ba35fa6ee28a966ad42e34ef6192cb6e5de41411df4638c825688abc1c8f1fa7b2eced5ae40a5d35d7cfd981f4dd46a91e8f123187d8e99a947020cdc4cfcb66ee004232ed5badfa694fd943ed59f01433989e5663a77fd2bbcdbfaad5ab482150f22ffa6b1ae9e99134b320c04444c3d5d71e37c6d4faf82b1297d75a520e6e6c5a0d7ab86dea5245a97b16a7690f50e9abd452da33c58974cb63e4711fece83cf1251c6eecc7c9a887b0a881f148b6c8fa3749ef09661488909a2f74e41a4968f5f1d1ebd9a511f5732ed60a18032d68dcf34a5914b1c24275e6c3d331a8c454e4c615dc5f6ce4de1b44fc755da73eef517bca08fa464443eabf4046961625ee82c406e08359b49785a1cbe9822cada3375da9adf55bd50e156a314f10107a3fb880a944fa3a0cdb4be2234c19ab26f8075c6389a0a6062e82050b493a30e617f728b8d0ced0b69da60c6fdadd95ee1c0e656b63ecc72a491e07bce4c3df3761e51bb327a86d55a375e4f5859a8b179a47f4b5b8b85fed0db916e31885d0ad185d6c7e79449e282a5d10a7cf86d0305a2673cd9aa834d130fcb1098c0f69771ae23e2b49cdd3d39be17fcc309a282486bf0e0829a0805a036b0b1e357f03a861857312dab3033f00957ff6f03a35240724bc6adf429090f555aca563ffb5e4b67c75486149f2495971bf653617f29e50d59da32288afeabc768787d2e830c70d5f0dbd8db5e9923b8893f32c4cdc0d8130caefade59d7f5e270f8b5487b69815dd8cec6d3dfa3ca308987f2970ab3e8714cdbae27dc22fa434805c9284b904840a92bc76490c15c6a04df137940d48f7ac6285f858611376f447ebaf11ce4014066d57e5fa579b588e0d795fb0322d1b8606faf9507092be3e320184a5324df47792e8b015ee27ace73b0bc05f3eff2c2a9ee45752df32a85b1ad5679aedbe40ac59511938929e210a409e538c139d1fb93891d2b9908f915b9c556788bb8926b6a96923038a119eb68bcb528a42e97f8fbd49e7d5bb3e51987cca590ea8a18e049f64d8c994d63a707c441e63509f909adf5f7c26d36714bd56307513003f8f85f20c8fea4248627d2f19891baef9b134a8ecb6e3da6232c5b818d7469645038312b6b952f782f28ccd199367a51f750927e5f11ef04cb299dc7ba0c24500134d3a9a0a4f62903ae930f5ba49c39855ffc4aba6cc9d400075f094875db9ebcbcbb35309421d08a928b0216dcbbf718761b01b4d41cf55b0b2bf4c89603a61e5ac2f5bf5236d4bee90617e1b2fdc3a4540db2c89561c1cb9b1e28436013546e654e36fa328097ce8a4baf5a2fd78f9bca617bd4de062dbbc38c7356232b385823b6c604a401f43f5864111eff29045c12b6c622182e097caa5a9945133375b46dc0e268e860dd58b62403c41393f02c7f1d23a1d0daad5d2eb7a085387ea6b81ceb6191d5ffa7f58848996caad4796ee8d9e1bad072455a37d8b64888cb4007f344783afca22db07a2ccb8531c6a9ec9bffdf1f949e3fce89f623119595c5b9bfa51893ff36849be61ff02939360a5d5b0e05d22aa3a1f16c27103edeb00c0f763bd4251805ec8d894692cd1636b4b1c96ab613896c17b2fb8a414a91463d54f145e1d49378e726e5921d8cd34aeb176a36701c9b75311806efcf402d4345034d7fd5165857bd2cd07b32a18334a3cf358dadbc8144b806120805a07714d8d0029fe0db7958bbb69b9a216e5945fdf0b892665c0bad2cd822797d5c7223094cd54042c781fba9d7f05a169f390225385d5c055896dc8a620a637a7c73ee77fbf2152fb62af9bcbe01389dd846724fa24ca6088d2bddf9bcae4d9e11f86266e4d87f6b11f3721c30c3f48ddfecb7623802c7e3f595b088473747d25b70bbdf8920924c6bb9e202e6d54e340a469e8ecf66b49dda0036a7d071492742593c2e02bd7bd703774f2ac8c45dbfa1f8ce4c205a05064362bf2819e80bd406367a86ece3f5d54b43029b3f7fcc2378c5e33e8de66fa5f3c4974310c3ac4d2ab1234b1fea14d71512c578dfab154a74dc66c8a5ff983a41e02c57c58cd9c3a77d22f15f8a6abe41de51ce4a92151ee25c6f2c4feb0453b4f86fb4c7e19063b871ff6458b2ad51b992df6b16de3a5a2f5935c85d5a8709d82943c645f6199e76b38d718b86945638d92daa15aeb9beaa53028a425c6ee90dbd58b57f4a748ec0037fca725812aaac8e201d5121c06c9d3bfcbe799b9fa28440fceec78a5d39a112626bd0f9e530cb5573083e6b3b0ce5ef60e85ea643331d45663f309d75d36c88ed56abbac74672daa72c2f180ab5d117d2ab17db9e36a807bcaa62a07aa5486d39d63f64d23f03e58f6fa346b39005cde05121ecc2146ae982d02532a2deb90d8b9cfd32ff03a5294933292fb3d58760bc81a72df0e602b9b4b7e407bc542924e9763fe0d4bd5346ccb9e10b1ea7dade31d4bbc900"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:10:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0005000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1228.450701][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1228.459999][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.468295][ T8511] usb 4-1: Product: syz [ 1228.472571][ T8511] usb 4-1: Manufacturer: syz [ 1228.477416][ T8511] usb 4-1: SerialNumber: syz 17:10:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x700}}], 0x1, 0x0) [ 1228.856642][T29621] fuse: Bad value for 'user_id' [ 1228.871401][ T8510] usb 4-1: USB disconnect, device number 17 [ 1229.696084][ T8510] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1229.956438][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1230.108466][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1230.116943][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.127264][ T8510] usb 4-1: config 6 has no interface number 0 [ 1230.133480][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1230.310550][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1230.319851][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.328156][ T8510] usb 4-1: Product: syz [ 1230.332415][ T8510] usb 4-1: Manufacturer: syz [ 1230.337250][ T8510] usb 4-1: SerialNumber: syz 17:10:03 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x3, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000080010001f"], 0x58}}, 0x0) 17:10:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x810}}], 0x1, 0x0) 17:10:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x60, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0006000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:03 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x77, 0x68, 0x9e, 0x40, 0xc45, 0x6005, 0xf3d7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x82, 0x85}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000080)={0x40, 0x14, 0x12, "164606f9ad10824a8c19f5ebbc444fd6246c"}, 0x0, 0x0, 0x0, 0x0}) [ 1230.486097][ T8510] usb 4-1: can't set config #6, error -71 [ 1230.536604][ T8510] usb 4-1: USB disconnect, device number 18 17:10:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xbb8}}], 0x1, 0x0) [ 1231.049054][ T8521] usb 6-1: new high-speed USB device number 33 using dummy_hcd 17:10:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0007000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1231.155966][ T8510] usb 4-1: new high-speed USB device number 19 using dummy_hcd 17:10:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="10000a0010001f"], 0x58}}, 0x0) 17:10:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x1008}}], 0x1, 0x0) [ 1231.419795][ T8521] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=f3.d7 [ 1231.429362][ T8521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.435854][ T8510] usb 4-1: Using ep0 maxpacket: 32 17:10:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x1100}}], 0x1, 0x0) [ 1231.570376][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1231.574465][ T8521] usb 6-1: config 0 descriptor?? [ 1231.578885][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.578956][ T8510] usb 4-1: config 6 has no interface number 0 [ 1231.579033][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1231.747663][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1231.757277][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.765801][ T8510] usb 4-1: Product: syz [ 1231.770082][ T8510] usb 4-1: Manufacturer: syz [ 1231.774779][ T8510] usb 4-1: SerialNumber: syz 17:10:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0008000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1231.811371][ T8521] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1232.060258][ T8521] usb 6-1: USB disconnect, device number 33 [ 1232.170585][T29703] fuse: Bad value for 'user_id' [ 1232.184605][ T8510] usb 4-1: USB disconnect, device number 19 [ 1232.867478][ T8521] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1232.979035][ T8510] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1233.231108][ T8521] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=f3.d7 [ 1233.233239][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1233.240845][ T8521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.265696][ T8521] usb 6-1: config 0 descriptor?? [ 1233.339213][ T8521] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1233.395656][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1233.404665][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.415028][ T8510] usb 4-1: config 6 has no interface number 0 [ 1233.421381][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1233.527099][ T8521] sonixb 6-1:0.0: Error reading register 00: -71 [ 1233.575058][ T8521] usb 6-1: USB disconnect, device number 34 [ 1233.610580][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1233.619898][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.628232][ T8510] usb 4-1: Product: syz [ 1233.632503][ T8510] usb 4-1: Manufacturer: syz [ 1233.637318][ T8510] usb 4-1: SerialNumber: syz 17:10:07 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x4, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="10000c0010001f"], 0x58}}, 0x0) 17:10:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x2000}}], 0x1, 0x0) 17:10:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0009000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x162, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:07 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) r3 = socket$inet6(0xa, 0x801, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r6) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xc4, "71d66b5a8f5ef9fef817d3c614c7c09809763a344ce6955114f3eb657bdf0afad1f0c19181ca03a97dd0c592722a5e56f0964d4b208505304707905dde16106bc35581baecbaba85cda3f4bc6db7e4e9f9b748edefe378de80c8b40be083c651feec52408acde0a84777f6c6cdab227f2dc966ecab125b123f4cde0b8c3bccf005dbfd5c3157ed85cf61d4ed6d8d962f23518ef4edb2a31023a79e11bcd1ee667381107d175b80b26703e3a881ee59cc5fe218c104cd0ddf29bfc39713bf2b64a54891c2"}, &(0x7f0000000080)=0xcc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r5, 0x0, r6, 0x0, 0x10973, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x15) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1233.786687][ T8510] usb 4-1: can't set config #6, error -71 [ 1233.832329][ T8510] usb 4-1: USB disconnect, device number 20 17:10:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x2900}}], 0x1, 0x0) [ 1234.416075][ T8510] usb 4-1: new high-speed USB device number 21 using dummy_hcd 17:10:08 executing program 5: socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100007477e270600fd1a27540001a381e1068de893b3a6c25800d5", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100000000000000008000a0009d35b"], 0x50}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 17:10:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="10000f0010001f"], 0x58}}, 0x0) 17:10:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000a000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1234.676094][ T8510] usb 4-1: Using ep0 maxpacket: 32 17:10:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x3000}}], 0x1, 0x0) [ 1234.827769][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1234.836548][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.846890][ T8510] usb 4-1: config 6 has no interface number 0 [ 1234.853102][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1234.880613][T29805] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1235.012717][T29812] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1235.092774][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1235.102113][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.110407][ T8510] usb 4-1: Product: syz [ 1235.114711][ T8510] usb 4-1: Manufacturer: syz [ 1235.119550][ T8510] usb 4-1: SerialNumber: syz 17:10:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000100010001f"], 0x58}}, 0x0) [ 1235.535998][T29788] fuse: Bad value for 'user_id' [ 1235.545283][ T8510] usb 4-1: USB disconnect, device number 21 [ 1236.345944][ T8510] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1236.585951][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1236.707504][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1236.715898][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.726242][ T8510] usb 4-1: config 6 has no interface number 0 [ 1236.732458][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1236.896189][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1236.905364][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.913647][ T8510] usb 4-1: Product: syz [ 1236.920078][ T8510] usb 4-1: Manufacturer: syz [ 1236.924787][ T8510] usb 4-1: SerialNumber: syz 17:10:10 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x5, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x80fe}}], 0x1, 0x0) 17:10:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x0, {{0x14}, {@void, @val={0x10}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x3}]}, 0x28}}, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = getpgid(0x0) ioprio_set$pid(0x1, r2, 0x4004) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0xfcda, 0x558], 0x3, 0x0, 0x0, 0xffffffffffffffff}) kcmp(r1, r2, 0x5, r3, r0) 17:10:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000b000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x174, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000480010001f"], 0x58}}, 0x0) [ 1237.187575][ T8510] usb 4-1: can't set config #6, error -71 [ 1237.236495][ T8510] usb 4-1: USB disconnect, device number 22 17:10:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xb80b}}], 0x1, 0x0) 17:10:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xc805}}], 0x1, 0x0) [ 1237.836256][ T8510] usb 4-1: new high-speed USB device number 23 using dummy_hcd 17:10:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000c000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1238.096129][ T8510] usb 4-1: Using ep0 maxpacket: 32 17:10:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000600010001f"], 0x58}}, 0x0) 17:10:11 executing program 5: syz_usb_connect(0x0, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000cf519a083b135129c684000000010902d200010000000009040000000e0100000d2404"], 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r0, 0x0, r1, 0x0, 0x10973, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000000)=0x7) 17:10:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xe803}}], 0x1, 0x0) [ 1238.228025][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1238.236616][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.247618][ T8510] usb 4-1: config 6 has no interface number 0 [ 1238.255978][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1238.527807][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1238.537116][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.545218][ T8510] usb 4-1: Product: syz [ 1238.549744][ T8510] usb 4-1: Manufacturer: syz [ 1238.554488][ T8510] usb 4-1: SerialNumber: syz [ 1238.726769][ T8522] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1238.967568][ T8522] usb 6-1: Using ep0 maxpacket: 8 [ 1239.086864][ T8522] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.095364][T29859] fuse: Bad value for 'user_id' [ 1239.097274][ T8522] usb 6-1: New USB device found, idVendor=133b, idProduct=2951, bcdDevice=84.c6 [ 1239.097346][ T8522] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.130112][ T8522] usb 6-1: config 0 descriptor?? [ 1239.168649][ T8510] usb 4-1: USB disconnect, device number 23 [ 1239.195315][ T8522] uvcvideo: Found UVC 0.00 device (133b:2951) [ 1239.209114][ T8522] uvcvideo: No valid video chain found. [ 1239.379239][ T8522] usb 6-1: USB disconnect, device number 35 [ 1239.996955][ T9358] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1240.176274][ T8521] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1240.246352][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1240.387392][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1240.395889][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.408780][ T9358] usb 4-1: config 6 has no interface number 0 [ 1240.415003][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1240.416562][ T8521] usb 6-1: Using ep0 maxpacket: 8 [ 1240.548898][ T8521] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.559551][ T8521] usb 6-1: New USB device found, idVendor=133b, idProduct=2951, bcdDevice=84.c6 [ 1240.568963][ T8521] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:10:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000f50210001f"], 0x58}}, 0x0) 17:10:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000d000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x28a, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xf401}}], 0x1, 0x0) [ 1240.694203][ T8521] usb 6-1: config 0 descriptor?? 17:10:14 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x6, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 1240.806844][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1240.816327][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.820816][ T8521] uvcvideo: Found UVC 0.00 device (133b:2951) [ 1240.831587][ T8521] uvcvideo: No valid video chain found. [ 1240.963832][ T9358] usb 4-1: can't set config #6, error -71 [ 1241.039057][ T9358] usb 4-1: USB disconnect, device number 24 [ 1241.243608][ T8521] usb 6-1: USB disconnect, device number 36 17:10:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000e000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xfe80}}], 0x1, 0x0) 17:10:14 executing program 5: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x5, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000510001f"], 0x58}}, 0x0) [ 1241.589919][ T9358] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1241.848669][ T9358] usb 4-1: Using ep0 maxpacket: 32 17:10:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000610001f"], 0x58}}, 0x0) [ 1241.987763][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1241.996519][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.007789][ T9358] usb 4-1: config 6 has no interface number 0 [ 1242.014094][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1242.082748][ T8522] usb 6-1: new high-speed USB device number 37 using dummy_hcd 17:10:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x34000}}], 0x1, 0x0) [ 1242.341817][ T8522] usb 6-1: Using ep0 maxpacket: 32 17:10:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000f000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1242.462580][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1242.466743][ T8522] usb 6-1: config 6 has an invalid interface number: 240 but max is 0 [ 1242.471961][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.480138][ T8522] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.488212][ T9358] usb 4-1: Product: syz [ 1242.498649][ T8522] usb 6-1: config 6 has no interface number 0 17:10:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x29c, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1242.502814][ T9358] usb 4-1: Manufacturer: syz [ 1242.509033][ T8522] usb 6-1: config 6 interface 240 has no altsetting 0 [ 1242.513631][ T9358] usb 4-1: SerialNumber: syz 17:10:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000a10001f"], 0x58}}, 0x0) 17:10:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x40000}}], 0x1, 0x0) 17:10:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0010000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1243.059271][T29944] fuse: Bad value for 'user_id' [ 1243.123850][ T9358] usb 4-1: USB disconnect, device number 25 [ 1243.127507][ T8522] usb 6-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1243.139385][ T8522] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.151977][ T8522] usb 6-1: Product: syz [ 1243.156406][ T8522] usb 6-1: Manufacturer: syz [ 1243.161363][ T8522] usb 6-1: SerialNumber: syz [ 1243.684472][T29961] fuse: Bad value for 'user_id' [ 1243.719074][ T8521] usb 6-1: USB disconnect, device number 37 [ 1243.919834][ T8511] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1244.207739][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1244.363474][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1244.372182][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1244.382599][ T8511] usb 4-1: config 6 has no interface number 0 [ 1244.389119][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:18 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x7, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000c10001f"], 0x58}}, 0x0) 17:10:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0011000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x400300}}], 0x1, 0x0) 17:10:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x300, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000]}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "c5ff68cd4cae958b15d30ffd29fafe88"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x48}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1244.690763][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1244.702036][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.846702][ T8511] usb 4-1: can't set config #6, error -71 [ 1244.872839][ T8511] usb 4-1: USB disconnect, device number 26 17:10:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x1000000}}], 0x1, 0x0) 17:10:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0012000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1245.386343][ T8511] usb 4-1: new high-speed USB device number 27 using dummy_hcd 17:10:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000f10001f"], 0x58}}, 0x0) 17:10:18 executing program 5: syz_usb_connect$uac1(0x0, 0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000109029c00e3010000000904000000010100000a24010000000201020b240400009db0306a726b05240405000a240500004853cf33c80104010000010200000904010101010216000d240201010402fb4113af8fb3e72401003f02000f2412020700000280ff9816243e8a090501090000000000072501a471dda27e49c90dbc412fb1762a5300000000090402000001020000090402000009058209000000000007250100"/185], 0x0) 17:10:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x2000000}}], 0x1, 0x0) [ 1245.629273][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1245.758169][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1245.766627][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.776959][ T8511] usb 4-1: config 6 has no interface number 0 [ 1245.783167][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0025000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1246.106525][ T8521] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1246.112856][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1246.123437][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.131860][ T8511] usb 4-1: Product: syz [ 1246.138325][ T8511] usb 4-1: Manufacturer: syz [ 1246.143036][ T8511] usb 4-1: SerialNumber: syz [ 1246.376202][ T8521] usb 6-1: device descriptor read/64, error 18 [ 1246.575442][T30048] fuse: Bad value for 'user_id' [ 1246.607980][ T8511] usb 4-1: USB disconnect, device number 27 [ 1246.766371][ T8521] usb 6-1: device descriptor read/64, error 18 [ 1247.046619][ T8521] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1247.317960][ T8521] usb 6-1: device descriptor read/64, error 18 [ 1247.406113][ T8511] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1247.646185][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1247.706361][ T8521] usb 6-1: device descriptor read/64, error 18 [ 1247.778410][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1247.787000][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.797326][ T8511] usb 4-1: config 6 has no interface number 0 [ 1247.803539][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1247.827993][ T8521] usb usb6-port1: attempt power cycle 17:10:21 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x8, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000884710001f"], 0x58}}, 0x0) 17:10:21 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x4000000}}], 0x1, 0x0) 17:10:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x500, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0060000000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1248.290936][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1248.300784][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.437606][ T8511] usb 4-1: can't set config #6, error -71 [ 1248.470271][ T8511] usb 4-1: USB disconnect, device number 28 [ 1248.656531][ T8521] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1248.766984][ T8521] usb 6-1: Invalid ep0 maxpacket: 0 17:10:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000004810001f"], 0x58}}, 0x0) 17:10:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x7000000}}], 0x1, 0x0) [ 1248.916386][ T8521] usb 6-1: new high-speed USB device number 41 using dummy_hcd 17:10:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000030000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:22 executing program 5: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x9, 0x0, 0x8, 0x6, 0x0, 0x1ff, 0x800, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000000c0)}, 0xd00, 0x5, 0x2, 0x1, 0xffffffff, 0xff800000, 0x3}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)='\x00', 0x1}], 0x2, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r0, 0x0, r1, 0x0, 0x10973, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000140)={0x0, 0x1, 'client1\x00', 0x1, "91de385ed524d824", "6cbb4b991b3dbe447c11a6751ffb4f772b86dd6f9b261f6ba94d4f994f8e3e33", 0x304, 0x40}) pwritev(r2, &(0x7f0000000780)=[{&(0x7f0000000280)="b2e775490713450d04c5e85b33401359a74d9c441a797cf029b49ff45fa3ee85b5e73f86a31351dcf1998f9d32ed41d099509377f96e14486b443c5974a122f8c51769b62816bfa40359", 0x4a}, {&(0x7f0000000300)="c88a2014df923f210099f178cc71fe5982e8d9f3aeebaf30716149bdf0de9af24074a97edc3030402c8298408fe734bc50908eeef91d227d", 0x38}, {&(0x7f00000004c0)="0946269e942dd8f47b8913653da9e9f5fa89e8b396fba5768ea5cc6f33f6a8a6b04b4b0e0cd8b4c761f15ce0675771ae217ea9c7a18cdee2ffb565816088a5c63df457f42948fec3da73482c84728cf3633a14198be4b253", 0x58}, {&(0x7f0000000540)="6334ff0b51b5d2b3f98e02ed988530c2d84f7de85971897efaef4179dd5abc6cc7c19dc8427af5141d839a648afd3baf75a4bce4991a352e4076b9a2cf70c508d6a1af41570c791733cb4c9b48005a01a3fc1cb4546bf0f88bf84306b79a881c3457d31759cf6731178ee06c9618b9a2c929037a75828711a05b26268b204b6a1346b044bbc18bbe749faa011f6b9c5692d7ae4808", 0x95}, {&(0x7f0000000600)="03c09c2fed3bff540ec3fdd878e132f2d6f98d3c06e53fc84246897dedf6f6ccaf6af93528c55d5d5d6cbab0fe27a54a44e73f5cb28f74342e0a7bd5316fc7bb97e2d417ab9cd61239065b13320ef0b3de13031771c41f8e04188263a4c05f8621d9bce8c903079de310c0ad3527cd09c8abd20f12bffa6c0f6a3bb63c9e520259d74177c45588397cb6c3ce7939de66f453d2ad2d43b72f9f90982cca1e27eefcd5c2916ad02a87999f464c774396f23f73d1dbf4fb79e37503ba063ee62de2cefc5e660fbf3f8e41cd11112c2cf0c03eb45e733c46f2ad94dc2da4bf1f539b3d3ce52b1e7d8d03a9", 0xe9}, {&(0x7f0000000340)="7e3a6ae345e06e80cdd8bd90858dc2a06e", 0x11}, {&(0x7f0000000700)="1e178d2fb706ab22f9a5288a39a23df51bf1026cc93ece764e7cd84644bc1e8c66771c86011e4ff5f159062d814783ea0477f5194908589d7e5d05ac28ca98a4a3c6cf1950607a23649f6bc593214d62add8567d9588cc07536688f454c2f5256f2ea492056be2410b1503db6ceae7fd1a4fb2b06453176dda8df9b5a7bf1081", 0x80}, {&(0x7f00000003c0)}], 0x8, 0xffffffff, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}]}}}]}, 0x44}}, 0x0) [ 1249.006197][ T8511] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1249.046387][ T8521] usb 6-1: device descriptor read/8, error -71 [ 1249.267217][ T8521] usb 6-1: device descriptor read/8, error -71 [ 1249.286131][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1249.386385][ T8521] usb usb6-port1: unable to enumerate USB device [ 1249.426445][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1249.434918][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.445906][ T8511] usb 4-1: config 6 has no interface number 0 [ 1249.452124][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000884810001f"], 0x58}}, 0x0) 17:10:23 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x8000000}}], 0x1, 0x0) 17:10:23 executing program 5: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x81) r0 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x0, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x2012, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 1249.858207][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1249.867804][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.876268][ T8511] usb 4-1: Product: syz [ 1249.880863][ T8511] usb 4-1: Manufacturer: syz [ 1249.887034][ T8511] usb 4-1: SerialNumber: syz [ 1250.270089][T30125] fuse: Bad value for 'user_id' [ 1250.288551][ T8510] usb 4-1: USB disconnect, device number 29 [ 1251.099099][ T8510] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1251.376506][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1251.510666][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1251.519256][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.529827][ T8510] usb 4-1: config 6 has no interface number 0 [ 1251.536181][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:25 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x9, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000c030000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x600, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xe0082fd}}], 0x1, 0x0) 17:10:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000655810001f"], 0x58}}, 0x0) [ 1251.906160][ T8510] usb 4-1: string descriptor 0 read error: -71 [ 1251.912608][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1251.921942][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.177885][ T8510] usb 4-1: can't set config #6, error -71 [ 1252.259669][ T8510] usb 4-1: USB disconnect, device number 30 17:10:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x10080000}}], 0x1, 0x0) 17:10:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000006010001f"], 0x58}}, 0x0) 17:10:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000050000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1252.866943][ T8510] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1253.125996][ T8510] usb 4-1: Using ep0 maxpacket: 32 17:10:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000586510001f"], 0x58}}, 0x0) [ 1253.277592][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1253.286104][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.296812][ T8510] usb 4-1: config 6 has no interface number 0 [ 1253.303104][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x11000000}}], 0x1, 0x0) 17:10:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000060000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x700, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1253.658883][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1253.668341][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.676601][ T8510] usb 4-1: Product: syz [ 1253.681700][ T8510] usb 4-1: Manufacturer: syz [ 1253.686579][ T8510] usb 4-1: SerialNumber: syz [ 1254.221663][T30199] fuse: Bad value for 'user_id' [ 1254.286245][ T8510] usb 4-1: USB disconnect, device number 31 [ 1255.095921][ T8510] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1255.345909][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1255.467283][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1255.475593][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.486192][ T8510] usb 4-1: config 6 has no interface number 0 [ 1255.492398][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:29 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xa, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000008110001f"], 0x58}}, 0x0) 17:10:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x20000000}}], 0x1, 0x0) 17:10:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000070000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x900, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1255.825969][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1255.835166][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.843514][ T8510] usb 4-1: Product: syz [ 1256.036660][ T8510] usb 4-1: can't set config #6, error -71 [ 1256.114411][ T8510] usb 4-1: USB disconnect, device number 32 17:10:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000478810001f"], 0x58}}, 0x0) [ 1256.616173][ T8510] usb 4-1: new high-speed USB device number 33 using dummy_hcd 17:10:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x29000000}}], 0x1, 0x0) 17:10:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000488810001f"], 0x58}}, 0x0) 17:10:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000090000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1256.867140][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1256.995644][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1257.004567][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.014875][ T8510] usb 4-1: config 6 has no interface number 0 [ 1257.021268][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xa00, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="100002f510001f"], 0x58}}, 0x0) [ 1257.368843][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1257.378568][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.386796][ T8510] usb 4-1: Product: syz [ 1257.391066][ T8510] usb 4-1: Manufacturer: syz [ 1257.395894][ T8510] usb 4-1: SerialNumber: syz 17:10:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x30000000}}], 0x1, 0x0) [ 1257.846666][T30264] fuse: Bad value for 'user_id' [ 1257.871860][ T8510] usb 4-1: USB disconnect, device number 33 [ 1258.655992][ T8510] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1258.916067][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1259.037831][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1259.046379][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.056796][ T8510] usb 4-1: config 6 has no interface number 0 [ 1259.063007][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:32 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xb, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000a0000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="100000000a001f"], 0x58}}, 0x0) 17:10:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x7ffffff7}}], 0x1, 0x0) 17:10:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xb00, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1259.266051][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1259.275306][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.283650][ T8510] usb 4-1: Product: syz [ 1259.288467][ T8510] usb 4-1: Manufacturer: syz [ 1259.438957][ T8510] usb 4-1: can't set config #6, error -71 [ 1259.461936][ T8510] usb 4-1: USB disconnect, device number 34 17:10:33 executing program 5: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x28}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r1, 0x0, r2, 0x0, 0x10973, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000100)={0x6, "9e450e61de2a7468741c2c1f6f9bf73a45f84904841581919de6ebdf737fad89", 0x2}) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x87, 0x2}, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x2c00, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000240)={0x0, 0x1c, 0x3, 0x7f, 0x8, 0x4, 0x1f, 0x0, 0xd944, 0xfffffffe, 0x20, 0x9}) 17:10:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x8dffffff}}], 0x1, 0x0) 17:10:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000210001f"], 0x58}}, 0x0) [ 1259.945919][ T8510] usb 4-1: new high-speed USB device number 35 using dummy_hcd 17:10:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0x97ffffff}}], 0x1, 0x0) 17:10:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000b0000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1260.137151][ T8521] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1260.206047][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1260.337606][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1260.346024][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1260.356434][ T8510] usb 4-1: config 6 has no interface number 0 [ 1260.362770][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xb80b0000}}], 0x1, 0x0) 17:10:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000410001f"], 0x58}}, 0x0) [ 1260.517308][ T8521] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.664989][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1260.676633][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.684747][ T8510] usb 4-1: Product: syz [ 1260.689655][ T8510] usb 4-1: Manufacturer: syz [ 1260.694358][ T8510] usb 4-1: SerialNumber: syz [ 1260.698849][ T8521] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1260.708802][ T8521] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.717209][ T8521] usb 6-1: Product: syz [ 1260.721486][ T8521] usb 6-1: Manufacturer: syz [ 1260.726410][ T8521] usb 6-1: SerialNumber: syz [ 1261.039093][T30332] fuse: Bad value for 'user_id' [ 1261.060791][ T9388] usb 4-1: USB disconnect, device number 35 [ 1261.855919][ T8511] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1262.067684][ T8521] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1262.075314][ T8521] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1262.096430][ T8521] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 1262.096773][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1262.237571][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1262.246172][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.256620][ T8511] usb 4-1: config 6 has no interface number 0 [ 1262.262823][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:36 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xc, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000c0000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xc00, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xc8050000}}], 0x1, 0x0) 17:10:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000510001f"], 0x58}}, 0x0) [ 1262.725388][ T8521] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 1262.776690][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1262.786236][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.875172][ T8521] usb 6-1: USB disconnect, device number 42 [ 1262.882733][ T8521] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 1262.968595][ T8511] usb 4-1: can't set config #6, error -71 [ 1263.013138][ T8511] usb 4-1: USB disconnect, device number 36 [ 1263.596303][ T8511] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1263.858737][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1263.872631][ T8521] usb 6-1: new high-speed USB device number 43 using dummy_hcd 17:10:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xe8030000}}], 0x1, 0x0) 17:10:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000610001f"], 0x58}}, 0x0) 17:10:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00030c0000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1263.986187][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1263.994504][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.004997][ T8511] usb 4-1: config 6 has no interface number 0 [ 1264.011379][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1}, 0x3) r2 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r3, 0x0, r4, 0x0, 0x10973, 0x0) splice(r0, &(0x7f0000000100)=0x400, r3, &(0x7f0000000140)=0x1, 0x100000000, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x375) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000480)="fdc0c193f65a612ad90c16c9", 0xc}], 0x1, 0x0, 0x0, 0x200008d5}, {&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000800)="d0a5fa7f0cb087dc535dfdf450ae158bbc5c6c79303c3eebd9d824d333f53078f9f6cb8e76f89d4fb5a1a0caf8a384addf7c760763a1dd76a620ecc2c609911aa557764397da1f5473a207332c65c5e2db9127ed52dc54b0b16703fecf2098a18341a916b13e1c3432acf88389398be97f38883ea36e1ddb21b0c3", 0x7b}, {&(0x7f0000000900)="525ff4c0d7782b41717deb7f1afff48415cd28092b64355e883331de6f58ce5273b3e1cbffb5419e1dafbd06fbfba3cc1b091df7424a9f5f4d0889a1936f8c8df12585d15a2acb32e1694bfaa185709d39e8fc7e37f393305d8fe04e2c5a8fb5f787a2b21a23a4ae7409ecbb499c02937c5fb32383c1a40c454e63d53179ad14101cada44359d2bc922784f11ffbdcb9ace625deb13433cf9a4a6309fef2f8c57420c2181cbecc403ad93fad6cdff27f6f60e312165b6baab6eaa0effb1844954f", 0xc1}, {&(0x7f0000000a00)="30b270da35c176895c0f1985c2f882fb9f3d36c5224cbb91e2d70dfba3a18e0f6b9323657b414ed4a513be9910405f1e544849dce9833aff1799d38b4adc8e1872b870938cd82de52a", 0x49}, {&(0x7f0000000740)}, {0x0}], 0x5, &(0x7f0000000f80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000003000000000000271e6e8d43b200bbe49f69242d05ab0acd5913a55851d0f45254473b68f5844dd4c91d27", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES16, @ANYRES32=0x0, @ANYBLOB="0000000724007a145767e27f3b43000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB], 0xa8, 0x4000}], 0x2, 0x0) fchown(0xffffffffffffffff, 0x0, r6) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0xee00, r6, 0x13, 0x7}, 0x7, 0x10001, 0x4eb3, 0x1f, 0x0, 0xffffffffffffffff, 0x3}) fchown(0xffffffffffffffff, 0x0, r6) bind$unix(r2, &(0x7f0000000400)=@abs={0x1}, 0x6e) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000003a00)=""/242, 0xf2}], 0x1, 0xe1, 0x0) [ 1264.276717][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1264.286270][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.294396][ T8511] usb 4-1: Product: syz [ 1264.298861][ T8511] usb 4-1: Manufacturer: syz [ 1264.303602][ T8511] usb 4-1: SerialNumber: syz 17:10:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xeffdffff}}], 0x1, 0x0) 17:10:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000810001f"], 0x58}}, 0x0) 17:10:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000d0000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1264.719901][T30429] fuse: Bad value for 'user_id' [ 1264.730508][ T8511] usb 4-1: USB disconnect, device number 37 [ 1265.529094][ T8511] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1265.789869][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1265.947716][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1265.956161][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.966867][ T8511] usb 4-1: config 6 has no interface number 0 [ 1265.973073][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:39 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xd, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xf00, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x38, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r6, 0x400, 0x80, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10000}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60}, 0x4002) shmctl$IPC_RMID(r5, 0x0) 17:10:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000a10001f"], 0x58}}, 0x0) 17:10:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xf4010000}}], 0x1, 0x0) 17:10:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000e0000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1266.506207][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1266.517459][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.709415][ T8511] usb 4-1: can't set config #6, error -71 [ 1266.794969][ T8511] usb 4-1: USB disconnect, device number 38 17:10:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000f0000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xf5ffffff}}], 0x1, 0x0) 17:10:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000c10001f"], 0x58}}, 0x0) 17:10:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r4 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) r5 = shmget(0x3, 0x3000, 0x78000200, &(0x7f0000ffd000/0x3000)=nil) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x38, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r6, 0x400, 0x80, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10000}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60}, 0x4002) shmctl$IPC_RMID(r5, 0x0) [ 1267.306056][ T8511] usb 4-1: new high-speed USB device number 39 using dummy_hcd 17:10:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xf7ffff7f}}], 0x1, 0x0) [ 1267.546200][ T8511] usb 4-1: Using ep0 maxpacket: 32 17:10:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000110000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1267.667887][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1267.676354][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.686794][ T8511] usb 4-1: config 6 has no interface number 0 [ 1267.693046][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1267.988380][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1267.997682][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.006065][ T8511] usb 4-1: Product: syz [ 1268.010329][ T8511] usb 4-1: Manufacturer: syz [ 1268.015035][ T8511] usb 4-1: SerialNumber: syz [ 1268.480429][T30518] fuse: Bad value for 'user_id' [ 1268.504799][ T9358] usb 4-1: USB disconnect, device number 39 [ 1269.296174][ T9358] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1269.566466][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1269.707507][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1269.715934][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.726351][ T9358] usb 4-1: config 6 has no interface number 0 [ 1269.732571][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:43 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xe, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000f10001f"], 0x58}}, 0x0) 17:10:43 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x0, 0x5c, 0x0, 0xb, 0x2, 0x0, 0x5}) 17:10:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xfd82000e}}], 0x1, 0x0) 17:10:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x1100, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000120000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1270.236235][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1270.245547][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.409933][ T9358] usb 4-1: can't set config #6, error -71 [ 1270.463573][ T9358] usb 4-1: USB disconnect, device number 40 17:10:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xfe800000}}], 0x1, 0x0) 17:10:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000001010001f"], 0x58}}, 0x0) 17:10:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000d0700000000ff0300000000f00f", @ANYRES32=r2, @ANYBLOB="00000000e60800001c0012000c000100626f6e64"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10973, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000380)={0x6, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @remote}}}, 0x108) r3 = socket$packet(0x11, 0xa, 0x300) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}, 0x1}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="281600001000008047ff00000a000000", @ANYRES32=r7, @ANYBLOB="000100000000000008000a000f0000004d49ce52b7a4b6a98c309cf8716dec0f7d62ae28914c780e3c4368b9af18675e8d38842a080b5e8931ec4de76a82d41c73d783f8a1969106"], 0x28}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0xfffffffe, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r10, @ANYBLOB="000000000000000308000a000000000014d763836d98c100f22a3102cd945a9970a00e7c513bdf57e2c32a67bf0da6376b22a456e41e10f11b72326d714ea213cf11a3e20ec6449c1dd36336535c7f28c417bd7dbc0b1fa2eaa86d87faaef2e0c0a46ff202b924bb7ebbcd9f321ff6d4193ad2f23e04c6503b7bb86313402d1496fbb00ab8"], 0x28}}, 0x0) [ 1271.005909][ T9358] usb 4-1: new high-speed USB device number 41 using dummy_hcd 17:10:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000250000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xfffffdef}}], 0x1, 0x0) [ 1271.266007][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1271.294636][T30598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1271.407239][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1271.415643][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.428870][ T9358] usb 4-1: config 6 has no interface number 0 [ 1271.435098][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1271.545191][T30626] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 17:10:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000004810001f"], 0x58}}, 0x0) [ 1271.944540][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1271.954150][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.962567][ T9358] usb 4-1: Product: syz [ 1271.967031][ T9358] usb 4-1: Manufacturer: syz [ 1271.971732][ T9358] usb 4-1: SerialNumber: syz [ 1272.335544][T30584] fuse: Bad value for 'user_id' [ 1272.354953][ T9358] usb 4-1: USB disconnect, device number 41 [ 1273.136146][ T9358] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1273.386938][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1273.519319][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1273.527950][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.539404][ T9358] usb 4-1: config 6 has no interface number 0 [ 1273.546261][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:47 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x10, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xffffff8d}}], 0x1, 0x0) 17:10:47 executing program 5: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0xc31e, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000019680)=ANY=[@ANYBLOB="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"], 0x1a3) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4042041}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f00000001c0)={0x6, 0xfffffffffffffffc, 0x80000001}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x7ff, 0x4, 0x0, 0x6, 0x7}) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x200000000000023e, 0x10000, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000007c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x0, 0x1}, 0x3c) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002000030600000000000000000a1000000000000000000000080017004e244e2414000100fe800000000000000000000000000000b030914981d701c15f3f23d453681a2080e8b2f593514eab3845908ddfbbbb8600d8ea94db0b3cb8277abf5de51ed7c42203bfabd079ca07f47d0e4f988057ec19162acdee662f856973cae1de4f5b1dc7"], 0x38}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x4}, 0x20) r3 = syz_open_dev$vcsa(&(0x7f0000000640)='/dev/vcsa#\x00', 0x6, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/102400, 0x19000}], 0x1) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 17:10:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0088470000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x1400, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000006010001f"], 0x58}}, 0x0) [ 1274.136575][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1274.146057][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.221027][ T9358] usb 4-1: can't set config #6, error -71 [ 1274.286877][ T9358] usb 4-1: USB disconnect, device number 42 17:10:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xffffff97}}], 0x1, 0x0) [ 1274.691632][T30686] IPVS: ftp: loaded support on port[0] = 21 [ 1274.737213][ T9358] usb 4-1: new high-speed USB device number 43 using dummy_hcd 17:10:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20, 0xfffffff5}}], 0x1, 0x0) 17:10:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0088480000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000058001f"], 0x58}}, 0x0) [ 1274.985992][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1275.118836][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1275.127436][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.137855][ T9358] usb 4-1: config 6 has no interface number 0 [ 1275.144148][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) [ 1275.384562][T30727] IPVS: ftp: loaded support on port[0] = 21 [ 1275.477527][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1275.487477][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.495622][ T9358] usb 4-1: Product: syz [ 1275.500010][ T9358] usb 4-1: Manufacturer: syz [ 1275.504821][ T9358] usb 4-1: SerialNumber: syz 17:10:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0065580000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1276.035637][T30675] fuse: Bad value for 'user_id' [ 1276.070723][ T9358] usb 4-1: USB disconnect, device number 43 [ 1276.876428][ T9358] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1277.115946][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1277.238128][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1277.246775][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.257137][ T9358] usb 4-1: config 6 has no interface number 0 [ 1277.265399][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:51 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x11, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000073001f"], 0x58}}, 0x0) [ 1277.856983][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1277.866525][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.976224][ T9358] usb 4-1: can't set config #6, error -71 [ 1277.978739][ T9358] usb 4-1: USB disconnect, device number 44 17:10:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000700)="5500000018007f5300fe01b2a4a280930a06000000a84302910000003900090035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060cec4fab91d4", 0x55}, {&(0x7f0000001840)="c03054573fd57e1738d58a718a4fb7936060c83f2770c54bd17068b4c3e37fbeda6a11af80b90a08ab25bca97ecfa0b7e54be2f2722a5e048181664ebea8d1232c794323f70f86ca04c7bcdf330d96956240ff076197f5af9dce6fb3577947b453a8c7422dc67ba95f695bf89e6b3492979d0e7fb6ea29531aed825c171d151126535d78274a30081cb271aba9b1fee7ab68368f070c1b210836be9a794a3bd7c0fb1ce9c456e97a04707768cb0a03b6c8899c96a4c9729a104ecf9f313748c84d0931f8b02d5c1cf74da8fd713848684a4f1ac5e797082bd821194794911c3dc89002559e769a7015af803cd214b195cc861ec6cc880accef3bb5ab437824fc7467a134a19a9a0664c9665e8d6dde86821d53ceda278bface23ee15eda42df7b3ac08f1cd8a69779d14105a3b96d1ee0b4a661c7e2938c72605c6d361a39c0fb84b4941f28d67fc4b0d89cdeba14b9c3874a0f1c5287dcec9bc94a4717c4edaadb15e09e61ce19c35079455584ea28d1acddb6b0d6f3e0a5d39ef7e2b401926061994f391f0edd9ac951d8a46ed604f3e3b7ff144bdf1aa22bb94f7feb7334290c40bba576752db1a62800504ec592525e3d2942e09854b9fd89e4e2b926f2267d5fe8817a46740a71a441262423d25e4e8e355ade6cdb8e1d532b0af53f332626743d0fe0134900a045f394b70b0ba6f2a761567be39e0ced9eb131768f354d47a2d8b3b4d36341ab575064f0c5dcb2e1fbfeaa9f0142530cf641cb3d6c59a821d5ee92c5e0f6a0dc69f7eb0a97d2e7a396eb7a135075daf602aefb88c76321ce4839910171971e80708461475cb0d7744767f995aa92037c39b7adf96a20ccc8ccce0c7433fb5a4542d1ef4290fae3b76f1857aab68b20d9ebb5739d80d7df82c7d5b241877e92f1ae36d4eccf8fe72e80b071eeff46e5b13e4dc3317118cc9815f7600cb87f571df9bc705954c95838fcc6d524d17efaa8a16d87e4ca0adcdec25005aaab2e4b4fbd03cba5f2407c07655b57340f7812e2a765b2f7854637841600a9fdeefea6b5381dc62ad3b9f9b99f74add19233cc7c99ed983864871b68c133b6b50393d504541b71e1a1fbbdd7011d255aee84682e955a63d97d4abd560186f17050c0b73d9cdd654fb3f10ea9de345803589e78b260e330fcde645bf7c8f0c2e3ba61c0c2f9dfd046a2243b93aab50211be309ac9eb34bbf39723f751879171a34610de99d2129e7bd1c242a1f5aa707523e0ed9926a1ac32120c25a4467be10e32305c71ef9f7ee0ac619c75f48fc845ddf9eeff5ed4511ebdbb04abc2afd9486ec3f7ce4e1d07e7fb349016973249e7e9951b105830c435370fa47e199b28933e94df73edf6f2720d9bb7ba857337099b4101ea47afc7dd3862b20546ae6a5601aa4174bb5bd498fc7929ff832a5c7908811a6ff4b809395f0cc63a7534eb22ff53d9f47cea3c5ddac6d5589204244f09bd915ee936d4a8d3c8791dcf92876bcef8f61c6fbb7e87abdb893b8b5c556e5beeee1a68a7c2a482ea1782d6ee147b4c594eceb6059a4c087566f3692f6cb671b74f6f843b466f7bef6bee7c6e79d574ffdbe21a402571d04a05f340323082e5a91dd4eb9d5ffad579f428809860517bd4bd579111ac340509bfcc9fb08f41740d266f20db184643ce2fd4bf859149ecec8a5f83c02badcf853f5c03bc4583da62303185ec066208b80d5cd4a3b68de343ea6df2477355302ab703867135ef1e6f7ecb2951847349dd1e8f9047c4be882e32a0112c8c975d2f8142c5c88d69acf75b7fc27e8d45a1c9114fe6e33704f86faf041c65015e02b735b2f14a69cca1f9fc8b51f4cef668b7a597b897becf7d550d4e62b4dcc6e94fcfee6916c696e3d1dbad8222b303cde36faf4c354a445d029426382ec2a65e7c93a6f784bfb6bf18c5d8ac4e3e0ec323ee28272fe4704a46cb937b061cf86b39b67cfb91b95859ed1e714c7e29a2cc9da0178a41a28143ace6bab240ed03ebe413c26cd89bb8ffe4972e3ac20e8aa850f188bd629449a344d0203ef111ba6a8f61da99b1974f8a87a675943fb3b2c1b6e6b6ed856f9b94b90c12441467e8245b59f2f74518ea6ec0ed110fae79956165cefd7f778f781f7ad16e5aa83220e4e653131f689d92a8672d8184623b3a5261cb43e2af00ec3da4c5998cca56787a31dfa87230db20aa137ff744e0aa386da7255f5e29dd9851716dda724466dc9220722b1aefa14a007f3f54ee2a821529ab55168cd37cd831255696f956bbaf8ce7d2e2d998be52c5776288de416821b314b708ebe2a7af0a990d42b2e8ac18c5987c703c4b6efe3ddba5b4da4faef0b0e447860f830d78515ff98e3ccb05c58e55d93b63efa00e7031c74f5284e56ffe0376fab07153e8123ea34d23d50e16f01f546aa82a1915f0e2a4645b75509d99c66dde3903971c3f6669c0c5c9b1940cd7ba26e91e084534b29df7af940f3d522883da9b67a684bf2c187e22abe28e9f21226ebe0ec8f38535d9f24962ee85ff14cb0298a0a27a8f32c6a151a00ffacf81bdcf003822eb5e6dd64b75832c6f30879ea45c28bebe648471724ec845da5314babbd09408fc07d03c973c06c7b0b9a0a00272df9e2978431f50716ac1ef34baee1adf1a3d19df8c951905869c6d789e37b9c610ada6b2647b8efddf9f6ad8e8d7b84345af49a8f7146f3781df14d06b302517eb1adc434b2a0869b716984080c2b0acc619f15a2cfd7ba0efced3a8ee051560be240d010457ff6e152b43ec81ba6e7f602812f0e8175f9b61d3d13aee378b8a8c9a636ccc862f6a786dbbc75033697ff26be1094dd7b64eef6c8e21acef34689baf5bf21b6d40389ca7fb2175eae0b327209679465a433031269adf90a9dfc152486c38656608f36b2d591560ef54c43fe02cf235a85ae11552d1b1b638ab546fc3b7a45a802a5fdd6b50ca8a8a85f965032d7f41957110c85da74022123a33501c2866d93e873f7e37bca70cc3cf6b00624690a5c4a3b2aca51450fffec0b9e0066abe952621e36c0f16af4846a9ea913147ca326bb07fa817fd120e4835d220ee00bb06d186b3ae6e613542964b04c9351b5b82900832fbcc403395a75f84199e5b16a0b3f6d26c9f4bcb7bc0debe1f00e974739d3630c636ee68a39aa651171f22abfe2ada38377aa979b76e73d6f97ac84f0271507f19692ea01ee642ec8d6abd40f2dc047144a4ead3fad84314189a1f8db95abfc52e0ca60e98609b62171f42d52c937e284e4826aa340b5209ea68495eecc9b18e53f8b71f734f28585b4c1f836bf67e14a2a96fa96bdd21c95cb4f87a42423fce6f1acd794e6515fdaff9c25997bfc82cf346fcc86280c038fc43916e40db87ea2e0436c1621f5c601d7af18957572643c2a774961ecf0f08ecdb54d884d0abb50fdb3f9e3dfc92d2a94fa5dc3ba4ba78b5827b11ccba18c9eb2ce5e0f79e0d9d8b6f1811e545091aa2e2ad5e6ad30172f4eb00fb11b07669b1237de7bbc9c98d6eda07d9f33596ff5bc5c35df0029b05d0311fc7405bedfc0060b829b06d626c174c4b04a9ec866ee1d5ce13691aeb1795a1a9bf62cf8308f67ec4ea4e7e8cf430285dd8e91049014815ab23d5b8c8d4f071e927b906e00b8a2a002afc8c2eeffc2f8314e1bf85de944dc505d50c2439fc1fc01752ecbf1ac44c456d6b12355d8120db1c88a045bd78a8a713d7928acc666a4c43643f184d2e367318a3eafff9539e268d7242521281588bf6c459dee317771997b0b6d38c503a7d2721b2383ba6a4592aceba136ecca47fbf68af3079206095ca18c3f607e5c6cee761bcc572d66cc2ad23f6ed68d60393cf2f7edd7bc5380624d5a4b0098ce97343230e95ae28093c00f9e26a66702bd2030dddad358c757950109d202820938005c9b072332ddd431e0f762e1eda012bcf0b471110ca88819daae4f14f940d2140a3615dd6d3d5d54f56b2439ca75195659e4550f9837be3d999c7ce5802219a1ec11bf98f1beeea9cb25f67f71abcc60e45c6c4666a95993a7355867f596c8cd787358b4d931abfeefd95c94c85718d48496f8389f27c04d5e4dbc45e579826606e9757b8c90c68d4b40f912f5c611bafbc22034e318a385a98c44c3c8adab778b075d822ebce968cd6e91f3ec87fcde91dafc6ead5064dc507e0836013c51eb201986daf93ede9e42f2eb19601b82056a729d9c8b9c335253df43fe9bc7761d4aaa7690b700c0968443214cd847e62da9a49526845ac9f4acff8eb5731d50466e3a992bd00bc13b74cb37fc977c66fbbba742927c5a8ff1fd82830193bcfe2135d08d49c7fe2aa76e2a40f9422416b9c23a4e442b1d4d0e6ffdd2c04c01539413f67c2bfc39b55d70f20b72a1dd58f8a116c11d9b02ba62ae8a04b6867d2e6766ba832dbb2b5aa3316f9b46855177fe5e2624d10ef4cca12be70aecfbb4a5bcbc6c663c3a24044fde63ddd0c73f2cc0c29277c583ab23421eb941b2b595c8c082bdb01ff6db49f1a0a1ea2e08a5fe09c84e4afd432bbd5f96995f3d37b1ddd28fb52fd481ba012d6655dadfc18cad8e6449c54d419d0314e23376bdfdc74c0c43197133d56d050a7778016b132486e263e798a70829993ba2f27be6507f195948cd274f90caed76e04e367a7fbb1946d162422b31da6762c7b32bb559046bdd1787fe70f9488462306c581161ccf9f11923a84a9c48607702b92bd8c8da5948e9ac9530c5bede5dac96a33ac30a228372edc9d4f354ceb76742f58e7cdaddb593a939f4fb70349b59116bf25698391e1bd7cb90d54444345280839586576681357304920f6b49c10d4f21d561140bffa0117bfe73f9629deb5b485ef3e0e118d1822b69837154ef671439b25e81f5ad1dee0416c94f6ff127f909dfc4d072767c2002242eee29ad38f32d27954f85616988eecefc4207607b239bbf5943f3b478dac552de072b4e55db466b840e8147cf644d554b78f3ae97bb3cca18bf9b12eac069c764f19167a933e5686d4d5dab33443cd5a0f5a63ef5e88538b6d0a7395f583d3b6a1079aa55b3cc8bd1db0ad550b4248a0c2c9ad741736af4d8d8ea439b90b3604a5cdfe5ba23060420af0703ed7fd31a8a8fb38a5d3b4c1757145091bd0b189ae0b48f42829e3f8d0ae2d5985cd63cb64e8a61311edd12feaf55ba6fefa921938effebb25f937ac6b99c1029bc83b82fb05d7ab9bfe0106dd7b4a91ef61d3d78372856d290f6cdea3b4bd9822e93a0c76b3ed303796ccbbf308ce95b67a11bc04124f3a061c23f8e313ccfd19da1f21119fb90549443df29dc3a0c42cecfc429f30091e6c359f362fe8504b647f0a048fe02494a07968efb014ccf03057f844430956a945081e9446f16c8646135beadf22251280009711d194b1fed616219bd90a1230d93d0c846c4645f0b8325a57ed96d245bddcc71ca521de84eefc2e8f9f81237115043df7e195ebb4d2b3438bc89e39881d7360a57833a094fd015ce63e4770693d993b5cbd2705b22f3ff374a75481757f6ad54989176c0ec205b4635fed3ec919e76ee74cba946d39398f3bddcef77ed6c8b6b42a012e5fad651b37eee8eba2750621ad477fa371c0bc0f230cc06dfbd15858449c419006c2c68889b37a0da2d14e55f21576aab04333331f10485594521e457c6e698bd0444a133017c62bd9da4b619403ee73aad5349ce3822559e7c420cb7e643df9ed638725924b952f1b15f4149ec7df6f9edf10a954d939f87918d5961ae15e18d4584645aec9b1bcf8a1c2e", 0x1000}, {&(0x7f0000000680)="9fad89824f3116ff98029e302e8f228ab818d7e64877848905bc7a372437f5d8d465b7b23d173472ebc1cecd8c0df73db4717b107c9749cc45a590d1fa852de01fa50e95fb9cae1b4a42b5bd9e78a4e1e53c940deb6e598ab5fb7cfaffffff79aaba7a303ba15aeff26d0a03", 0x6c}, {&(0x7f0000000900)="4cb5ece26347f83d1abbd43211728f8cf1a815d379a96b3e0da21918629c7971e8c88bf527245ad2e55c48625c54138f2c9ab15d42681ed62598d2f80b27e30f7712d99aae54c7bff1ef37b8d99bab1163f6c27987fdd1e45ff71c7c7eb423f0f5e70530ca91c2066179282f7310f7f3321c62cd6ad83ac5638d556b1e2a007a796652618e0dcad7718640e854cce892eae4b22ae6777573e82c6f64cdfb570d4179e27b593a792517917ec5f823918ea78f6e60c887907686d050c410c61f3942a8d86a373681", 0xc7}], 0x4}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/nullb0\x00', 0x2, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r2, 0x0, r3, 0x0, 0x10973, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x104, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000880)={0xb, 0x10, 0xfa00, {&(0x7f0000000780), r4, 0xfffeffff}}, 0x18) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000600)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="e77bdfb13060ca202d69b84a2f079818b98e49523f1cb22d4a3748958fb4fc9221cd633fbc3a73cf8d9fcf228affc25b751ad52a8d789d5992ccc1bad60e3cd4ef9484bdd75f985b6b7c58260b0ee82b2001ea2ea5f18fa0f6527d0e3559c85402e3c85fe7969365f28cc9597e4451f6b801906f21b3f0fd357a3612b86e4ce8f6692435752aabea28594fa87eec0f301981a84e7886a0f9040705fe119297b468e72bf5b451ed477ffe48238ad98548d9f7a3292547564cf0def1ef9a67fb37e5b25281788dbe66eb8bc99202bd1f37ecf690248d8e980142d1f4a7cfc0e8191f381b31762468ddbc74f6602289200c39f7da2a5f980f", 0xf7}, {&(0x7f0000000140)="363afc19b4c31e1bb07156934243fa5a542a804960daa84ef9c1817d88ed57121ac537bbd887ecc3485e600fccd714488b22898a6f4adbef201ae373e400ff2997418f770f3fbe234266770586da19fb8570d33e6cc90d73bf8cc935e9c947b864c2a8df2a5b03a4f98bc437f867007b9c3102e9aa0e1e1d653f0f1827dce6c98e8bb9be68254a201bb0f00966e69087c9e24bfdfedac8b224ab364d143fc6349608d0f8ac6c1537596d707b464cc97dd10dd38ea0e74ce93f170ecb7bbb355d4da34052884387dffc56eebd132c4f570d77580e32dc4144bd791f574e", 0xdd}], 0x2, &(0x7f00000002c0)=[@iv={0x38, 0x117, 0x2, 0x24, "719470cb337f5d7140fea8537c1f755222da5201207641de4e267bd17b56accdc5a94c05"}, @op={0x18}, @iv={0x20, 0x117, 0x2, 0x7, "6baedf6e3b2a37"}, @assoc={0x18, 0x117, 0x4, 0xfffffffc}, @assoc={0x18, 0x117, 0x4, 0xae1}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1f}], 0xe8}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="e7ce7dc27e92d582f21ff2931e29a700aaa8f142064f18008181ef8f7fcfdbc8ea0899bb497abc365344ec25f0ed93561733ff0294ca40f8e3e94cf639a87765429e48112be5fe7cccdb815c227a83e8b57bb6eb188b7b19dd401f4ba8288d63f8b252429ff187d2ed6e4c6ffc0acea87fbc1e5aa116b824cc6e0066fe5f001b3c9e478c07679ce2a2ca154827ada1306e47ffb7cce791484044184f1d0adebb49a78669c5e5a5f62846667933a4ca41778eb4d9852333a1adf27481f7e4123a03af597b3007e9d6433a2c152b93cb95a679199fe185530d8243a819a383c86046c0f8", 0xe3}, {&(0x7f00000004c0)="6a720fea4d22d67745442e6224d42dd7c3c6641eb00d75ec80ff9dce0d09f542c306dc1b9ad923b55ba05cc5dee408b2e2bbeaf91cf3b639199d87df2b3e1f03dc1f9d3161", 0x45}], 0x2, &(0x7f0000000580)=[@iv={0x60, 0x117, 0x2, 0x45, "5dc33c92da96dea23eada66d7581ad294dc53a50a3c8e5a632ab5749744e798b2a6b9bb6554958bcfc9b40965e83e7df13f87b909abbd8018286c2aeaf677cf337c216de5d"}], 0x60, 0x4}], 0x2, 0x0) r6 = signalfd(r3, &(0x7f00000008c0)={[0x2dca]}, 0x8) ioctl$BLKRRPART(r6, 0x125f, 0x0) 17:10:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x1500, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x2}], 0x1, 0x0) 17:10:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000600000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000002001f"], 0x58}}, 0x0) [ 1278.446168][ T9358] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1278.698853][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1278.827653][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1278.836163][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.846782][ T9358] usb 4-1: config 6 has no interface number 0 [ 1278.853003][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x4}], 0x1, 0x0) 17:10:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="100000000a001f"], 0x58}}, 0x0) 17:10:52 executing program 5: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$rxrpc(r3, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x48]}}}, 0x24, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 17:10:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0058650000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1279.337951][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1279.347497][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.355812][ T9358] usb 4-1: Product: syz [ 1279.360095][ T9358] usb 4-1: Manufacturer: syz [ 1279.364801][ T9358] usb 4-1: SerialNumber: syz 17:10:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000058001f"], 0x58}}, 0x0) [ 1279.801896][T30786] fuse: Bad value for 'user_id' [ 1279.938653][ T9358] usb 4-1: USB disconnect, device number 45 [ 1280.756008][ T9358] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1281.026690][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1281.158038][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1281.166494][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.177112][ T9358] usb 4-1: config 6 has no interface number 0 [ 1281.183324][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:55 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x12, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:10:55 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000480)}}, {{&(0x7f00000002c0)=@isdn={0x22, 0x1, 0x8, 0x82, 0x8}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000880)="09874bb1df667742a6adee215cbed44dddbb36e58fe3d4f12e5d25c473682038f487cf135c022f3fc151b6b3e4cb91d587055738d7c12026301dfe83685efaa424754872a2caba8f84c20e0fb180661011974f44b1820cddcd810a1a9330463c729de5ea287ee12b7f158e8b8d2f658c3b9c6efc041a313427900fe751e29837f693639883d6273d62545024454a79452fc14f55581f42d7c895eb7d42af2f3f83ed6e6e3c72924b4a4bdaeb5d01bb59fcbb09de10f34eb39390a3a7e9aeaa1c06225ca467a3e1e72d8fc922352ab47c671acb0f1f526b195841c2e813", 0xdd}, {&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000000a80)="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", 0x102}], 0x3, &(0x7f0000000340)=[{0x40, 0x101, 0x0, "4abc9d7740a9e5a6c89566261768336f1b00feba3d340ff09e89a883c3d604a187f64e14afacdaf8b7431c05"}], 0x40}}], 0x2, 0x480c0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, &(0x7f00000006c0)={0x0, 0x3e8}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000980)={0x48, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x9, 0x34, @random="4d50a10810"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd50}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x2ce}, {&(0x7f0000000740)=""/73, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 17:10:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x7}], 0x1, 0x0) 17:10:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000073001f"], 0x58}}, 0x0) 17:10:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x1800, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000810000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1281.671148][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1281.680433][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.876435][ T9358] usb 4-1: can't set config #6, error -71 [ 1281.921431][ T9358] usb 4-1: USB disconnect, device number 46 17:10:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x8}], 0x1, 0x0) 17:10:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010021f"], 0x58}}, 0x0) 17:10:55 executing program 5: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011a460005000109021b00011b000000090400000e4e945b00090582abdc00"/41], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0xfffffff9}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 17:10:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0047880000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1282.516357][ T9358] usb 4-1: new high-speed USB device number 47 using dummy_hcd 17:10:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010041f"], 0x58}}, 0x0) [ 1282.756148][ T9358] usb 4-1: Using ep0 maxpacket: 32 17:10:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x11}], 0x1, 0x0) [ 1282.877982][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1282.886498][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.896842][ T9358] usb 4-1: config 6 has no interface number 0 [ 1282.903096][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1282.916657][T26743] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1283.188684][T26743] usb 6-1: device descriptor read/64, error 18 [ 1283.256664][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1283.265994][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.274147][ T9358] usb 4-1: Product: syz [ 1283.278590][ T9358] usb 4-1: Manufacturer: syz [ 1283.283297][ T9358] usb 4-1: SerialNumber: syz [ 1283.576406][T26743] usb 6-1: device descriptor read/64, error 18 [ 1283.652275][T30872] fuse: Bad value for 'user_id' [ 1283.673521][ T9358] usb 4-1: USB disconnect, device number 47 [ 1283.856448][T26743] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1284.126042][T26743] usb 6-1: device descriptor read/64, error 18 [ 1284.459226][ T9358] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1284.520552][T26743] usb 6-1: device descriptor read/64, error 18 [ 1284.646383][T26743] usb usb6-port1: attempt power cycle [ 1284.743029][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1284.877606][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1284.886138][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.896646][ T9358] usb 4-1: config 6 has no interface number 0 [ 1284.902901][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:10:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x3f00, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:10:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0048880000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010051f"], 0x58}}, 0x0) 17:10:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x29}], 0x1, 0x0) 17:10:58 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x1e, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 1285.366093][T26743] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1285.396725][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1285.406051][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.457648][T26743] usb 6-1: Invalid ep0 maxpacket: 1 [ 1285.577509][ T9358] usb 4-1: can't set config #6, error -71 [ 1285.641931][ T9358] usb 4-1: USB disconnect, device number 48 [ 1285.796543][T26743] usb 6-1: new high-speed USB device number 47 using dummy_hcd 17:10:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x30}], 0x1, 0x0) 17:10:59 executing program 5: syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000971cec0857a213200443010203010902240001000000000904097ae2f307eeab3b050b0000000000000905010000000000bc"], 0x0) 17:10:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000fff0000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:10:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010061f"], 0x58}}, 0x0) [ 1286.176489][T26743] usb 6-1: device descriptor read/8, error -71 [ 1286.296018][ T9358] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1286.386129][T26743] usb 6-1: device descriptor read/8, error -71 [ 1286.507583][T26743] usb usb6-port1: unable to enumerate USB device [ 1286.546344][ T9358] usb 4-1: Using ep0 maxpacket: 32 17:11:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x1f4}], 0x1, 0x0) [ 1286.666930][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1286.675524][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.688016][ T9358] usb 4-1: config 6 has no interface number 0 [ 1286.694237][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010081f"], 0x58}}, 0x0) 17:11:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000400300000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1286.876136][T26743] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1287.111585][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1287.116074][T26743] usb 6-1: Using ep0 maxpacket: 8 [ 1287.121319][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.135254][ T9358] usb 4-1: Product: syz [ 1287.139880][ T9358] usb 4-1: Manufacturer: syz [ 1287.145199][ T9358] usb 4-1: SerialNumber: syz [ 1287.247782][T26743] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 1287.256319][T26743] usb 6-1: config 0 has an invalid descriptor of length 59, skipping remainder of the config [ 1287.266890][T26743] usb 6-1: config 0 has no interface number 0 [ 1287.273117][T26743] usb 6-1: too many endpoints for config 0 interface 9 altsetting 122: 226, using maximum allowed: 30 [ 1287.284381][T26743] usb 6-1: config 0 interface 9 altsetting 122 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 1287.298262][T26743] usb 6-1: config 0 interface 9 has no altsetting 0 17:11:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x4000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x3e8}], 0x1, 0x0) 17:11:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="10000000100a1f"], 0x58}}, 0x0) 17:11:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000034000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1287.623590][T30940] fuse: Bad value for 'user_id' [ 1287.684816][ T9358] usb 4-1: USB disconnect, device number 49 [ 1287.900794][T26743] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=43.04 [ 1287.910120][T26743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.918825][T26743] usb 6-1: Product: syz [ 1287.923109][T26743] usb 6-1: Manufacturer: syz [ 1287.928118][T26743] usb 6-1: SerialNumber: syz [ 1288.212906][T26743] usb 6-1: config 0 descriptor?? [ 1288.510912][T26743] usb 6-1: USB disconnect, device number 48 [ 1288.637374][ T9358] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1288.892491][ T9358] usb 4-1: Using ep0 maxpacket: 32 17:11:02 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x25, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x5c8}], 0x1, 0x0) [ 1289.196345][ T9358] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1289.204058][ T9358] usb 4-1: can't read configurations, error -71 [ 1289.256149][T26743] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1289.496827][T26743] usb 6-1: Using ep0 maxpacket: 8 [ 1289.618939][T26743] usb 6-1: config 0 has an invalid interface number: 9 but max is 0 [ 1289.627243][T26743] usb 6-1: config 0 has an invalid descriptor of length 59, skipping remainder of the config [ 1289.637695][T26743] usb 6-1: config 0 has no interface number 0 [ 1289.644350][T26743] usb 6-1: too many endpoints for config 0 interface 9 altsetting 122: 226, using maximum allowed: 30 [ 1289.655990][T26743] usb 6-1: config 0 interface 9 altsetting 122 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 1289.672691][T26743] usb 6-1: config 0 interface 9 has no altsetting 0 17:11:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d0418c2000000000001070000000000000022000800000000008100"/54], 0x0) syz_usb_disconnect(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d042fc54000000000010902240001000030000904100001030100000921000100012201"], 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r5) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r4, 0x0, r5, 0x0, 0x10973, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x304}, "7deaf0ac1012a8c7", "923af6c008d8c4e28cd7697baf271143", "d2b6c174", "d76b9febc7be57a1"}, 0x28) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x0) 17:11:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000001000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="10000000100c1f"], 0x58}}, 0x0) 17:11:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x4788, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x700}], 0x1, 0x0) [ 1289.948016][ T9358] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1290.006331][T26743] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=43.04 [ 1290.015683][T26743] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.024064][T26743] usb 6-1: Product: syz [ 1290.226796][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1290.360197][T26743] usb 6-1: config 0 descriptor?? [ 1290.366368][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1290.376962][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.387721][ T9358] usb 4-1: config 6 has no interface number 0 [ 1290.394063][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1290.399141][T26743] usb 6-1: can't set config #0, error -71 [ 1290.523259][T26743] usb 6-1: USB disconnect, device number 49 17:11:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="10000000100f1f"], 0x58}}, 0x0) 17:11:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x810}], 0x1, 0x0) 17:11:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000002000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1290.778761][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1290.790377][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.799136][ T9358] usb 4-1: Product: syz [ 1290.803402][ T9358] usb 4-1: Manufacturer: syz [ 1290.808283][ T9358] usb 4-1: SerialNumber: syz [ 1291.006481][T26743] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1291.213152][T31018] fuse: Bad value for 'user_id' [ 1291.247080][T26743] usb 6-1: Using ep0 maxpacket: 16 [ 1291.271296][ T9358] usb 4-1: USB disconnect, device number 51 17:11:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010101f"], 0x58}}, 0x0) [ 1291.406945][T26743] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1291.414727][T26743] usb 6-1: can't read configurations, error -61 17:11:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xbb8}], 0x1, 0x0) [ 1291.616345][T26743] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1291.860245][T26743] usb 6-1: Using ep0 maxpacket: 16 [ 1292.036928][T26743] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1292.044629][T26743] usb 6-1: can't read configurations, error -61 [ 1292.076038][ T9358] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1292.084531][T26743] usb usb6-port1: attempt power cycle [ 1292.319906][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1292.449449][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1292.458097][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.468626][ T9358] usb 4-1: config 6 has no interface number 0 [ 1292.474842][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1292.807212][T26743] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1292.897636][T26743] usb 6-1: Using ep0 maxpacket: 16 17:11:06 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x2f, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000003000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1293.056862][T26743] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1293.064555][T26743] usb 6-1: can't read configurations, error -61 [ 1293.096315][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1293.106408][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.239197][ T9358] usb 4-1: can't set config #6, error -71 [ 1293.284435][ T9358] usb 4-1: USB disconnect, device number 52 [ 1293.321638][T26743] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1293.420448][T26743] usb 6-1: Using ep0 maxpacket: 16 17:11:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="080100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000d800128009000100766c616e00000000c800028006000100000000004c0003800c0001000700000076c600000c00010001000000070000000c000100ff030000000100000c00010005000000800000000c00010007000000000000000c0001000900000077030000700004800c000100ffffffff010100000c00010000800000020000000c00010071070000090000000c00010001000000020000000c00010004000000000000000c00010006030000060000000c000100f0720000080000000c00010001800000040000000c000100000000007f00000008000500", @ANYRES32=r2, @ANYBLOB="704068be", @ANYRES32=r2, @ANYBLOB], 0x108}}, 0x0) 17:11:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010481f"], 0x58}}, 0x0) 17:11:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x4888, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x1008}], 0x1, 0x0) 17:11:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000004000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1293.607400][T26743] usb 6-1: device descriptor read/all, error -71 [ 1293.629357][T26743] usb usb6-port1: unable to enumerate USB device [ 1293.816521][ T9358] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1294.115364][ T9358] usb 4-1: Using ep0 maxpacket: 32 17:11:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x1100}], 0x1, 0x0) [ 1294.257994][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1294.266934][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.279269][ T9358] usb 4-1: config 6 has no interface number 0 [ 1294.285808][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1294.297342][T31117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 17:11:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000005000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010601f"], 0x58}}, 0x0) [ 1294.545069][T31123] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1294.557624][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1294.567017][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.577296][ T9358] usb 4-1: Product: syz [ 1294.581676][ T9358] usb 4-1: Manufacturer: syz [ 1294.587104][ T9358] usb 4-1: SerialNumber: syz 17:11:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x2000}], 0x1, 0x0) 17:11:08 executing program 5: ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000000)) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000080)=""/232, 0x1000000, 0x1800, 0x1000}, 0x20) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0xf, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvme-fabrics\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x800, 0x2, [0x8, 0x7]}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e22, 0x8, @empty, 0x8}}}, &(0x7f0000000480)=0x84) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0xc4800) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000540)=0x6, 0x4) syz_open_dev$midi(&(0x7f0000000580)='/dev/midi#\x00', 0x9, 0x8000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000005c0)=0x3, 0x4) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000600)='.pending_reads\x00', 0x20002, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r6 = syz_open_dev$mouse(&(0x7f0000000740)='/dev/input/mouse#\x00', 0x8, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000780)=0x7, 0x8) [ 1295.024666][T31091] fuse: Bad value for 'user_id' [ 1295.093521][ T9358] usb 4-1: USB disconnect, device number 53 [ 1295.919908][ T9358] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1296.176110][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1296.313423][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1296.322239][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.332559][ T9358] usb 4-1: config 6 has no interface number 0 [ 1296.338923][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:10 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x48, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x10}}, 0x0) 17:11:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000006000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x2900}], 0x1, 0x0) 17:11:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x5865, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:10 executing program 5: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000406ff0600000000000000785cffffff050004e5000400000900020073797a3000f200000500010006"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x447fe7, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000000c1400022dbd5b0000dcdf2508000300045e5a7e"], 0x18}, 0x1, 0x0, 0x0, 0x51}, 0x4000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r6) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r5, 0x0, r6, 0x0, 0x10973, 0x0) write$cgroup_type(r6, &(0x7f0000000180)='threaded\x00', 0x9) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x20000081) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r0) [ 1296.927564][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1296.937026][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.168139][ T9358] usb 4-1: can't set config #6, error -71 [ 1297.244757][ T9358] usb 4-1: USB disconnect, device number 54 [ 1297.298233][T31175] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 17:11:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x3000}], 0x1, 0x0) [ 1297.876525][ T9358] usb 4-1: new high-speed USB device number 55 using dummy_hcd 17:11:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000007000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0xc0}}, 0x0) [ 1298.126046][ T9358] usb 4-1: Using ep0 maxpacket: 32 17:11:11 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x803, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r6) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r5, 0x0, r6, 0x0, 0x10973, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r1, 0x16}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x3, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x6}, {0x2, 0x5}, {0xa, 0x6}}, ["", "", "", "", ""]}, 0x24}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000200012800800010076746900140002"], 0x40}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1298.268448][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1298.276929][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.287376][ T9358] usb 4-1: config 6 has no interface number 0 [ 1298.293622][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x80fe}], 0x1, 0x0) 17:11:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000008000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1298.587812][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1298.597146][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.605376][ T9358] usb 4-1: Product: syz [ 1298.609849][ T9358] usb 4-1: Manufacturer: syz [ 1298.614606][ T9358] usb 4-1: SerialNumber: syz [ 1298.752857][T31209] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1299.011183][T31186] fuse: Bad value for 'user_id' [ 1299.144657][ T9358] usb 4-1: USB disconnect, device number 55 [ 1300.038878][ T9358] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1300.326404][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1300.487483][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1300.496205][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.506501][ T9358] usb 4-1: config 6 has no interface number 0 [ 1300.512803][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:14 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x4c, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0xec1}}, 0x0) 17:11:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xb80b}], 0x1, 0x0) 17:11:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x6000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000009000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:14 executing program 5: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x2, 0x6, 0x0, 0x6c, 0xf0ffff, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x24}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000180)=0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0xc7e2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2f0000001c000507000000000d2300000200041f01000000fc0003c913", 0x1d}], 0x1}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x5) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 1300.997952][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1301.007460][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.164392][ T9358] usb 4-1: can't set config #6, error -71 [ 1301.305918][ T9358] usb 4-1: USB disconnect, device number 56 [ 1301.915984][ T9358] usb 4-1: new high-speed USB device number 57 using dummy_hcd 17:11:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xc805}], 0x1, 0x0) 17:11:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x33fe0}}, 0x0) 17:11:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000000000a000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1302.168825][ T9358] usb 4-1: Using ep0 maxpacket: 32 17:11:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000480)) [ 1302.297991][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1302.306546][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.317017][ T9358] usb 4-1: config 6 has no interface number 0 [ 1302.323652][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x20000498}}, 0x0) [ 1302.667894][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1302.677253][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.685544][ T9358] usb 4-1: Product: syz [ 1302.690088][ T9358] usb 4-1: Manufacturer: syz [ 1302.694833][ T9358] usb 4-1: SerialNumber: syz 17:11:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xe803}], 0x1, 0x0) [ 1303.224880][T31254] fuse: Bad value for 'user_id' [ 1303.275443][ T9358] usb 4-1: USB disconnect, device number 57 [ 1304.094959][ T8510] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1304.356516][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1304.537300][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1304.545619][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.556323][ T8510] usb 4-1: config 6 has no interface number 0 [ 1304.562967][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:18 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x5c, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:18 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x4, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0xc61f6000) dup(0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) 17:11:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000000000b000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x7ffff000}}, 0x0) 17:11:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x6201, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xf401}], 0x1, 0x0) [ 1304.906962][ T8510] usb 4-1: string descriptor 0 read error: -71 [ 1304.915536][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1304.925412][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.189724][ T8510] usb 4-1: can't set config #6, error -71 [ 1305.239761][ T8510] usb 4-1: USB disconnect, device number 58 17:11:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xfe80}], 0x1, 0x0) 17:11:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0xfffffdef}}, 0x0) 17:11:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000000000c000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1305.786125][ T8510] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1306.048306][ T8510] usb 4-1: Using ep0 maxpacket: 32 17:11:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x34000}], 0x1, 0x0) [ 1306.177569][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1306.177650][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config 17:11:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000000030c000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x2}, 0x0) [ 1306.177711][ T8510] usb 4-1: config 6 has no interface number 0 [ 1306.177789][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1306.347862][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1306.347940][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.347998][ T8510] usb 4-1: Product: syz [ 1306.348066][ T8510] usb 4-1: Manufacturer: syz [ 1306.348123][ T8510] usb 4-1: SerialNumber: syz [ 1306.611148][T31322] fuse: Bad value for 'user_id' [ 1306.620441][ T8510] usb 4-1: USB disconnect, device number 59 [ 1307.415950][ T8510] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1307.677777][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1307.797303][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1307.811534][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.822188][ T8510] usb 4-1: config 6 has no interface number 0 [ 1307.828524][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1308.170553][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1308.180364][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.188587][ T8510] usb 4-1: Product: syz [ 1308.192873][ T8510] usb 4-1: Manufacturer: syz [ 1308.197716][ T8510] usb 4-1: SerialNumber: syz 17:11:21 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x68, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x6558, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:21 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x40000}], 0x1, 0x0) 17:11:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000000000d000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x8}, 0x0) 17:11:21 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x4, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0xc61f6000) dup(0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) [ 1308.477589][ T8510] usb 4-1: can't set config #6, error -71 [ 1308.557501][ T8510] usb 4-1: USB disconnect, device number 60 17:11:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x400300}], 0x1, 0x0) 17:11:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000000000e000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1309.146360][ T8510] usb 4-1: new high-speed USB device number 61 using dummy_hcd 17:11:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x600}, 0x0) 17:11:22 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x4, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0xc61f6000) dup(0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) 17:11:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x1000000}], 0x1, 0x0) [ 1309.406911][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1309.542398][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1309.553709][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.564851][ T8510] usb 4-1: config 6 has no interface number 0 [ 1309.572085][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000000000f000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1309.858048][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1309.858128][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.858187][ T8510] usb 4-1: Product: syz [ 1309.858248][ T8510] usb 4-1: Manufacturer: syz [ 1309.858307][ T8510] usb 4-1: SerialNumber: syz [ 1310.124436][T31395] fuse: Bad value for 'user_id' [ 1310.131883][ T8510] usb 4-1: USB disconnect, device number 61 [ 1310.986048][ T8510] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1311.226056][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1311.346140][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1311.354466][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.367071][ T8510] usb 4-1: config 6 has no interface number 0 [ 1311.373294][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1311.606410][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1311.615974][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.624069][ T8510] usb 4-1: Product: syz [ 1311.628535][ T8510] usb 4-1: Manufacturer: syz [ 1311.633248][ T8510] usb 4-1: SerialNumber: syz 17:11:25 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x6c, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x2}, 0x0) 17:11:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x2000000}], 0x1, 0x0) 17:11:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x7401, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000010000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:25 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x4, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0xc61f6000) dup(0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) [ 1312.039213][ T8510] usb 4-1: can't set config #6, error -71 [ 1312.069509][ T8510] usb 4-1: USB disconnect, device number 62 17:11:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x4000000}], 0x1, 0x0) 17:11:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000011000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x4}, 0x0) 17:11:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x7000000}], 0x1, 0x0) [ 1312.839297][ T8510] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1313.075947][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1313.209657][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1313.209733][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.209796][ T8510] usb 4-1: config 6 has no interface number 0 [ 1313.209870][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000012000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1313.397686][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f 17:11:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x5}, 0x0) [ 1313.397764][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.397823][ T8510] usb 4-1: Product: syz [ 1313.397881][ T8510] usb 4-1: Manufacturer: syz [ 1313.397939][ T8510] usb 4-1: SerialNumber: syz [ 1313.667954][T31469] fuse: Bad value for 'user_id' [ 1313.682237][ T8510] usb 4-1: USB disconnect, device number 63 [ 1314.465958][ T9388] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1314.715944][ T9388] usb 4-1: Using ep0 maxpacket: 32 [ 1314.852067][ T9388] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1314.860680][ T9388] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.872049][ T9388] usb 4-1: config 6 has no interface number 0 [ 1314.879213][ T9388] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1315.087596][ T9388] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1315.096919][ T9388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.105020][ T9388] usb 4-1: Product: syz [ 1315.109535][ T9388] usb 4-1: Manufacturer: syz [ 1315.114237][ T9388] usb 4-1: SerialNumber: syz [ 1315.736511][ T9388] usb 4-1: USB disconnect, device number 64 17:11:29 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x74, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x8000000}], 0x1, 0x0) 17:11:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x6}, 0x0) 17:11:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x8100, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000025000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x983a, @rand_addr, 0x900}, 0x1c) 17:11:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xe0082fd}], 0x1, 0x0) 17:11:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000060000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1316.505914][ T9388] usb 4-1: new high-speed USB device number 65 using dummy_hcd 17:11:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x8}, 0x0) 17:11:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x40004007fff, 0x32fe3cf2}, 0x14) sendfile(r1, r0, 0x0, 0x10000edbe) [ 1316.756270][ T9388] usb 4-1: Using ep0 maxpacket: 32 17:11:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x10080000}], 0x1, 0x0) [ 1316.888829][ T9388] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1316.899290][ T9388] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.910677][ T9388] usb 4-1: config 6 has no interface number 0 [ 1316.917007][ T9388] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xa}, 0x0) [ 1317.318134][ T9388] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1317.327510][ T9388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.335616][ T9388] usb 4-1: Product: syz [ 1317.340314][ T9388] usb 4-1: Manufacturer: syz [ 1317.345027][ T9388] usb 4-1: SerialNumber: syz [ 1317.736882][T31545] fuse: Bad value for 'user_id' [ 1317.760175][ T9388] usb 4-1: USB disconnect, device number 65 [ 1318.569766][ T9388] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1318.826230][ T9388] usb 4-1: Using ep0 maxpacket: 32 [ 1318.957429][ T9388] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1318.965919][ T9388] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.976291][ T9388] usb 4-1: config 6 has no interface number 0 [ 1318.982603][ T9388] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:32 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x7a, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000005865000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x11000000}], 0x1, 0x0) 17:11:32 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) pipe2(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) creat(0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) pipe(&(0x7f00000001c0)) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000400)=ANY=[], 0x7b) sendfile(r1, r1, &(0x7f0000000240), 0x7ffd) 17:11:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x8847, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xc}, 0x0) [ 1319.396203][ T9388] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1319.405485][ T9388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.414034][ T9388] usb 4-1: Product: syz [ 1319.571875][ T9388] usb 4-1: can't set config #6, error -71 [ 1319.601004][ T9388] usb 4-1: USB disconnect, device number 66 17:11:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x20000000}], 0x1, 0x0) 17:11:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xf}, 0x0) 17:11:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000081000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1320.129214][ T9388] usb 4-1: new high-speed USB device number 67 using dummy_hcd 17:11:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x46}, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x4c}}, 0x0) [ 1320.385990][ T9388] usb 4-1: Using ep0 maxpacket: 32 [ 1320.511490][T31636] debugfs: Directory 'netdev:wlan1' with parent 'phy19' already present! [ 1320.527328][ T9388] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1320.536006][ T9388] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.546414][ T9388] usb 4-1: config 6 has no interface number 0 [ 1320.552976][ T9388] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x10}, 0x0) [ 1320.582868][T31637] debugfs: Directory 'netdev:wlan1' with parent 'phy19' already present! 17:11:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x29000000}], 0x1, 0x0) [ 1320.911169][ T9388] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1320.920501][ T9388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.928895][ T9388] usb 4-1: Product: syz [ 1320.933165][ T9388] usb 4-1: Manufacturer: syz [ 1320.938054][ T9388] usb 4-1: SerialNumber: syz [ 1321.317444][T31614] fuse: Bad value for 'user_id' [ 1321.338706][ T9388] usb 4-1: USB disconnect, device number 67 [ 1322.156409][ T9388] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1322.406201][ T9388] usb 4-1: Using ep0 maxpacket: 32 [ 1322.530835][ T9388] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1322.539429][ T9388] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.549926][ T9388] usb 4-1: config 6 has no interface number 0 [ 1322.556287][ T9388] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:36 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x89, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00ffffff81000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:36 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x4, 0x10001, 0x0, 0x1, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40) 17:11:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x48}, 0x0) 17:11:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x8848, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x30000000}], 0x1, 0x0) [ 1322.796152][ T9388] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1322.796259][ T9388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.946251][ T9388] usb 4-1: can't set config #6, error -71 [ 1323.005416][ T9388] usb 4-1: USB disconnect, device number 68 17:11:36 executing program 5: syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') syz_open_dev$sndpcmp(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40)='nl80211\x00') socket(0x26, 0x0, 0x0) 17:11:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x7ffffff7}], 0x1, 0x0) 17:11:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x60}, 0x0) 17:11:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000004788000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1323.555475][ T9388] usb 4-1: new high-speed USB device number 69 using dummy_hcd 17:11:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000005c0)=[{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, 0x0}], 0x1, 0x0) [ 1323.795944][ T9388] usb 4-1: Using ep0 maxpacket: 32 17:11:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x8dffffff}], 0x1, 0x0) [ 1323.920622][ T9388] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1323.929267][ T9388] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.939679][ T9388] usb 4-1: config 6 has no interface number 0 [ 1323.946034][ T9388] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1324.268473][ T9388] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1324.277897][ T9388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.286326][ T9388] usb 4-1: Product: syz [ 1324.290677][ T9388] usb 4-1: Manufacturer: syz [ 1324.295385][ T9388] usb 4-1: SerialNumber: syz [ 1324.689265][T31687] fuse: Bad value for 'user_id' [ 1324.709878][ T9388] usb 4-1: USB disconnect, device number 69 [ 1325.506128][ T9388] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1325.746377][ T9388] usb 4-1: Using ep0 maxpacket: 32 [ 1325.868442][ T9388] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1325.877022][ T9388] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.887378][ T9388] usb 4-1: config 6 has no interface number 0 [ 1325.893551][ T9388] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:39 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x8a, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x2f5}, 0x0) 17:11:39 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000280)) 17:11:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000004888000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x8a02, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0x97ffffff}], 0x1, 0x0) [ 1326.146201][ T9388] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1326.155372][ T9388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.163828][ T9388] usb 4-1: Product: syz [ 1326.296458][ T9388] usb 4-1: can't set config #6, error -71 [ 1326.340989][ T9388] usb 4-1: USB disconnect, device number 70 17:11:40 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001300)='nl80211\x00') sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) 17:11:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x500}, 0x0) 17:11:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xb80b0000}], 0x1, 0x0) 17:11:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00ffffa888000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1326.906400][ T9388] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1327.146086][ T9388] usb 4-1: Using ep0 maxpacket: 32 17:11:40 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='pagemap\x00') 17:11:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x600}, 0x0) [ 1327.267680][ T9388] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1327.276327][ T9388] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.286779][ T9388] usb 4-1: config 6 has no interface number 0 [ 1327.292997][ T9388] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1327.677475][ T9388] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1327.686893][ T9388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.695000][ T9388] usb 4-1: Product: syz [ 1327.699503][ T9388] usb 4-1: Manufacturer: syz [ 1327.704745][ T9388] usb 4-1: SerialNumber: syz [ 1328.065942][T31756] fuse: Bad value for 'user_id' [ 1328.084771][ T9388] usb 4-1: USB disconnect, device number 71 [ 1328.866526][ T8511] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1329.128149][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1329.247834][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1329.256596][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.267043][ T8511] usb 4-1: config 6 has no interface number 0 [ 1329.273273][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:42 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x8b, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:42 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xc8050000}], 0x1, 0x0) 17:11:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x9c02, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x0, 0x798f, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000068c0)=[{{&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, 0x0, 0x0, &(0x7f0000001880)=""/188, 0xbc}, 0x2}, {{&(0x7f0000003b40)=@in={0x2, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000002cc0)=""/42, 0x2a}, 0x6}, {{&(0x7f0000002d00)=@rc={0x1f, @none}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002d80)=""/249, 0xf9}, {&(0x7f0000002e80)=""/228, 0xe4}, {&(0x7f0000002f80)=""/227, 0xe3}], 0x3, &(0x7f00000030c0)=""/247, 0xf7}, 0x5}, {{&(0x7f00000031c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000003300)=[{&(0x7f0000003240)=""/163, 0xa3}], 0x1, &(0x7f0000003340)=""/100, 0x64}, 0x9}], 0x4, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x4000081, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='p', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) write(r3, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) 17:11:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00ffffff9e000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xa00}, 0x0) [ 1329.576350][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1329.585539][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.717156][ T8511] usb 4-1: can't set config #6, error -71 [ 1329.759196][ T8511] usb 4-1: USB disconnect, device number 72 17:11:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xc00}, 0x0) 17:11:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xe8030000}], 0x1, 0x0) 17:11:43 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) 17:11:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00fffffff0000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1330.255999][ T8511] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1330.498419][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1330.618452][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1330.626988][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.637486][ T8511] usb 4-1: config 6 has no interface number 0 [ 1330.643736][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:44 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) close(0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000300)='*\x00', &(0x7f0000000340)='&*\x8a!E/\xe8-\x00', 0x0, 0x0]) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:11:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xeffdffff}], 0x1, 0x0) [ 1331.007573][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1331.016973][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.027443][ T8511] usb 4-1: Product: syz [ 1331.031764][ T8511] usb 4-1: Manufacturer: syz [ 1331.037097][ T8511] usb 4-1: SerialNumber: syz [ 1331.482271][T31822] fuse: Bad value for 'user_id' [ 1331.517659][ T8511] usb 4-1: USB disconnect, device number 73 [ 1332.307768][ T8511] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1332.547730][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1332.668243][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1332.676685][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.687278][ T8511] usb 4-1: config 6 has no interface number 0 [ 1332.693433][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:46 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x90, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xf00}, 0x0) 17:11:46 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) close(0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000300)='*\x00', &(0x7f0000000340)='&*\x8a!E/\xe8-\x00', 0x0, 0x0]) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:11:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000fff000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x1000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xf4010000}], 0x1, 0x0) [ 1332.936703][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1332.946066][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.954174][ T8511] usb 4-1: Product: syz [ 1333.099001][ T8511] usb 4-1: can't set config #6, error -71 [ 1333.156683][ T8511] usb 4-1: USB disconnect, device number 74 17:11:46 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) close(0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000300)='*\x00', &(0x7f0000000340)='&*\x8a!E/\xe8-\x00', 0x0, 0x0]) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:11:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xf5ffffff}], 0x1, 0x0) 17:11:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x4788}, 0x0) 17:11:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0088a8ffff000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:47 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) close(0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000500)=[&(0x7f0000000300)='*\x00', &(0x7f0000000340)='&*\x8a!E/\xe8-\x00', 0x0, 0x0]) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1333.749209][ T8511] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1334.015901][ T8511] usb 4-1: Using ep0 maxpacket: 32 17:11:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x4800}, 0x0) [ 1334.137525][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1334.146137][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.156704][ T8511] usb 4-1: config 6 has no interface number 0 [ 1334.162939][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1334.588058][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1334.597481][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.605667][ T8511] usb 4-1: Product: syz [ 1334.610379][ T8511] usb 4-1: Manufacturer: syz [ 1334.615093][ T8511] usb 4-1: SerialNumber: syz [ 1334.952518][T31901] fuse: Bad value for 'user_id' [ 1334.983875][ T8511] usb 4-1: USB disconnect, device number 75 [ 1335.786070][ T8511] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1336.027619][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1336.148423][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1336.157172][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.167684][ T8511] usb 4-1: config 6 has no interface number 0 [ 1336.173833][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:49 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x91, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000005c0)=[{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x20}], 0x1, 0x0) 17:11:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x2000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xf7ffff7f}], 0x1, 0x0) 17:11:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x4888}, 0x0) 17:11:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff007fffffff000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1336.466160][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1336.475339][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.603097][ T8511] usb 4-1: can't set config #6, error -71 [ 1336.671567][ T8511] usb 4-1: USB disconnect, device number 76 17:11:50 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mlockall(0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) 17:11:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x5865}, 0x0) 17:11:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xfd82000e}], 0x1, 0x0) 17:11:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0081ffffff000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1337.258912][ T8511] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1337.506204][ T8511] usb 4-1: Using ep0 maxpacket: 32 17:11:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x6000}, 0x0) [ 1337.627767][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1337.636292][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.647226][ T8511] usb 4-1: config 6 has no interface number 0 [ 1337.653563][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:51 executing program 5: syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x800, 0x2b8002) [ 1337.978634][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1337.990088][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.998881][ T8511] usb 4-1: Product: syz [ 1338.003273][ T8511] usb 4-1: Manufacturer: syz [ 1338.008128][ T8511] usb 4-1: SerialNumber: syz [ 1338.330285][T31972] fuse: Bad value for 'user_id' [ 1338.355209][ T9358] usb 4-1: USB disconnect, device number 77 [ 1339.146179][ T9358] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1339.386790][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1339.507278][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1339.516241][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.526656][ T9358] usb 4-1: config 6 has no interface number 0 [ 1339.532943][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:53 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x92, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xfe800000}], 0x1, 0x0) 17:11:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x3000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff009effffff000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x6558}, 0x0) 17:11:53 executing program 5: setrlimit(0x0, &(0x7f0000000280)) getresuid(&(0x7f0000000000), 0x0, 0x0) [ 1339.809289][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1339.818667][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.827045][ T9358] usb 4-1: Product: syz [ 1339.984473][ T9358] usb 4-1: can't set config #6, error -71 [ 1340.003744][ T9358] usb 4-1: USB disconnect, device number 78 17:11:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x8100}, 0x0) 17:11:53 executing program 5: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000840)='batadv\x00') 17:11:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xfffffdef}], 0x1, 0x0) 17:11:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00f0ffffff000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1340.578204][ T9358] usb 4-1: new high-speed USB device number 79 using dummy_hcd 17:11:54 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40)='nl80211\x00') [ 1340.856198][ T9358] usb 4-1: Using ep0 maxpacket: 32 17:11:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x8847}, 0x0) [ 1340.978054][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1340.986588][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.997116][ T9358] usb 4-1: config 6 has no interface number 0 [ 1341.003381][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1341.387731][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1341.397029][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.405131][ T9358] usb 4-1: Product: syz [ 1341.409590][ T9358] usb 4-1: Manufacturer: syz [ 1341.414296][ T9358] usb 4-1: SerialNumber: syz [ 1341.719191][T32041] fuse: Bad value for 'user_id' [ 1341.746239][ T9358] usb 4-1: USB disconnect, device number 79 [ 1342.539450][ T9358] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1342.788415][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1342.908640][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1342.917277][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.927608][ T9358] usb 4-1: config 6 has no interface number 0 [ 1342.933850][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:56 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x93, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xffffff8d}], 0x1, 0x0) 17:11:56 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x1}}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001340)=""/4084, 0xff4}], 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 17:11:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000340002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x4000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x8848}, 0x0) [ 1343.176766][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1343.186327][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.194427][ T9358] usb 4-1: Product: syz [ 1343.332311][ T9358] usb 4-1: can't set config #6, error -71 [ 1343.383119][ T9358] usb 4-1: USB disconnect, device number 80 17:11:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xf502}, 0x0) 17:11:57 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x1}}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001340)=""/4084, 0xff4}], 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 17:11:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xffffff97}], 0x1, 0x0) 17:11:57 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000012c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1343.986493][ T9358] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1344.226409][ T9358] usb 4-1: Using ep0 maxpacket: 32 17:11:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x34000}, 0x0) 17:11:57 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x1}}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001340)=""/4084, 0xff4}], 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 1344.357458][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1344.366022][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.376411][ T9358] usb 4-1: config 6 has no interface number 0 [ 1344.382674][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1344.719074][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1344.728590][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.737009][ T9358] usb 4-1: Product: syz [ 1344.741319][ T9358] usb 4-1: Manufacturer: syz [ 1344.748182][ T9358] usb 4-1: SerialNumber: syz [ 1345.072945][T32110] fuse: Bad value for 'user_id' [ 1345.084343][ T9358] usb 4-1: USB disconnect, device number 81 [ 1345.886950][ T9358] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1346.148243][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1346.267890][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1346.276327][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.288198][ T9358] usb 4-1: config 6 has no interface number 0 [ 1346.294320][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:11:59 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x98, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:11:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}, 0xfffffff5}], 0x1, 0x0) 17:11:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000022c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:11:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x5000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:11:59 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x1}}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001340)=""/4084, 0xff4}], 0x1) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 17:11:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x400300}, 0x0) [ 1346.636848][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1346.646346][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.654644][ T9358] usb 4-1: Product: syz [ 1346.814856][ T9358] usb 4-1: can't set config #6, error -71 [ 1346.864975][ T9358] usb 4-1: USB disconnect, device number 82 17:12:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x1000000}, 0x0) 17:12:00 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="45242a1bff97"}, 0x14) syz_genetlink_get_family_id$nl80211(0x0) sendto$inet6(r0, &(0x7f0000000080)="03042a015c0060000e03002cfff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000908d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 17:12:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x2, 0x0) 17:12:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000032c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1347.385937][ T9358] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1347.626442][ T9358] usb 4-1: Using ep0 maxpacket: 32 17:12:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x2000000}, 0x0) 17:12:01 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) write$sndseq(r0, 0x0, 0x0) [ 1347.747706][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1347.756239][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.766766][ T9358] usb 4-1: config 6 has no interface number 0 [ 1347.772980][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1348.174646][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1348.184223][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.192562][ T9358] usb 4-1: Product: syz [ 1348.196957][ T9358] usb 4-1: Manufacturer: syz [ 1348.201657][ T9358] usb 4-1: SerialNumber: syz [ 1348.513045][T32176] fuse: Bad value for 'user_id' [ 1348.540269][ T9388] usb 4-1: USB disconnect, device number 83 [ 1349.332114][ T9388] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1349.578199][ T9388] usb 4-1: Using ep0 maxpacket: 32 [ 1349.698074][ T9388] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1349.707800][ T9388] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.718415][ T9388] usb 4-1: config 6 has no interface number 0 [ 1349.724635][ T9388] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:03 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x99, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x3, 0x0) 17:12:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x6000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:12:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000042c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x4000000}, 0x0) 17:12:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {"a2e3ad21ed6b52f99cfbf4c087f719b4d04fe7ff7fc6e5539b3e6e0e8b546a1b233894370890e0878fdb1ac6e7049b44b4956c409a472a5b67f3988f7ef31952a981ffe8d178708c523c921b1b254b0a169b46d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fef5952a5391fd5615d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f7927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39973132f02768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90195c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) [ 1350.016210][ T9388] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1350.025651][ T9388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:12:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x5000000}, 0x0) 17:12:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x7, 0x0) 17:12:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000052c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1350.158107][ T9388] usb 4-1: can't set config #6, error -71 [ 1350.178871][ T9388] usb 4-1: USB disconnect, device number 84 [ 1350.707241][ T9388] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1350.946532][ T9388] usb 4-1: Using ep0 maxpacket: 32 17:12:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x6000000}, 0x0) [ 1351.067914][ T9388] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1351.067987][ T9388] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config 17:12:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x8, 0x0) [ 1351.068043][ T9388] usb 4-1: config 6 has no interface number 0 [ 1351.068119][ T9388] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1351.226609][ T9388] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1351.226688][ T9388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.226746][ T9388] usb 4-1: Product: syz [ 1351.226821][ T9388] usb 4-1: Manufacturer: syz 17:12:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000062c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1351.226881][ T9388] usb 4-1: SerialNumber: syz [ 1351.487016][T32246] fuse: Bad value for 'user_id' [ 1351.508805][ T9388] usb 4-1: USB disconnect, device number 85 [ 1352.296268][ T9358] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1352.556053][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1352.676141][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1352.684449][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1352.694936][ T9358] usb 4-1: config 6 has no interface number 0 [ 1352.701529][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1352.989155][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1352.998509][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.006827][ T9358] usb 4-1: Product: syz [ 1353.011105][ T9358] usb 4-1: Manufacturer: syz [ 1353.015971][ T9358] usb 4-1: SerialNumber: syz 17:12:06 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x300, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x7000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:12:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x8000000}, 0x0) 17:12:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x2a, 0x0) 17:12:06 executing program 5: socket$inet(0x2, 0x8f20394607f0df6d, 0x0) 17:12:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000072c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1353.377097][ T9358] usb 4-1: can't set config #6, error -71 [ 1353.459478][ T9358] usb 4-1: USB disconnect, device number 86 17:12:07 executing program 5: r0 = open(&(0x7f0000000e40)='.\x00', 0x0, 0x0) dup(r0) 17:12:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xa000000}, 0x0) [ 1354.106306][ T8511] usb 4-1: new high-speed USB device number 87 using dummy_hcd 17:12:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000082c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x500, 0x0) [ 1354.346080][ T8511] usb 4-1: Using ep0 maxpacket: 32 17:12:08 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @remote, @val, {@ipv6}}, 0x0) [ 1354.468747][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1354.479669][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.490417][ T8511] usb 4-1: config 6 has no interface number 0 [ 1354.496824][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xc000000}, 0x0) [ 1354.908483][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1354.918003][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.926334][ T8511] usb 4-1: Product: syz [ 1354.930646][ T8511] usb 4-1: Manufacturer: syz [ 1354.935438][ T8511] usb 4-1: SerialNumber: syz [ 1355.352156][T32321] fuse: Bad value for 'user_id' [ 1355.401211][ T9358] usb 4-1: USB disconnect, device number 87 [ 1356.103658][T32336] not chained 60000 origins [ 1356.105692][T32336] CPU: 0 PID: 32336 Comm: syz-executor.1 Not tainted 5.10.0-rc4-syzkaller #0 [ 1356.110355][T32336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.110355][T32336] Call Trace: [ 1356.110355][T32336] dump_stack+0x21c/0x280 [ 1356.110355][T32336] kmsan_internal_chain_origin+0x6f/0x130 [ 1356.110355][T32336] ? __msan_get_context_state+0x9/0x20 [ 1356.110355][T32336] ? irqentry_exit+0x12/0x50 [ 1356.110355][T32336] ? __exc_page_fault+0xf8/0x340 [ 1356.110355][T32336] ? exc_page_fault+0x45/0x50 [ 1356.110355][T32336] ? kmsan_get_metadata+0x116/0x180 [ 1356.110355][T32336] ? kmsan_internal_set_origin+0x85/0xc0 [ 1356.110355][T32336] ? kmsan_internal_unpoison_shadow+0x42/0x70 [ 1356.110355][T32336] ? _copy_from_user+0x1cd/0x2d0 [ 1356.110355][T32336] ? kmsan_get_metadata+0x116/0x180 [ 1356.110355][T32336] __msan_chain_origin+0x57/0xa0 [ 1356.110355][T32336] __copy_msghdr_from_user+0x4e4/0xc20 [ 1356.110355][T32336] ? kmsan_get_metadata+0x116/0x180 [ 1356.199519][T32336] ? kmsan_internal_set_origin+0x85/0xc0 [ 1356.199519][T32336] __sys_sendmmsg+0x650/0x1060 [ 1356.199519][T32336] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1356.199519][T32336] ? kmsan_internal_check_memory+0xb1/0x520 [ 1356.199519][T32336] ? _copy_to_user+0x19c/0x240 [ 1356.199519][T32336] ? kmsan_get_metadata+0x116/0x180 [ 1356.199519][T32336] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1356.199519][T32336] ? kmsan_get_metadata+0x116/0x180 [ 1356.199519][T32336] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1356.199519][T32336] __se_sys_sendmmsg+0xbd/0xe0 [ 1356.199519][T32336] __x64_sys_sendmmsg+0x56/0x70 [ 1356.199519][T32336] do_syscall_64+0x9f/0x140 [ 1356.199519][T32336] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1356.273982][T32336] RIP: 0033:0x45e159 [ 1356.273982][T32336] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1356.273982][T32336] RSP: 002b:00007f462f430c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1356.273982][T32336] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e159 [ 1356.273982][T32336] RDX: 0000000000000500 RSI: 0000000020005940 RDI: 0000000000000005 [ 1356.273982][T32336] RBP: 000000000119c070 R08: 0000000000000000 R09: 0000000000000000 [ 1356.273982][T32336] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119c034 [ 1356.273982][T32336] R13: 00000000016afb7f R14: 00007f462f4319c0 R15: 000000000119c034 [ 1356.273982][T32336] Uninit was stored to memory at: [ 1356.273982][T32336] kmsan_internal_chain_origin+0xad/0x130 [ 1356.273982][T32336] __msan_chain_origin+0x57/0xa0 [ 1356.273982][T32336] __copy_msghdr_from_user+0x4e4/0xc20 [ 1356.273982][T32336] __sys_sendmmsg+0x650/0x1060 [ 1356.273982][T32336] __se_sys_sendmmsg+0xbd/0xe0 [ 1356.273982][T32336] __x64_sys_sendmmsg+0x56/0x70 [ 1356.273982][T32336] do_syscall_64+0x9f/0x140 [ 1356.273982][T32336] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1356.273982][T32336] [ 1356.273982][T32336] Uninit was stored to memory at: [ 1356.398880][T32336] kmsan_internal_chain_origin+0xad/0x130 [ 1356.398880][T32336] __msan_chain_origin+0x57/0xa0 [ 1356.398880][T32336] __copy_msghdr_from_user+0x4e4/0xc20 [ 1356.398880][T32336] __sys_sendmmsg+0x650/0x1060 [ 1356.398880][T32336] __se_sys_sendmmsg+0xbd/0xe0 [ 1356.398880][T32336] __x64_sys_sendmmsg+0x56/0x70 [ 1356.398880][T32336] do_syscall_64+0x9f/0x140 [ 1356.398880][T32336] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1356.398880][T32336] [ 1356.398880][T32336] Uninit was stored to memory at: [ 1356.448424][T32336] kmsan_internal_chain_origin+0xad/0x130 [ 1356.448424][T32336] __msan_chain_origin+0x57/0xa0 [ 1356.448424][T32336] __copy_msghdr_from_user+0x4e4/0xc20 [ 1356.448424][T32336] __sys_sendmmsg+0x650/0x1060 [ 1356.448424][T32336] __se_sys_sendmmsg+0xbd/0xe0 [ 1356.448424][T32336] __x64_sys_sendmmsg+0x56/0x70 [ 1356.448424][T32336] do_syscall_64+0x9f/0x140 [ 1356.448424][T32336] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1356.448424][T32336] [ 1356.448424][T32336] Uninit was stored to memory at: [ 1356.448424][T32336] kmsan_internal_chain_origin+0xad/0x130 [ 1356.448424][T32336] __msan_chain_origin+0x57/0xa0 [ 1356.448424][T32336] __copy_msghdr_from_user+0x4e4/0xc20 [ 1356.448424][T32336] __sys_sendmmsg+0x650/0x1060 [ 1356.448424][T32336] __se_sys_sendmmsg+0xbd/0xe0 [ 1356.448424][T32336] __x64_sys_sendmmsg+0x56/0x70 [ 1356.448424][T32336] do_syscall_64+0x9f/0x140 [ 1356.448424][T32336] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1356.448424][T32336] [ 1356.448424][T32336] Uninit was stored to memory at: [ 1356.448424][T32336] kmsan_internal_chain_origin+0xad/0x130 [ 1356.448424][T32336] __msan_chain_origin+0x57/0xa0 [ 1356.448424][T32336] __copy_msghdr_from_user+0x4e4/0xc20 [ 1356.448424][T32336] __sys_sendmmsg+0x650/0x1060 [ 1356.448424][T32336] __se_sys_sendmmsg+0xbd/0xe0 [ 1356.448424][T32336] __x64_sys_sendmmsg+0x56/0x70 [ 1356.448424][T32336] do_syscall_64+0x9f/0x140 [ 1356.448424][T32336] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1356.448424][T32336] [ 1356.448424][T32336] Uninit was stored to memory at: [ 1356.448424][T32336] kmsan_internal_chain_origin+0xad/0x130 [ 1356.448424][T32336] __msan_chain_origin+0x57/0xa0 [ 1356.448424][T32336] ____sys_sendmsg+0x10b7/0x1240 [ 1356.448424][T32336] __sys_sendmmsg+0xa56/0x1060 [ 1356.448424][T32336] __se_sys_sendmmsg+0xbd/0xe0 [ 1356.448424][T32336] __x64_sys_sendmmsg+0x56/0x70 [ 1356.448424][T32336] do_syscall_64+0x9f/0x140 [ 1356.448424][T32336] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1356.448424][T32336] [ 1356.448424][T32336] Uninit was stored to memory at: [ 1356.448424][T32336] kmsan_internal_chain_origin+0xad/0x130 [ 1356.448424][T32336] __msan_chain_origin+0x57/0xa0 [ 1356.448424][T32336] __copy_msghdr_from_user+0x4e4/0xc20 [ 1356.448424][T32336] __sys_sendmmsg+0x650/0x1060 [ 1356.448424][T32336] __se_sys_sendmmsg+0xbd/0xe0 [ 1356.448424][T32336] __x64_sys_sendmmsg+0x56/0x70 [ 1356.448424][T32336] do_syscall_64+0x9f/0x140 [ 1356.448424][T32336] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1356.448424][T32336] [ 1356.448424][T32336] Local variable ----msg_sys@__sys_sendmmsg created at: [ 1356.448424][T32336] __sys_sendmmsg+0xbe/0x1060 [ 1356.448424][T32336] __sys_sendmmsg+0xbe/0x1060 [ 1356.840956][ T9358] usb 4-1: new high-speed USB device number 88 using dummy_hcd 17:12:10 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) open(&(0x7f0000000e40)='.\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) open(&(0x7f0000000e40)='.\x00', 0x0, 0x0) select(0x40, &(0x7f0000000100)={0x7f}, &(0x7f0000000780), &(0x7f00000007c0), 0x0) 17:12:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000092c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:10 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x500, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x8000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:12:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xf000000}, 0x0) 17:12:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000000000000a2c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1357.656021][ T9358] usb 4-1: device descriptor read/64, error -71 17:12:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x10000000}, 0x0) [ 1358.018102][ T9358] usb 4-1: Using ep0 maxpacket: 32 17:12:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000000000000b2c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1358.162910][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1358.171395][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.181798][ T9358] usb 4-1: config 6 has no interface number 0 [ 1358.188303][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0xfd82000f, 0x0) 17:12:11 executing program 5: r0 = getpid() wait4(r0, 0x0, 0xe, 0x0) 17:12:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x48000000}, 0x0) [ 1358.500725][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1358.510271][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.518544][ T9358] usb 4-1: Product: syz [ 1358.522828][ T9358] usb 4-1: Manufacturer: syz [ 1358.527685][ T9358] usb 4-1: SerialNumber: syz 17:12:12 executing program 5: r0 = open(&(0x7f0000000e40)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 17:12:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x9000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1358.911437][T32379] fuse: Bad value for 'user_id' [ 1358.991986][ T9358] usb 4-1: USB disconnect, device number 88 [ 1359.767760][ T9358] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1360.026594][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1360.147466][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1360.156092][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.166966][ T9358] usb 4-1: config 6 has no interface number 0 [ 1360.173528][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:13 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x600, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000000000000c2c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:13 executing program 5: r0 = geteuid() setreuid(r0, 0xffffffffffffffff) 17:12:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x60000000}, 0x0) 17:12:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xa000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1360.626588][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1360.636002][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.759047][ T9358] usb 4-1: can't set config #6, error -71 [ 1360.802454][ T9358] usb 4-1: USB disconnect, device number 89 17:12:14 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 17:12:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x65580000}, 0x0) [ 1361.336721][ T9358] usb 4-1: new high-speed USB device number 90 using dummy_hcd 17:12:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x2) 17:12:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000000000030c2c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1361.578242][ T9358] usb 4-1: Using ep0 maxpacket: 32 17:12:15 executing program 5: open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) r0 = open(&(0x7f0000000e40)='.\x00', 0x0, 0x0) r1 = getuid() fchownat(r0, &(0x7f00000001c0)='./file0\x00', r1, 0x0, 0x0) [ 1361.697417][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1361.706004][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.716416][ T9358] usb 4-1: config 6 has no interface number 0 [ 1361.722695][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x81000000}, 0x0) [ 1361.957725][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1361.967118][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.975232][ T9358] usb 4-1: Product: syz [ 1361.979693][ T9358] usb 4-1: Manufacturer: syz [ 1361.984405][ T9358] usb 4-1: SerialNumber: syz 17:12:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x4) [ 1362.437085][T32461] fuse: Bad value for 'user_id' [ 1362.466686][ T9358] usb 4-1: USB disconnect, device number 90 [ 1363.256352][ T8510] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1363.496047][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1363.616341][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1363.624676][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.635102][ T8510] usb 4-1: config 6 has no interface number 0 [ 1363.641704][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:17 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x700, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000000000000d2c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:17 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 17:12:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xb000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:12:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x88470000}, 0x0) 17:12:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x7) [ 1364.046687][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1364.056217][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.178513][ T8510] usb 4-1: can't set config #6, error -71 [ 1364.211372][ T8510] usb 4-1: USB disconnect, device number 91 17:12:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x8) 17:12:18 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred], 0x20}, 0xa) 17:12:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000000000000e2c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x88480000}, 0x0) [ 1364.719721][ T8510] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1364.966145][ T8510] usb 4-1: Using ep0 maxpacket: 32 17:12:18 executing program 5: utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0) [ 1365.087813][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1365.096378][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.106763][ T8510] usb 4-1: config 6 has no interface number 0 [ 1365.113032][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x11) [ 1365.480318][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1365.489718][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.498103][ T8510] usb 4-1: Product: syz [ 1365.502379][ T8510] usb 4-1: Manufacturer: syz [ 1365.507283][ T8510] usb 4-1: SerialNumber: syz [ 1365.901713][T32530] fuse: Bad value for 'user_id' [ 1365.919235][ T8510] usb 4-1: USB disconnect, device number 92 [ 1366.726340][ T8510] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1366.967926][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1367.092792][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1367.101447][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.111885][ T8510] usb 4-1: config 6 has no interface number 0 [ 1367.118426][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:20 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x900, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xc000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:12:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x29) 17:12:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x88a8ffff}, 0x0) 17:12:20 executing program 5: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x3411, 0xffffffffffffffff, 0x0) 17:12:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000000000000f2c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1367.396106][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1367.405308][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.419382][ T8510] usb 4-1: Product: syz [ 1367.586380][ T8510] usb 4-1: can't set config #6, error -71 [ 1367.594528][ T8510] usb 4-1: USB disconnect, device number 93 17:12:21 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x30) 17:12:21 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x1f4) [ 1368.049406][ T8510] usb 4-1: new high-speed USB device number 94 using dummy_hcd 17:12:21 executing program 5: open(&(0x7f00000000c0)='./file0\x00', 0x8ee2, 0x0) 17:12:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000102c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x9effffff}, 0x0) [ 1368.298437][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1368.442111][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1368.450649][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.461591][ T8510] usb 4-1: config 6 has no interface number 0 [ 1368.467978][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x3e8) [ 1368.847796][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1368.857186][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.865291][ T8510] usb 4-1: Product: syz [ 1368.869955][ T8510] usb 4-1: Manufacturer: syz [ 1368.874680][ T8510] usb 4-1: SerialNumber: syz [ 1369.230967][T32590] fuse: Bad value for 'user_id' [ 1369.241014][ T8510] usb 4-1: USB disconnect, device number 94 [ 1370.026447][ T8510] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1370.272749][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1370.398447][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1370.407365][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.417683][ T8510] usb 4-1: config 6 has no interface number 0 [ 1370.423880][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:24 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xa00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:24 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="fdc7f72cc1db", @local, @val, {@ipv6}}, 0x0) 17:12:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000112c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xf0ffffff}, 0x0) 17:12:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xf000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:12:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x5c8) [ 1370.696198][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1370.705398][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.713830][ T8510] usb 4-1: Product: syz [ 1370.858613][ T8510] usb 4-1: can't set config #6, error -71 [ 1370.891568][ T8510] usb 4-1: USB disconnect, device number 95 17:12:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x700) 17:12:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000122c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xf5020000}, 0x0) 17:12:24 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x30302, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) [ 1371.355983][ T8510] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1371.599681][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1371.717976][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1371.726576][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.737241][ T8510] usb 4-1: config 6 has no interface number 0 [ 1371.743544][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x810) 17:12:25 executing program 5: msgget$private(0x0, 0x5d) geteuid() [ 1372.137652][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1372.147073][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.155178][ T8510] usb 4-1: Product: syz [ 1372.159756][ T8510] usb 4-1: Manufacturer: syz [ 1372.164475][ T8510] usb 4-1: SerialNumber: syz [ 1372.509493][T32659] fuse: Bad value for 'user_id' [ 1372.533711][ T8510] usb 4-1: USB disconnect, device number 96 [ 1373.316297][ T8510] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1373.556202][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1373.678287][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1373.686719][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.697419][ T8510] usb 4-1: config 6 has no interface number 0 [ 1373.703657][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1373.907532][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1373.917103][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.925319][ T8510] usb 4-1: Product: syz [ 1373.931176][ T8510] usb 4-1: Manufacturer: syz [ 1373.936443][ T8510] usb 4-1: SerialNumber: syz 17:12:27 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xb00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xfcffffff}, 0x0) 17:12:27 executing program 5: pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x0) 17:12:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000252c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x10000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:12:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xbb8) [ 1374.172802][ T8510] usb 4-1: can't set config #6, error -71 [ 1374.223130][ T8510] usb 4-1: USB disconnect, device number 97 17:12:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x1008) 17:12:28 executing program 5: r0 = socket$inet6(0x18, 0x1, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 17:12:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xffffa888}, 0x0) 17:12:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000602c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1374.797618][ T8510] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1375.050207][ T8510] usb 4-1: Using ep0 maxpacket: 32 17:12:28 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) pwritev(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0) [ 1375.186541][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1375.194959][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.205460][ T8510] usb 4-1: config 6 has no interface number 0 [ 1375.211942][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xffffff7f}, 0x0) [ 1375.598605][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1375.608071][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.616413][ T8510] usb 4-1: Product: syz [ 1375.620685][ T8510] usb 4-1: Manufacturer: syz [ 1375.625389][ T8510] usb 4-1: SerialNumber: syz [ 1375.931587][T32735] fuse: Bad value for 'user_id' [ 1375.944823][ T8510] usb 4-1: USB disconnect, device number 98 [ 1376.736838][ T8510] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1376.976159][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1377.100120][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1377.110824][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.121658][ T8510] usb 4-1: config 6 has no interface number 0 [ 1377.128016][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:30 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xc00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x1100) 17:12:30 executing program 5: semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f0000000000)) 17:12:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x11000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:12:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000058652c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xffffff9e}, 0x0) [ 1377.416277][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1377.426826][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.434959][ T8510] usb 4-1: Product: syz [ 1377.439467][ T8510] usb 4-1: Manufacturer: syz [ 1377.666768][ T8510] usb 4-1: can't set config #6, error -71 [ 1377.706900][ T8510] usb 4-1: USB disconnect, device number 99 17:12:31 executing program 5: r0 = open(&(0x7f0000000e40)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x9, 0x0) 17:12:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x2000) 17:12:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xfffffff0}, 0x0) [ 1378.216268][ T8510] usb 4-1: new high-speed USB device number 100 using dummy_hcd 17:12:31 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000802c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1378.456000][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1378.595291][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1378.603879][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.614647][ T8510] usb 4-1: config 6 has no interface number 0 [ 1378.621030][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:32 executing program 5: r0 = open(&(0x7f0000000e40)='.\x00', 0x0, 0x0) listen(r0, 0x0) 17:12:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xfffffffc}, 0x0) [ 1379.157377][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1379.166894][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.175046][ T8510] usb 4-1: Product: syz [ 1379.179821][ T8510] usb 4-1: Manufacturer: syz [ 1379.184516][ T8510] usb 4-1: SerialNumber: syz [ 1379.664544][ T336] fuse: Bad value for 'user_id' [ 1379.713213][ T9358] usb 4-1: USB disconnect, device number 100 [ 1380.515953][ T9358] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1380.755918][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1380.877341][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1380.885955][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.898435][ T9358] usb 4-1: config 6 has no interface number 0 [ 1380.904633][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:34 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xd00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000000812c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x2900) 17:12:34 executing program 5: r0 = socket$inet6(0x18, 0x2, 0x0) connect(r0, &(0x7f0000000080)=@in={0x2, 0x1}, 0xc) 17:12:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x14000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:12:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x40030000000000}, 0x0) [ 1381.438549][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1381.447919][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.606505][ T9358] usb 4-1: can't set config #6, error -71 [ 1381.667417][ T9358] usb 4-1: USB disconnect, device number 101 17:12:35 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, 0x0, 0xffffffffffffff48, 0x0, 0x0, 0x0) 17:12:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x100000000000000}, 0x0) [ 1382.225963][ T9358] usb 4-1: new high-speed USB device number 102 using dummy_hcd 17:12:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x3000) 17:12:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000ffffff812c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1382.466022][ T9358] usb 4-1: Using ep0 maxpacket: 32 17:12:36 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) [ 1382.587403][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1382.596110][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.606506][ T9358] usb 4-1: config 6 has no interface number 0 [ 1382.612711][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x200000000000000}, 0x0) [ 1382.968670][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1382.978095][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.986358][ T9358] usb 4-1: Product: syz [ 1382.990632][ T9358] usb 4-1: Manufacturer: syz [ 1382.995331][ T9358] usb 4-1: SerialNumber: syz [ 1383.540717][ T395] fuse: Bad value for 'user_id' [ 1383.599714][ T9358] usb 4-1: USB disconnect, device number 102 [ 1384.376094][ T8510] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1384.615996][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1384.748012][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1384.756605][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.766986][ T8510] usb 4-1: config 6 has no interface number 0 [ 1384.773268][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:38 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xe00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x15000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:12:38 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @remote, @val, {@ipv6}}, 0x0) 17:12:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x80fe) 17:12:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x400000000000000}, 0x0) 17:12:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000047882c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1385.156053][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1385.165369][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.286822][ T8510] usb 4-1: can't set config #6, error -71 [ 1385.320590][ T8510] usb 4-1: USB disconnect, device number 103 17:12:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xb80b) 17:12:39 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0) fcntl$lock(r0, 0x8, 0x0) [ 1385.716103][ T8510] usb 4-1: new high-speed USB device number 104 using dummy_hcd 17:12:39 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) getsockopt$sock_int(r1, 0xffff, 0x1, 0x0, 0x0) [ 1385.966629][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1386.086169][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1386.094658][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.105175][ T8510] usb 4-1: config 6 has no interface number 0 [ 1386.111604][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1386.307679][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1386.317098][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.327479][ T8510] usb 4-1: Product: syz [ 1386.331763][ T8510] usb 4-1: Manufacturer: syz [ 1386.337130][ T8510] usb 4-1: SerialNumber: syz 17:12:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x500000000000000}, 0x0) 17:12:39 executing program 5: syz_emit_ethernet(0x38, &(0x7f0000000140)={@random="6f14678d07ff", @remote, @val, {@ipv6}}, 0x0) 17:12:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xc805) [ 1386.801968][ T469] fuse: Bad value for 'user_id' [ 1386.827249][ T8510] usb 4-1: USB disconnect, device number 104 [ 1387.616063][ T8510] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1387.859577][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1387.979947][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1387.988614][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1387.999070][ T8510] usb 4-1: config 6 has no interface number 0 [ 1388.005279][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:41 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x1020, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000000048882c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xe803) 17:12:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x18000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:12:41 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000003c0)="a2", 0x1) 17:12:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x600000000000000}, 0x0) [ 1388.436104][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1388.445380][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.453959][ T8510] usb 4-1: Product: syz [ 1388.458371][ T8510] usb 4-1: Manufacturer: syz [ 1388.656398][ T8510] usb 4-1: can't set config #6, error -71 [ 1388.680408][ T8510] usb 4-1: USB disconnect, device number 105 17:12:42 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xf401) 17:12:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000ffffa8882c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x800000000000000}, 0x0) 17:12:42 executing program 5: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000480)=[{0x0}], 0x1) [ 1389.130086][ T8510] usb 4-1: new high-speed USB device number 106 using dummy_hcd 17:12:42 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xfe80) [ 1389.377074][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1389.498640][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1389.507467][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.517881][ T8510] usb 4-1: config 6 has no interface number 0 [ 1389.524094][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:43 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = getpid() fcntl$setown(r0, 0x6, r1) [ 1389.817739][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1389.827172][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.835285][ T8510] usb 4-1: Product: syz [ 1389.839836][ T8510] usb 4-1: Manufacturer: syz [ 1389.844591][ T8510] usb 4-1: SerialNumber: syz [ 1390.282288][ T536] fuse: Bad value for 'user_id' [ 1390.309576][ T8510] usb 4-1: USB disconnect, device number 106 [ 1391.096184][ T8510] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1391.339615][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1391.478353][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1391.486927][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.497343][ T8510] usb 4-1: config 6 has no interface number 0 [ 1391.503622][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:45 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x1100, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000ffffff9e2c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xa00000000000000}, 0x0) 17:12:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x34000) 17:12:45 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) 17:12:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x3f000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1391.796078][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1391.805255][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.814689][ T8510] usb 4-1: Product: syz [ 1391.956216][ T8510] usb 4-1: can't set config #6, error -71 [ 1391.984488][ T8510] usb 4-1: USB disconnect, device number 107 17:12:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x40000) 17:12:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000fffffff02c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:45 executing program 5: fchmodat(0xffffffffffffffff, 0x0, 0x0) [ 1392.496123][ T8510] usb 4-1: new high-speed USB device number 108 using dummy_hcd 17:12:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xc00000000000000}, 0x0) 17:12:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x400300) [ 1392.737232][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1392.857467][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1392.866375][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.878818][ T8510] usb 4-1: config 6 has no interface number 0 [ 1392.885118][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:46 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x80, 0x0, 0x0) [ 1393.295035][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1393.304439][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.312985][ T8510] usb 4-1: Product: syz [ 1393.317404][ T8510] usb 4-1: Manufacturer: syz [ 1393.322113][ T8510] usb 4-1: SerialNumber: syz [ 1393.643623][ T612] fuse: Bad value for 'user_id' [ 1393.671736][ T8511] usb 4-1: USB disconnect, device number 108 [ 1394.456158][ T8511] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1394.710988][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1394.839376][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1394.847954][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.858683][ T8511] usb 4-1: config 6 has no interface number 0 [ 1394.864916][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:48 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x1200, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000000000000000fff2c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xf00000000000000}, 0x0) 17:12:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x1000000) 17:12:48 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x100, 0x0, 0x0) 17:12:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x40000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1395.156199][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1395.165395][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.173811][ T8511] usb 4-1: Product: syz [ 1395.300176][ T8511] usb 4-1: can't set config #6, error -71 [ 1395.349539][ T8511] usb 4-1: USB disconnect, device number 109 17:12:49 executing program 5: setrlimit(0x8, &(0x7f0000000000)={0x2, 0x8}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:12:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x2000000) 17:12:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000007fffffff2c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x1000000000000000}, 0x0) [ 1395.999994][ T8511] usb 4-1: new high-speed USB device number 110 using dummy_hcd 17:12:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x4000000) [ 1396.246973][ T8511] usb 4-1: Using ep0 maxpacket: 32 17:12:49 executing program 5: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 1396.367758][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1396.376231][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.386642][ T8511] usb 4-1: config 6 has no interface number 0 [ 1396.393625][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1396.716180][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1396.725358][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.733771][ T8511] usb 4-1: Product: syz [ 1396.738184][ T8511] usb 4-1: Manufacturer: syz [ 1396.742892][ T8511] usb 4-1: SerialNumber: syz [ 1397.041715][ T687] fuse: Bad value for 'user_id' [ 1397.055899][ T8511] usb 4-1: USB disconnect, device number 110 [ 1397.855962][ T8511] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1398.096921][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1398.216168][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1398.224522][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.235003][ T8511] usb 4-1: config 6 has no interface number 0 [ 1398.241380][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x7000000) 17:12:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000ffffffff2c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x4800000000000000}, 0x0) 17:12:51 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10590, 0x0) 17:12:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x60000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:12:51 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x1e00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 1398.456523][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1398.465845][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.473936][ T8511] usb 4-1: Product: syz [ 1398.478503][ T8511] usb 4-1: Manufacturer: syz [ 1398.656071][ T8511] usb 4-1: can't set config #6, error -71 [ 1398.702008][ T8511] usb 4-1: USB disconnect, device number 111 17:12:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x8000000) 17:12:52 executing program 5: syz_emit_ethernet(0x7bf, &(0x7f0000000100)={@remote, @local, @val, {@ipv4}}, 0x0) 17:12:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000020000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x6000000000000000}, 0x0) [ 1399.229432][ T8511] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1399.486307][ T8511] usb 4-1: Using ep0 maxpacket: 32 17:12:53 executing program 5: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 17:12:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xe0082fd) 17:12:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x6558000000000000}, 0x0) [ 1399.610136][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1399.618656][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.629096][ T8511] usb 4-1: config 6 has no interface number 0 [ 1399.637482][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000030000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1399.877367][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1399.886814][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.894917][ T8511] usb 4-1: Product: syz [ 1399.899416][ T8511] usb 4-1: Manufacturer: syz [ 1399.904130][ T8511] usb 4-1: SerialNumber: syz 17:12:53 executing program 5: socket$inet(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xffff}, 0x0) 17:12:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x10080000) 17:12:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x62010000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1400.304830][ T759] fuse: Bad value for 'user_id' [ 1400.379128][ T8511] usb 4-1: USB disconnect, device number 112 [ 1401.165955][ T8511] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1401.415999][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1401.537440][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1401.545937][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.556667][ T8511] usb 4-1: config 6 has no interface number 0 [ 1401.562883][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000040000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x8000000000000000}, 0x0) 17:12:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x11000000) 17:12:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000340)) 17:12:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x65580000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:12:55 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x2000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 1401.836102][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1401.846049][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.854200][ T8511] usb 4-1: Product: syz [ 1401.981416][ T8511] usb 4-1: can't set config #6, error -71 [ 1402.023378][ T8511] usb 4-1: USB disconnect, device number 113 17:12:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x20000000) 17:12:55 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x8, 0x0, 0x0) 17:12:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000050000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x8100000000000000}, 0x0) [ 1402.539269][ T8511] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1402.790094][ T8511] usb 4-1: Using ep0 maxpacket: 32 17:12:56 executing program 5: open(&(0x7f0000000040)='./file0\x00', 0x30302, 0x0) 17:12:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x8847000000000000}, 0x0) [ 1402.910726][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1402.919365][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.929703][ T8511] usb 4-1: config 6 has no interface number 0 [ 1402.936036][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x29000000) 17:12:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000060000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1403.207541][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1403.218862][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.227633][ T8511] usb 4-1: Product: syz [ 1403.231910][ T8511] usb 4-1: Manufacturer: syz [ 1403.236798][ T8511] usb 4-1: SerialNumber: syz 17:12:56 executing program 5: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0x3) 17:12:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x74010000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:12:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x8848000000000000}, 0x0) [ 1403.662549][ T852] fuse: Bad value for 'user_id' [ 1403.737220][ T8511] usb 4-1: USB disconnect, device number 114 [ 1404.656156][ T9358] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1404.898673][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1405.017402][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1405.025885][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.036319][ T9358] usb 4-1: config 6 has no interface number 0 [ 1405.042531][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:12:58 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x2010, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:12:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x30000000) 17:12:58 executing program 5: mmap$perf(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40) 17:12:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000070000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x88a8ffff00000000}, 0x0) 17:12:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x81000000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1405.256028][ T9358] usb 4-1: string descriptor 0 read error: -71 [ 1405.265008][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1405.274476][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.486390][ T9358] usb 4-1: can't set config #6, error -71 [ 1405.542036][ T9358] usb 4-1: USB disconnect, device number 115 17:12:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x7ffffff7) 17:12:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000080000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:12:59 executing program 5: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0xffffffffffffffff) 17:12:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x9effffff00000000}, 0x0) [ 1406.037086][ T9358] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1406.298440][ T9358] usb 4-1: Using ep0 maxpacket: 32 17:12:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x8dffffff) 17:12:59 executing program 5: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) r0 = getpgrp(0x0) process_vm_readv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000040)=""/155}], 0x60, &(0x7f0000000280)=[{&(0x7f0000000440)=""/102396, 0x18ffc}], 0x200000000000025e, 0x0) [ 1406.427535][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1406.436603][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1406.447213][ T9358] usb 4-1: config 6 has no interface number 0 [ 1406.453490][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1406.767676][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1406.777051][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.785163][ T9358] usb 4-1: Product: syz [ 1406.789591][ T9358] usb 4-1: Manufacturer: syz [ 1406.794306][ T9358] usb 4-1: SerialNumber: syz [ 1407.173144][ T938] fuse: Bad value for 'user_id' [ 1407.199972][ T9358] usb 4-1: USB disconnect, device number 116 [ 1407.996023][ T9358] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1408.256286][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1408.376098][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1408.384674][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.395991][ T9358] usb 4-1: config 6 has no interface number 0 [ 1408.402513][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:02 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x2500, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xf0ffffff00000000}, 0x0) 17:13:02 executing program 5: r0 = open(&(0x7f0000000e40)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='.\x00', 0x0) 17:13:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000090000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x88470000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:13:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x97ffffff) [ 1408.665669][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1408.675195][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.683952][ T9358] usb 4-1: Product: syz [ 1408.816148][ T9358] usb 4-1: can't set config #6, error -71 [ 1408.842710][ T9358] usb 4-1: USB disconnect, device number 117 17:13:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xb80b0000) 17:13:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000a0000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xf502000000000000}, 0x0) 17:13:02 executing program 5: getrusage(0x7cdc8979631265ee, 0x0) [ 1409.386942][ T9358] usb 4-1: new high-speed USB device number 118 using dummy_hcd 17:13:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xc8050000) [ 1409.628225][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1409.751012][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1409.759480][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.772013][ T9358] usb 4-1: config 6 has no interface number 0 [ 1409.778716][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000b0000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1410.117820][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1410.127230][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.135346][ T9358] usb 4-1: Product: syz [ 1410.140010][ T9358] usb 4-1: Manufacturer: syz [ 1410.144746][ T9358] usb 4-1: SerialNumber: syz [ 1410.652772][ T1013] fuse: Bad value for 'user_id' [ 1410.683665][ T8511] usb 4-1: USB disconnect, device number 118 [ 1411.476019][ T8511] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1411.717202][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1411.836714][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1411.844942][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.855411][ T8511] usb 4-1: config 6 has no interface number 0 [ 1411.861809][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:05 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x2f00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:05 executing program 5: r0 = open(&(0x7f0000000e40)='.\x00', 0x0, 0x0) bind(r0, 0x0, 0x0) 17:13:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xfcffffff00000000}, 0x0) 17:13:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x88480000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:13:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xe8030000) 17:13:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000c0000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1412.066061][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1412.075251][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.083639][ T8511] usb 4-1: Product: syz [ 1412.088057][ T8511] usb 4-1: Manufacturer: syz [ 1412.250489][ T8511] usb 4-1: can't set config #6, error -71 [ 1412.277001][ T8511] usb 4-1: USB disconnect, device number 119 17:13:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0xffffff7f00000000}, 0x0) 17:13:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xeffdffff) 17:13:06 executing program 5: socketpair(0xf, 0x3, 0x0, 0x0) [ 1412.786115][ T8511] usb 4-1: new high-speed USB device number 120 using dummy_hcd 17:13:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000d0000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1413.026505][ T8511] usb 4-1: Using ep0 maxpacket: 32 17:13:06 executing program 5: r0 = socket(0xf, 0x3, 0x2) accept4(r0, 0x0, 0x0, 0x0) [ 1413.149583][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1413.158103][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.168459][ T8511] usb 4-1: config 6 has no interface number 0 [ 1413.174668][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x2}, 0x0) [ 1413.527795][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1413.537170][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.545275][ T8511] usb 4-1: Product: syz [ 1413.550000][ T8511] usb 4-1: Manufacturer: syz [ 1413.554693][ T8511] usb 4-1: SerialNumber: syz [ 1413.893683][ T1085] fuse: Bad value for 'user_id' [ 1413.917120][ T8511] usb 4-1: USB disconnect, device number 120 [ 1414.705949][ T8511] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1414.946005][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1415.066173][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1415.074666][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1415.085112][ T8511] usb 4-1: config 6 has no interface number 0 [ 1415.091524][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1415.266904][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1415.276164][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.284312][ T8511] usb 4-1: Product: syz [ 1415.288862][ T8511] usb 4-1: Manufacturer: syz [ 1415.294258][ T8511] usb 4-1: SerialNumber: syz 17:13:08 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x3f00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xf4010000) 17:13:08 executing program 5: r0 = socket(0x2, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 17:13:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000e0000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x4}, 0x0) 17:13:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x88a8ffff, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1415.496099][ T8511] usb 4-1: can't set config #6, error -71 [ 1415.561100][ T8511] usb 4-1: USB disconnect, device number 121 17:13:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x5}, 0x0) 17:13:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xf5ffffff) 17:13:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x44011) 17:13:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000f0000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1416.159316][ T8511] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1416.409373][ T8511] usb 4-1: Using ep0 maxpacket: 32 17:13:09 executing program 5: r0 = socket(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x1) 17:13:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x6}, 0x0) [ 1416.527703][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1416.536143][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.546556][ T8511] usb 4-1: config 6 has no interface number 0 [ 1416.552761][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1416.846231][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1416.855421][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.863861][ T8511] usb 4-1: Product: syz [ 1416.868494][ T8511] usb 4-1: Manufacturer: syz [ 1416.873326][ T8511] usb 4-1: SerialNumber: syz [ 1417.213155][ T1159] fuse: Bad value for 'user_id' [ 1417.224120][ T8511] usb 4-1: USB disconnect, device number 122 [ 1418.026042][T29499] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1418.266186][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1418.387285][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1418.395598][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.406079][T29499] usb 4-1: config 6 has no interface number 0 [ 1418.412285][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1418.586124][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1418.595282][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.603490][T29499] usb 4-1: Product: syz [ 1418.607948][T29499] usb 4-1: Manufacturer: syz [ 1418.612664][T29499] usb 4-1: SerialNumber: syz 17:13:12 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x4000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xf7ffff7f) 17:13:12 executing program 5: r0 = openat$null(0xffffff9c, &(0x7f0000001300)='/dev/null\x00', 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x0) 17:13:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000100000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x8}, 0x0) 17:13:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x8a020000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1418.736018][T29499] usb 4-1: can't set config #6, error -71 [ 1418.787219][T29499] usb 4-1: USB disconnect, device number 123 17:13:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xfd82000e) [ 1419.347358][T29499] usb 4-1: new high-speed USB device number 124 using dummy_hcd 17:13:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fcntl$dupfd(r0, 0x406, r1) 17:13:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000110000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xa}, 0x0) [ 1419.596333][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1419.720726][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1419.729240][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.739705][T29499] usb 4-1: config 6 has no interface number 0 [ 1419.746116][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:13 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0x2, 0x4e23, @dev}, 0x10, 0x0}}], 0x1, 0x8000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/fuse\x00', 0x2, 0x0) dup2(r1, r0) 17:13:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xc}, 0x0) [ 1420.047569][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1420.057003][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.065113][T29499] usb 4-1: Product: syz [ 1420.069810][T29499] usb 4-1: Manufacturer: syz [ 1420.074536][T29499] usb 4-1: SerialNumber: syz [ 1420.481276][ T1232] fuse: Bad value for 'user_id' [ 1420.493351][T29499] usb 4-1: USB disconnect, device number 124 [ 1421.286512][ T8510] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1421.526076][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1421.651049][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1421.660068][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.670812][ T8510] usb 4-1: config 6 has no interface number 0 [ 1421.677169][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1421.846174][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1421.857710][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.866592][ T8510] usb 4-1: Product: syz [ 1421.870998][ T8510] usb 4-1: Manufacturer: syz [ 1421.875849][ T8510] usb 4-1: SerialNumber: syz 17:13:15 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x4800, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xfe800000) 17:13:15 executing program 5: socket$inet(0x2, 0xcc2a29d98f84b292, 0x0) 17:13:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000120000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xf}, 0x0) 17:13:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x9c020000, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1422.078684][ T8510] usb 4-1: USB disconnect, device number 125 17:13:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xfffffdef) 17:13:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000250000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1422.707056][ T8510] usb 4-1: new high-speed USB device number 126 using dummy_hcd 17:13:16 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 17:13:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x10}, 0x0) 17:13:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xffffff8d) [ 1422.966038][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1423.087625][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1423.096319][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.106728][ T8510] usb 4-1: config 6 has no interface number 0 [ 1423.112941][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x48}, 0x0) [ 1423.427917][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1423.437314][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.445415][ T8510] usb 4-1: Product: syz [ 1423.449875][ T8510] usb 4-1: Manufacturer: syz [ 1423.454624][ T8510] usb 4-1: SerialNumber: syz [ 1423.868938][ T1312] fuse: Bad value for 'user_id' [ 1423.908616][ T8511] usb 4-1: USB disconnect, device number 126 [ 1424.696107][ T8510] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1424.935979][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1425.056776][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1425.065416][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.076215][ T8510] usb 4-1: config 6 has no interface number 0 [ 1425.082776][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1425.246676][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1425.256149][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.264179][ T8510] usb 4-1: Product: syz [ 1425.268567][ T8510] usb 4-1: Manufacturer: syz [ 1425.273247][ T8510] usb 4-1: SerialNumber: syz 17:13:18 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x4c00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:18 executing program 5: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='//selinux\x00\x00\x01\x10') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') r1 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000001000000b7"]) 17:13:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000600000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x9effffff, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:13:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xffffff97) 17:13:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x60}, 0x0) [ 1425.466185][ T8510] usb 4-1: can't set config #6, error -71 [ 1425.520601][ T8510] usb 4-1: USB disconnect, device number 127 17:13:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xfffffff5) 17:13:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000300000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1426.096096][ T8510] usb 4-1: new high-speed USB device number 2 using dummy_hcd 17:13:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x2f5}, 0x0) 17:13:19 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) [ 1426.337917][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1426.457754][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1426.468344][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.479411][ T8510] usb 4-1: config 6 has no interface number 0 [ 1426.485670][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x500}, 0x0) 17:13:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x4000000000000) [ 1426.857327][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1426.866734][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.877094][ T8510] usb 4-1: Product: syz [ 1426.881380][ T8510] usb 4-1: Manufacturer: syz [ 1426.887145][ T8510] usb 4-1: SerialNumber: syz [ 1427.291069][ T1385] fuse: Bad value for 'user_id' [ 1427.326520][ T8510] usb 4-1: USB disconnect, device number 2 [ 1428.116051][ T8510] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1428.355985][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1428.476789][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1428.485009][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.495446][ T8510] usb 4-1: config 6 has no interface number 0 [ 1428.501763][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1428.666832][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1428.676369][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.684408][ T8510] usb 4-1: Product: syz [ 1428.689101][ T8510] usb 4-1: Manufacturer: syz [ 1428.693817][ T8510] usb 4-1: SerialNumber: syz 17:13:22 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x5c00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:22 executing program 5: r0 = socket(0xf, 0x3, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@delchain={0x24}, 0x24}}, 0x0) 17:13:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000c0300000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xa36884a6, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:13:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x600}, 0x0) 17:13:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x40030000000000) [ 1428.876473][ T8510] usb 4-1: can't set config #6, error -71 [ 1428.915023][ T8510] usb 4-1: USB disconnect, device number 3 17:13:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x100000000000000) 17:13:22 executing program 5: openat$procfs(0xffffff9c, &(0x7f0000000080)='/proc/timer_list\x00', 0x0, 0x0) 17:13:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000500000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xa00}, 0x0) [ 1429.526509][ T8510] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1429.781923][ T8510] usb 4-1: Using ep0 maxpacket: 32 17:13:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) [ 1429.907548][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1429.916939][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.927515][ T8510] usb 4-1: config 6 has no interface number 0 [ 1429.934000][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:23 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x200000000000000) [ 1430.258003][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1430.267423][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.275530][ T8510] usb 4-1: Product: syz [ 1430.280218][ T8510] usb 4-1: Manufacturer: syz [ 1430.284921][ T8510] usb 4-1: SerialNumber: syz [ 1430.704609][ T1462] fuse: Bad value for 'user_id' [ 1430.730202][ T8510] usb 4-1: USB disconnect, device number 4 [ 1431.516110][ T8510] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1431.755938][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1431.876826][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1431.887691][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.898418][ T8510] usb 4-1: config 6 has no interface number 0 [ 1431.904591][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:25 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x6800, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xc00}, 0x0) 17:13:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000600000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xa68468a3, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:13:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'veth1_to_bond\x00'}) 17:13:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x400000000000000) [ 1432.099228][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1432.108561][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.116887][ T8510] usb 4-1: Product: syz [ 1432.121223][ T8510] usb 4-1: Manufacturer: syz [ 1432.306562][ T8510] usb 4-1: can't set config #6, error -71 [ 1432.360911][ T8510] usb 4-1: USB disconnect, device number 5 17:13:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) dup3(0xffffffffffffffff, r0, 0x0) 17:13:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x700000000000000) 17:13:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xf00}, 0x0) 17:13:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000700000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1432.866007][ T8510] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1433.117896][ T8510] usb 4-1: Using ep0 maxpacket: 32 17:13:26 executing program 5: mlock2(&(0x7f0000ff0000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000ff2000/0x4000)=nil, 0x4000) mlock(&(0x7f0000fee000/0x4000)=nil, 0x4000) 17:13:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x4788}, 0x0) [ 1433.236352][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1433.244660][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.255193][ T8510] usb 4-1: config 6 has no interface number 0 [ 1433.261690][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1433.587337][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1433.596912][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.605543][ T8510] usb 4-1: Product: syz [ 1433.610180][ T8510] usb 4-1: Manufacturer: syz [ 1433.615323][ T8510] usb 4-1: SerialNumber: syz [ 1433.929623][ T1539] fuse: Bad value for 'user_id' [ 1433.965902][ T8510] usb 4-1: USB disconnect, device number 6 [ 1434.739132][ T8510] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1434.986108][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1435.107353][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1435.115878][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.126407][ T8510] usb 4-1: config 6 has no interface number 0 [ 1435.132620][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1435.316176][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1435.325272][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.333998][ T8510] usb 4-1: Product: syz [ 1435.338498][ T8510] usb 4-1: Manufacturer: syz [ 1435.343135][ T8510] usb 4-1: SerialNumber: syz 17:13:28 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x6c00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x800000000000000) 17:13:28 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x8000400) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000200)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 17:13:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000900000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x4800}, 0x0) 17:13:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xf0ffffff, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1435.467790][ T8510] usb 4-1: can't set config #6, error -71 [ 1435.560045][ T8510] usb 4-1: USB disconnect, device number 7 17:13:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x1008000000000000) 17:13:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000a00000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:29 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x7, r0, 0x0, &(0x7f0000000080)={0x0}) 17:13:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x4888}, 0x0) [ 1436.212981][ T8510] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1436.439872][ T1636] ptrace attach of "/root/syz-executor.5"[1626] was attempted by "/root/syz-executor.5"[1636] [ 1436.459679][ T8510] usb 4-1: Using ep0 maxpacket: 32 17:13:29 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000001480)='/dev/input/event#\x00', 0x5, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) [ 1436.577800][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1436.586332][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.598751][ T8510] usb 4-1: config 6 has no interface number 0 [ 1436.605320][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x1100000000000000) [ 1436.929883][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1436.939355][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.947659][ T8510] usb 4-1: Product: syz [ 1436.951967][ T8510] usb 4-1: Manufacturer: syz [ 1436.956860][ T8510] usb 4-1: SerialNumber: syz [ 1437.333218][ T1614] fuse: Bad value for 'user_id' [ 1437.361664][ T8510] usb 4-1: USB disconnect, device number 8 [ 1438.135975][ T8510] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1438.375975][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1438.496902][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1438.505548][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.516035][ T8510] usb 4-1: config 6 has no interface number 0 [ 1438.522234][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1438.686850][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1438.696151][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.704165][ T8510] usb 4-1: Product: syz [ 1438.708599][ T8510] usb 4-1: Manufacturer: syz [ 1438.713306][ T8510] usb 4-1: SerialNumber: syz 17:13:32 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x7400, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x5865}, 0x0) 17:13:32 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000002c0)={0x0, 0x9, &(0x7f00000001c0)="50bf2dccfc5a643b52"}) 17:13:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000b00000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xfcffffff, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:13:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x2000000000000000) [ 1438.936045][ T8510] usb 4-1: can't set config #6, error -71 [ 1438.963663][ T8510] usb 4-1: USB disconnect, device number 9 17:13:32 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000c00000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x2900000000000000) 17:13:32 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 17:13:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x6000}, 0x0) [ 1439.547038][ T8510] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1439.786142][ T8510] usb 4-1: Using ep0 maxpacket: 32 17:13:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x3000000000000000) [ 1439.907509][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1439.916184][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.926656][ T8510] usb 4-1: config 6 has no interface number 0 [ 1439.933031][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x6558}, 0x0) [ 1440.036609][ T8508] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1440.248870][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1440.258296][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.266871][ T8510] usb 4-1: Product: syz [ 1440.271180][ T8510] usb 4-1: Manufacturer: syz [ 1440.276034][ T8510] usb 4-1: SerialNumber: syz [ 1440.606651][ T8508] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1440.615940][ T8508] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.624026][ T8508] usb 6-1: Product: syz [ 1440.631469][ T8508] usb 6-1: Manufacturer: syz [ 1440.636280][ T8508] usb 6-1: SerialNumber: syz [ 1440.672144][ T1695] fuse: Bad value for 'user_id' [ 1440.712798][ T8510] usb 4-1: USB disconnect, device number 10 [ 1440.741548][ T8508] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1441.495908][ T8510] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1441.538730][ T8521] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1441.735974][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1441.744018][T26743] usb 6-1: USB disconnect, device number 54 [ 1441.856200][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1441.864613][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.875214][ T8510] usb 4-1: config 6 has no interface number 0 [ 1441.881652][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:35 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x7a00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000030c00000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x8100}, 0x0) 17:13:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x8000000000000000) 17:13:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xfeffffff, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1442.156306][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1442.165527][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.173833][ T8510] usb 4-1: Product: syz [ 1442.178287][ T8510] usb 4-1: Manufacturer: syz [ 1442.306531][ T8510] usb 4-1: can't set config #6, error -71 [ 1442.354904][ T8510] usb 4-1: USB disconnect, device number 11 17:13:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x8dffffff00000000) [ 1442.604143][ T8521] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1442.611369][ T8521] ath9k_htc: Failed to initialize the device [ 1442.693083][T26743] usb 6-1: ath9k_htc: USB layer deinitialized [ 1442.836144][ T8510] usb 4-1: new high-speed USB device number 12 using dummy_hcd 17:13:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000d00000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x97ffffff00000000) [ 1443.085956][ T8510] usb 4-1: Using ep0 maxpacket: 32 17:13:36 executing program 5: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x105280) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) 17:13:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x8847}, 0x0) [ 1443.127620][T26743] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1443.207911][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1443.216490][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.227135][ T8510] usb 4-1: config 6 has no interface number 0 [ 1443.233394][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xb80b000000000000) 17:13:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000e00000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1443.548564][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1443.558557][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.568042][ T8510] usb 4-1: Product: syz [ 1443.573033][ T8510] usb 4-1: Manufacturer: syz [ 1443.577898][ T8510] usb 4-1: SerialNumber: syz [ 1443.969141][ T1772] fuse: Bad value for 'user_id' [ 1444.035369][ T8510] usb 4-1: USB disconnect, device number 12 [ 1444.825956][ T8511] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1445.065886][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1445.186169][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1445.194434][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.206861][ T8511] usb 4-1: config 6 has no interface number 0 [ 1445.213084][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:38 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x8900, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x8848}, 0x0) 17:13:38 executing program 5: modify_ldt$write(0x1, &(0x7f0000001200), 0x10) modify_ldt$write(0x1, &(0x7f0000001000)={0x7ff}, 0x10) 17:13:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xffffa888, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:13:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xc805000000000000) 17:13:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000f00000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1445.416264][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1445.425439][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.433944][ T8511] usb 4-1: Product: syz [ 1445.438870][ T8511] usb 4-1: Manufacturer: syz [ 1445.577129][ T8511] usb 4-1: can't set config #6, error -71 [ 1445.586277][ T8511] usb 4-1: USB disconnect, device number 13 17:13:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xe803000000000000) 17:13:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000001100000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:39 executing program 5: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) [ 1446.038277][ T8511] usb 4-1: new high-speed USB device number 14 using dummy_hcd 17:13:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xf502}, 0x0) [ 1446.285992][ T8511] usb 4-1: Using ep0 maxpacket: 32 17:13:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xeffdffff00000000) [ 1446.417235][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1446.425646][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1446.438574][ T8511] usb 4-1: config 6 has no interface number 0 [ 1446.444785][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:40 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) [ 1446.777553][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1446.786958][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.795058][ T8511] usb 4-1: Product: syz [ 1446.799731][ T8511] usb 4-1: Manufacturer: syz [ 1446.804438][ T8511] usb 4-1: SerialNumber: syz [ 1447.186561][ T1847] fuse: Bad value for 'user_id' [ 1447.215311][ T8511] usb 4-1: USB disconnect, device number 14 [ 1447.996161][ T8511] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1448.236038][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1448.357313][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1448.365620][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.379551][ T8511] usb 4-1: config 6 has no interface number 0 [ 1448.386271][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1448.579918][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1448.589280][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.597580][ T8511] usb 4-1: Product: syz [ 1448.601841][ T8511] usb 4-1: Manufacturer: syz [ 1448.606729][ T8511] usb 4-1: SerialNumber: syz 17:13:42 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x8a00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x34000}, 0x0) 17:13:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000001200000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:42 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xf401000000000000) 17:13:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xffffff7f, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:13:42 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) [ 1448.776740][ T8511] usb 4-1: can't set config #6, error -71 [ 1448.823706][ T8511] usb 4-1: USB disconnect, device number 15 17:13:42 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xf5ffffff00000000) 17:13:42 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000002500000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1449.376123][ T8511] usb 4-1: new high-speed USB device number 16 using dummy_hcd 17:13:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x400300}, 0x0) 17:13:43 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) [ 1449.622753][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1449.748117][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1449.756640][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.767098][ T8511] usb 4-1: config 6 has no interface number 0 [ 1449.773311][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xf7ffff7f00000000) 17:13:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x1000000}, 0x0) [ 1450.118404][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1450.127750][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.136825][ T8511] usb 4-1: Product: syz [ 1450.142381][ T8511] usb 4-1: Manufacturer: syz [ 1450.147249][ T8511] usb 4-1: SerialNumber: syz [ 1450.639961][ T1938] fuse: Bad value for 'user_id' [ 1450.661548][ T8511] usb 4-1: USB disconnect, device number 16 [ 1451.456054][ T8511] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1451.696020][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1451.816806][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1451.825247][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.835777][ T8511] usb 4-1: config 6 has no interface number 0 [ 1451.841975][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:45 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x8b00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000884700000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xffffff9e, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:13:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x2000000}, 0x0) 17:13:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xfd82000e00000000) 17:13:45 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) [ 1452.056831][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1452.068248][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.077025][ T8511] usb 4-1: Product: syz [ 1452.081296][ T8511] usb 4-1: Manufacturer: syz [ 1452.287114][ T8511] usb 4-1: can't set config #6, error -71 [ 1452.340627][ T8511] usb 4-1: USB disconnect, device number 17 [ 1452.469917][ T2028] ptrace attach of "/root/syz-executor.5"[1996] was attempted by "/root/syz-executor.5"[2028] 17:13:46 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) 17:13:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x4000000}, 0x0) 17:13:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xfe80000000000000) [ 1452.835989][ T8511] usb 4-1: new high-speed USB device number 18 using dummy_hcd 17:13:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000884800000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1453.077351][ T8511] usb 4-1: Using ep0 maxpacket: 32 17:13:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x5000000}, 0x0) [ 1453.197603][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1453.206330][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.216845][ T8511] usb 4-1: config 6 has no interface number 0 [ 1453.223160][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0xffffffff00000000) [ 1453.608803][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1453.618438][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.626948][ T8511] usb 4-1: Product: syz [ 1453.631387][ T8511] usb 4-1: Manufacturer: syz [ 1453.636284][ T8511] usb 4-1: SerialNumber: syz [ 1454.043773][ T2021] fuse: Bad value for 'user_id' [ 1454.073573][ T8511] usb 4-1: USB disconnect, device number 18 [ 1454.856378][ T8511] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1455.096113][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1455.216630][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1455.226774][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.239811][ T8511] usb 4-1: config 6 has no interface number 0 [ 1455.247326][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:48 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x9000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:48 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) 17:13:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xfffffff0, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:13:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000655800000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x6000000}, 0x0) 17:13:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$rfkill(r1, &(0x7f0000000000)={0x308, 0x7, 0x3, 0x0, 0x1}, 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) [ 1455.446508][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1455.457140][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.465513][ T8511] usb 4-1: Product: syz [ 1455.470111][ T8511] usb 4-1: Manufacturer: syz [ 1455.696530][ T8511] usb 4-1: can't set config #6, error -71 [ 1455.742457][ T8511] usb 4-1: USB disconnect, device number 19 17:13:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x8000000}, 0x0) 17:13:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000000)) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 17:13:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000006000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1456.279258][ T8511] usb 4-1: new high-speed USB device number 20 using dummy_hcd 17:13:49 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) [ 1456.526353][ T8511] usb 4-1: Using ep0 maxpacket: 32 17:13:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000440)={0x0, 0x0, "da31b0e3d635cdbb7bccfc37ac441ed96a20117ee4c4598e2b0a6c06bbb707c0e65522f988a646983f7b78513ebdda0700f3dc36bda2fd6cd06c715b12ab498a05e4fd5d98c02d1f2d941a2c25e251af7f34965a7fc2a40f3020e22d2642068eaeef29c2e769082017c43b4f4c7cf544bc7425aba3dca74feddd449959a8ef53eebc6703ea3e49c468bee06619733f8bd9207eb53a00acbeca07db666757de6dda18682f44ff5878fc532605ac3fe31fb4d24386d6a2551b91ac238afa9abb6e1e8da501ae894deecbd154fb6b2c5fc586b5675615447f3d165d4565c03063feb33078323fdeff6cbf7251e6c20c165692cb2628c1a79a847bedbdc141bf5193", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{r2, 0x0, 0xfffffffffffff0c1, 0x9, 0x4, 0x1, 0xfffffffffffff801, 0x10000, 0x1ff, 0x3, 0x401, 0x401, 0x1, 0x80000001, 0xe341}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r3, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 17:13:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xa000000}, 0x0) [ 1456.648952][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1456.657791][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.669327][ T8511] usb 4-1: config 6 has no interface number 0 [ 1456.676088][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1456.947551][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1456.960813][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.970487][ T8511] usb 4-1: Product: syz [ 1456.977193][ T8511] usb 4-1: Manufacturer: syz [ 1456.983611][ T8511] usb 4-1: SerialNumber: syz [ 1457.392496][ T2126] fuse: Bad value for 'user_id' [ 1457.404609][ T8511] usb 4-1: USB disconnect, device number 20 [ 1458.196100][ T8511] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1458.446012][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1458.567547][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1458.581463][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.595847][ T8511] usb 4-1: config 6 has no interface number 0 [ 1458.603082][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:52 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x9100, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000586500000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xc000000}, 0x0) 17:13:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x28402, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r3, 0x0, r4, 0x0, 0x10973, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r2, 0x0, r3, 0x891d, 0x80000}) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r6, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 17:13:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:13:52 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x420a, r0, 0x0, 0x0) [ 1458.911762][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1458.921712][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.060633][ T8511] usb 4-1: can't set config #6, error -71 [ 1459.106979][ T8511] usb 4-1: USB disconnect, device number 21 17:13:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xf000000}, 0x0) 17:13:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x806, 0x5) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @local, 0x2}, 0x1c) sysfs$2(0x2, 0x5, &(0x7f0000000080)=""/142) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000000000000000000100000004db3210056296fd5f400"/41], 0x20}}], 0x1, 0x0) 17:13:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000008100000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1459.585988][ T8511] usb 4-1: new high-speed USB device number 22 using dummy_hcd 17:13:53 executing program 5: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$getregset(0x4209, r0, 0x0, 0x0) [ 1459.825983][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1459.951367][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1459.960087][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1459.971138][ T8511] usb 4-1: config 6 has no interface number 0 [ 1459.977506][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x10000000}, 0x0) 17:13:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000478800000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1460.309363][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1460.319107][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.327388][ T8511] usb 4-1: Product: syz [ 1460.331680][ T8511] usb 4-1: Manufacturer: syz [ 1460.336826][ T8511] usb 4-1: SerialNumber: syz [ 1460.683833][ T2202] fuse: Bad value for 'user_id' [ 1460.717509][ T8511] usb 4-1: USB disconnect, device number 22 [ 1461.516008][T29499] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1461.756061][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1461.877435][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1461.886061][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.898556][T29499] usb 4-1: config 6 has no interface number 0 [ 1461.904773][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:55 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x9200, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:13:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200000, 0x0) ioctl$NBD_DISCONNECT(r3, 0xab08) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000000000000000000001000"/32], 0x20}}], 0x1, 0x0) 17:13:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x48000000}, 0x0) 17:13:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0xfffffffe, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:13:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000488800000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:55 executing program 5: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000a80)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9e}, 0x0, 0x0, r0, 0x0) [ 1462.126213][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1462.135425][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.143820][T29499] usb 4-1: Product: syz [ 1462.269698][T29499] usb 4-1: can't set config #6, error -71 [ 1462.305374][T29499] usb 4-1: USB disconnect, device number 23 17:13:56 executing program 5: lstat(0x0, 0x0) truncate(0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004c80)='/proc/cgroups\x00', 0x0, 0x0) getsockname(r0, 0x0, 0x0) 17:13:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x22, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r2, 0x0, r3, 0x0, 0x10973, 0x0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f00000000c0)={'batadv_slave_0\x00'}) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) ioctl$INCFS_IOC_CREATE_FILE(r5, 0xc058671e, &(0x7f00000002c0)={{[], 0x2}, {0x8}, 0x48, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)="8d885aa503dcd3aace4f00e082f36b4b937a9dd03c340d94eb1442e567b44c7ea820844f12b3f83412e3b9c14b3eadb06e4212348fe4a90994b8beb08ee8cb54c0c296193618b3a3abb8e9d51c71237fdecadf7403d758fac40be18171652227053e999c5871d6ee551cfd7dda3ba92a772dd4351fd4bc243cfecda3f89dd99c5af8496dda572ded90099473128c08e455a2d661858b3d01560b042c24d4c5e9893c3dcbc515b4f6b6e11b8d224213226e4f79060b79d5e0531d", 0xba, 0x0, &(0x7f0000000680)={0x2, 0x1be, {0x0, 0xc, 0xb1, "9671d7fa5936ae913505b1edf652f6b2c7e8dc721095ff490554762370863cc20a4fedd9a945b8fe25ea1de2f93d52ae537f467a8e478469e692bbc973b1bb651429c1cb753c31e61cd33260376d316aae5484470a8a67cdb69f95d864d975aac8713685d4cb1444cf96d4f13b131aee3c6bf63c362192fb6dfa98cf6b458771946231537dc93c820c02f7bb58bf1f2750c5979617fb900f78e9edff8a8a4923072041b493880fdb659f484723f9ac3e71", 0x100, "cc9ec05e2c01629e2b72f9ba2099a895ce8cfc0aa28ba59e37f924a5639415c4f5fb0c1e24cb4ffab5726c844baf0926d759047e37c2492fbf75a373e0066bf70dd9bcd9f441f5fe65a270893f20bae62c6b0bb175674dcf815c40de2939a05f926871fa6631e2edce5caeb045fee9ed3711d3fc34cfe45a174b109f7da70e3de9f07f0d79dd99b60485e59ec04203d3196e8a36a9ce1d333c773b0960c44b095393b18a258ff657cf310cfb233666a3e2963c1d6911d9ba302d2204e1bc71b87d377fbe66a767ff0f33c8cc544437ceaafce14f2f7d301900e71bda50a8864f42790b855962780c079fa0a74da782f5c87369c2cadf0f586ce16bd51ec4c1d7"}, 0x75, "c22774241d4b07fc94a1a2ccc3c1e2b3c4d3d341e5c3aedcd82368fc33ce3879779691c2613b3386034ee467f9f1e5951a77e1aa34a16c6bd8f14b4e2b230dfe3054c88a1843ba94e29ca9b279a2c369e4c811f6f2bfcf3a0fcde8b61455dabae98f47b0430b466d5af99ad673a77ab6bf560204fb"}, 0x23f}) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r6, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 17:13:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x60000000}, 0x0) 17:13:56 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000fff00000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1462.817079][T29499] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1463.077288][T29499] usb 4-1: Using ep0 maxpacket: 32 17:13:56 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001180)={0x1c37, 0x6, "a5232f0ef2e2"}) [ 1463.197994][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1463.206527][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.216976][T29499] usb 4-1: config 6 has no interface number 0 [ 1463.225279][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x65580000}, 0x0) [ 1463.577301][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1463.586726][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.594821][T29499] usb 4-1: Product: syz [ 1463.599399][T29499] usb 4-1: Manufacturer: syz [ 1463.604224][T29499] usb 4-1: SerialNumber: syz [ 1463.954646][ T2291] fuse: Bad value for 'user_id' [ 1463.981522][T29499] usb 4-1: USB disconnect, device number 24 [ 1464.756050][T29499] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1465.035908][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1465.157343][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1465.165874][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.178355][T29499] usb 4-1: config 6 has no interface number 0 [ 1465.184571][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:13:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000004003000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:13:58 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r1, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10}, {0x98, 0x0, 0x0, "bbf675342c9088fd91352303acca5f1b5b94a845c68402aeeb1f43009185e209701a7ba7c47d48384465b91510ece37399d304926f04a77535aaa530d1bae17fe736f75d3140d66b43baf23c4210ae8fdf38b9fe18d52e29608bdd8d8fdb1b81796e622942f457ce403c7e9219216000"/136}], 0xa8}}], 0x1, 0x0) 17:13:58 executing program 5: syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') getgroups(0x0, 0x0) 17:13:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0x2, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:13:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x81000000}, 0x0) 17:13:58 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x9300, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 1465.395986][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1465.408563][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.416854][T29499] usb 4-1: Product: syz [ 1465.421249][T29499] usb 4-1: Manufacturer: syz [ 1465.612725][T29499] usb 4-1: can't set config #6, error -71 [ 1465.663899][T29499] usb 4-1: USB disconnect, device number 25 [ 1465.814238][ T2373] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1465.822570][ T2373] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 17:13:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x20000000) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x0, 0xfffffffd}, {0x10}], 0x20}}], 0x1, 0x0) 17:13:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x88470000}, 0x0) 17:13:59 executing program 5: pipe2(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) inotify_rm_watch(r0, 0x0) 17:13:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000340000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1466.166007][T29499] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1466.409272][T29499] usb 4-1: Using ep0 maxpacket: 32 17:14:00 executing program 5: pipe2(&(0x7f0000000340), 0x0) syz_genetlink_get_family_id$tipc(0x0) 17:14:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x88480000}, 0x0) [ 1466.527529][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1466.536068][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.546797][T29499] usb 4-1: config 6 has no interface number 0 [ 1466.553002][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x9, 0x4) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000000)={@fixed={[], 0x11}, 0xfffffe00, 0x81, 0x5}) sendmmsg(r3, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 17:14:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000010000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1466.868027][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1466.877714][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.885993][T29499] usb 4-1: Product: syz [ 1466.890276][T29499] usb 4-1: Manufacturer: syz [ 1466.894982][T29499] usb 4-1: SerialNumber: syz 17:14:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000001540)) 17:14:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:14:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x88a8ffff}, 0x0) [ 1467.361885][ T2372] fuse: Bad value for 'user_id' [ 1467.432006][T29499] usb 4-1: USB disconnect, device number 26 [ 1468.228058][T29499] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1468.476020][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1468.597454][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1468.605926][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1468.616730][T29499] usb 4-1: config 6 has no interface number 0 [ 1468.624073][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:02 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000020000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) r3 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)="2ac6cd5cd66fc061325830a9b7d76941681c457e62300bfc9e1b7b038f420a1c6476216fcd36b4329c499fd95a84a55d20dae6a623fd5b8a4964442f4a9c114c74c21fc8c1f232fb4de37887640c4386f03bf030a9325cee455f4a2e98e2ce9ce76adc790f7d1cdca5cfb64219885a70303dfab4814357b5decc39efd2af71d0a52b5f36610a", 0x86, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000200)={r4, 0x7b, &(0x7f0000000180)=""/123}) vmsplice(r2, &(0x7f0000001440)=[{&(0x7f0000000440)="e6bf1fcaea1176911f15b7b3b72a5e5a762c26b2948e1508da322eb701e69fb86f8ef49149ef797dceaaaa66f03e55a25d10c55499cec97d2c0c68dfec6e0e197bec146693cb21dd6bbf47785640d04e76dba4b2c916e3c8ea11200ddf40570a103bcfb2ef93f8e88c22fea0c09af3644d05b42910ef94c2c82bae46846ebe6cdc84e9abbe1575ee82d8c62270f0a9f36cf240852cd59ce76cb9a251c280b76dfeedcb1213d0087aa828e664ededc1a8df10ffa05d70685271a6707feca0e0562bdf99c30c5de1ec840d253a9d39cbe6fb148fe7677bb22d760a527f4576bbd56479e80f84dd158ddf6ede10b31edd759ebd34d84fc0a85e86a378fb0e444c3b956d476455d8dbccedf771be8ef9b6fae40b8d81c0162c9cbc38ecd39077ca67c9b6627d07279e0c8f8c5d85eeaeb83489f2c32edf4336940b32ae753b23d2622dc06059266a57dacd93d9ff62f84d5779541bb98948f60104204eb77764dcd15a616b32ced432ca32d8919ebcc2991da9c71a02f5b4e072e95afb30323e61e4bd2ce092df1d34e2ae250b10288629e807c53951600f560c347a29b2ee7b775d4d33f7de26879a719526a873751fcdd4ace9bdf586165471e53b25409692ca1ba8cd85be187bdc390075acebae1404fb746bd17bb50deba8ddbcfea08d9b765dfb2eca599451e67b3bfcb985972600664e9f948eafdd08c3fd5fe33bb756fef535c0c24bcd67cc2c564f3b421c09b60810ce3dc9e82f87f8805730756e27f15c5706a976121bfcf44164a8792a588f7c383273d372f3a478b946d78180f1355e3159d4424753a4e0ee8d7cdc3ab1232b8a7f25c84c6fadfbb1da43b87f5d7a3417991e06cbffd91516bcd305e2d5be52fd811300c0e4dc0dfc619093845c7a08ab9d5964f16e31af1d94c1eb6e88e1bff583817a60a89a61ef1705f77e379fa4d41c2ccc1d81edc2cb7bf37ff3becaed38f1e5c1f50a508582b63488b4cd2add0f7c9cad887efee093e3dce5db8af617215cf695aead3ea464aebb31596d81e07f5d1690902bfb6e80a3de6e91378fe24f3bb4f72e31385335de4d7b064f93ff541ab1a85eb758b1ece4c3d12879ffde05356020bb35ba3ed2c7ce28e2fc60e1e7a9914927ca1c0c06a691ceae3a0ded70e6ee11f2c54873fe94e3eef0e52df3f62041f7b0878184e698568ba05e67d41c65312402efb22a8466898a2186ecb999d1e47aa0273c9af22398d1b236585e3fa41bdf1df79c964d0290637dad3c880960fe1b285ef06c9959e67e413c9104fb6ecb39a728033ce2cb09fd0e40eb0e8055dca7e4b88368f5c81667efcb8e19f8f0d6b5151483f2e21a336ae4cf90254fa424b49628d4835e1454f04a4eead3a52a7e916169f1e83b8f130f243c6eb44401efd5b3e390ecca6fbee4b7835589a6b8ae779fe73730e8a956ccea0894dd16471adb7fc9a2ce79de52c39bd3233fe8110f38beb3293ded12255963f394a7ab8bf3789b976ebab47fb27d3ce6f7d44cb82447561372f9c804461e692597091c3a408362d8408470b81a7b14f04b7c938aaff1d5b94b7ee4cad30ee19f549d94deb0fe8bcf1c0879bfa8a594d78efc87d69bcca92820bdf2239806f8a492af64e91b2efb1aecddfaf67cbabc0c2974bb7c34710fcdd7aab271db6770779bc25dd0b1138c4c09f1ca5ea743ae326c758da51d281792b33442388195c56affa5b317f7a1b5ee2999aeb61f1640a2228ea662a5e5987335d1e4eea7d94cc5569671fe8e700093180f7dfd7a829705fb6437c57b507e4e447f03cf673d1b57272aa6d285ccf98daa03abdc29498bb5f6cdcffb090fe5d04e2584ae660690c6b133bc85bf98b7bd93bd21c9f700e4590bb504a120a226d93cd3696fb10ceabdc777316248b5725281f29da673d856f908e744d0326fb49b2c7662bd3320caa7f09f9745320da92d6a3763a89bfc88e07d5ad2f5ff6c33460eeecf48e88ba2f4b975a61920c397c534266383f147400691029653fa0df3448deb72dee46ca0eaff1f95fd74e4f89051be4209fc7cc6d74bb8278ff4b4033e768d5854e8c9ca9beb0646711fbd50542ca658da0933cc1ec83e4acef714995184779c3e1a9cc37d2b2cefa47ecd4488dfcf2bcb6de815ddc952043d37369903d0fbda86fa89c383137cb9136d5f0801b639481a375708aa71201b7c879ae07c7f8c1ddf470d191bda4572f3afa037ba53ac39d89eb1547a9a565d3b162101a9a5cf4c35d91c3d520d4fb6f377d485b6c506432854699040476d2fe0d9e89ca9836a9cf3735de0ebd61e2e5facb1385669a554b480cff3ede7d8b1a67ef1c1d26b57498802feef1c8829e5c66e9a03a200c26e82c5247299c8052eca6177d609bffd2baaa25b6dd80fae3dd7d65de634c8fda38c59f85dec6693aa45ee4a9e430f36881618de1b1a75e096d88d80831f46ef4d00fa7ca0589773dde23ec9e571111ec9f1e102d85ece2d2765fdf22e852f7f6d19f9d6a8edf2e6a923158d9a1b3392400632dd5fb1a02722b651c382a2f49b5982caa8bb2ff8a021d73c85f1bb36f971c9b0fdc108502537121d3c890a152d433df587b03caa80a817d848136c8c389ae0b2eb76ab100b55ebac16b51ab823ccc7b7712138b645143244f522ca36c9d5aa6570c1b76bed40b5add27646ac2e46c53dff12d6b8a51a386e9181867cee53babb1096a420a35e713e36ae558f8c214188e658fad18ccb0568947340756a321f8fb0e23910fa687780d3c958fb5ca49e82f85475bf537e6f468af812aa2abbd7ac23a04d8cfed9dd529877087b72de2312a0bf997447d59645c1c6920e1637358c9c7159ce3d8dfda5d58f1a9875a2ba3922086a6165802272f036bc71a15d528599c1a80d87e31e080e1eecd9759c3d83f8b5ab69c8b6176a5401f8304cef414b9544a7363f1241958cd91e628ed47bfd7c1b8a469af32f26b78e0e81b26c5dd9b804db68992526e51cd1f33bb70308c8c8c93ffe15498c22451a851592aac7507bf434b4705982914cf6d9047ee30d026e1b32d88669c7508d4ef5d3ca0e8dd3571bec1c2a99c9d8a54cd432b5c7f26b108b30fb7ede759240df5424dcc2fa5dc538664a888042daee4b3946b99287881ff029a740db42601d7c4dc3985017fc63e32b93eeb22a217ee062b8ffdf3ca7a01187263da457ce146be360c5fbe02202bd48c2590d43304864c7547c98fd5afe363a5ffd08ee747cdf4e17c3204416a6fa17189e3c567f5825ffb9152eb64be385283cb8ccd268a6522d22618cb41c9f132b8b00a04497ed7448e77e4de9beeceedc1b1322510b7bfdeb3d2b80b57ed6daeab76efff121553cbd8defcb663482a6f6c211bc3bb47f3704857cbe36e62879696621cb9a50a4e80e216e15746f0cabedd5d648950783082cd27548930ac3766b570f988704d9976423170703158393c56dc4427112eb12d80dcd9579dee2bc9b3c506a8a8c475a9777f1a37a6b7efeefac5fbac437fcb881021c64f8f749d75b17e7f68815d664297b095d8d160e399cd1ad2621bca2055d500bb99b4d3d45312b84afe38d7d69fb70810684c67bfd8fd58d5f76d8a389da31879c27ad3d374735c77489c23ed4daabbc62a23c6a1cba6b960e82e1786acf2a75eddbdaeb31112615951f6be0aecda001859e55dc3887726096e5065d80835e1fb3da852f46bd1aa911c7279a959561dfe6b9d886403b4f389071e25811ae5fea4250fff52bb47ea52fc549d26c117a21ba412e9cd3e3321d3835ef529d185b10b0610ab4b4e12de717dd22e1a26abaa6f14610254dbc054b3fbf3e92e719168f75e1bc195ffb5e92eb278ee3df4d8f10d55e41a821bab085dd8cd0a6cd702a21b8f3f560b3b36005e14c112dd5bcffe6296666127cafe280af461664cb38f48a9730e432fb56c66a77fec70977371217fe25abd86d41b009fa41246dd18dd7327c6449ffe2471755d0396423dccf93c40e24479e67df87100ad5a63e8b9773fbd35e052096afa81ec13001c2da23ce09b1947bec73584fcb6d6333d6c30e929be2a8a01224fbe180a4c62e6a25d400f71c0ed8bb6aa6ba2298864306e9ad598124fc5fd39e58da8b8f10ca0758cbc38da18d34851e676c4b78986b9c008f7206d6d6e042c75ee4d362d023649a8596a9fa6e4df890cff54f39235820ccdf953a5c6f1cea0f052b053c60147b507509e1f6a9646210210d1bcd9fa7c6e765ca4e46bc87bb1288dc7c202d31b8b4eede409628ffa04d888aa89ae9d0195aa732487a332adc7ed3bf7a08b320aec8ee4ffc8dacb478f7691a08dc89ead9e18505a890dd076774a9911a9486897f05497f7aade7e248ef8ea7d21a07351ca4dfecf7bc056d1efa7ec67d991fab0a6807a1d089ea6d3fbc675dce3f7ed3061f2a2e88a5fed2c11e9edcfeaefae19dd13390991fa8239ea1f98940f67c6ab845565b9c1eca4b10029f6e2fac5ac518e19469bb2361677b8d0aefe90e708835d68240b1687b796597447c016ae3781a6aa090f8a42bb319c939bf7ab8682ea3e7f8a54a83809e94b5aa79061660bdeeb62ebf7cf434f65c265f3ebb771fb92529b05f4c32f59f8f168ec73de0177213d76287848f75585b9e44a614b2107fced110ff8fa1a0dcb3827a70a286bdcb7283144e248e8a597899831ffe39464608c7df7ec4de49c6137456fb06306a6dc9277195db07d1852922252f6fa6652c56ef306b386da34896fb5093881e2b350bd9a4c5155d2318eacddcfe76c4af8376425d9139016e1c689583d2d5cd06874a3e31412dae51d74002cea8d640d368b22ba8660cfd69a805e5b94f597a5a9f4787d81a69c06668b2ef8aaf7804529950af54903d1a2981fd2b3528b1190f326258a58cf146e467edbde70fe9659eb93c28fd3c72a0453dd714aaba6441e7d35378e7efc1595c3b083a6fcd118d5a67a79b0fafe378540795b401ebcdcb412611f1ed3d01da677abdf782d93fd54cb472a34a685d5b70b71fb9821708e5d5741a5468baf9fdef986c8377c9a9c5dedd9852194faa94aa75697dc4885c5f4ec1977dd1c0746e42acd6358171c9a6d731542ef1bfdc978e8c97b2fea14f9cd71ee145ce7001606d43951e86f92e72ee448fb30cec4048870096bd8d560629e45d4c6592591fe6b6e614d1b08cae5eb7e068cf43d9d10ab6b84bea94e83d5dc9526dfcaa2214f4e0b198948c8b6961af77442674cfd76f2e846230b6084997af5c02585125192887693d658804682fec16528c872e31f018a5858b9ae6bee4463b8b70b9965c1bc4e3dfd19eebb0e1aca018aad3830e8ba46c3ea8a89f796c5272493b05cbd245e0d0959fa3ebf93e5377fd93319fa67d54cd1201748444234e661e1333420d890e89815979fdd07113795c12f9b33d799c844e17fd7ee00a82cc93c6119543de8a069cc8bc80ff7b1873eb47dd1df36a0ed2c264fdbf52e118eb08b7b5764f51efe92bdb591353601ca6f0f1445d12a23d21c6108e287feb3d61c8a401307acaa2ff991add8b904d70ec252be4563768acca5a6acdb7bc19cc8108da651fe1a390e0db7019038ea28920419d67e290b73c76ade92715aa9596bb50e8ec892dfa8818523f2f2ccdf81b269f5fea8a268745f0fec1375ed26fb6375483cdb5dc82c758a854347126914df96733d6c594c6c4c9c99821f7650a81f328f1c43d4474f4575cc95820a3cb05a3229dcb42e5fcc6defbcbc754050971b5d0a22022e58be5418af9115ee9e3dc8a8f1b4fa6e353c7e69e2b13de3f", 0x1000}, {&(0x7f0000000280)="f14302bb0c9ab5a5bebde40e0c3a722968a375f50e98e620bb9eb38a4b41a12a64d985def85ae5cbca453e3c959e958a8e522013d1c0080fa3adf261f829d436fb58ac3d5a013aaaa53dda38ed5ec9d5b3e1f3abc424400b7d5ea339eade0f0869f6ec59c57a", 0x66}, {&(0x7f0000000300)="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", 0xff}], 0x3, 0x1) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10973, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000240), 0x4) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000004c79305c1f7f305b9edc632d000000000000000000000000001000"/44], 0x20}}], 0x1, 0x0) 17:14:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semop(0x0, &(0x7f0000003200)=[{0x0, 0x0, 0x1800}], 0x1) 17:14:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x9effffff}, 0x0) 17:14:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x2, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:14:02 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x9800, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 1468.906063][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1468.915300][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.923841][T29499] usb 4-1: Product: syz [ 1469.049997][T29499] usb 4-1: can't set config #6, error -71 [ 1469.085347][T29499] usb 4-1: USB disconnect, device number 27 17:14:02 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000080)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x2, 0x2, 0x0, 0xb, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x10000}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @ldst={0x1, 0x0, 0x2, 0x7, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd319, 0x0, 0x0, 0x0, 0x7fffffff}, @call={0x85, 0x0, 0x0, 0x74}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xa0, &(0x7f00000002c0)=""/160, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001400)={0x20, 0xc, 0xfff}, 0x10}, 0x74) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @vsock={0x28, 0x0, 0xffffd8ef, @local}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x4, 0x0, 0x101}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{r1}, r3, 0x0, @unused=[0x20, 0x80000001, 0x2, 0x8], @name="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"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000010c0)={{}, r3, 0x4, @unused=[0x80000001, 0x8000, 0x8, 0x80000000], @subvolid=0x8}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000100)=r3) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000000)=r3) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000000c0)={{}, r3, 0x14, @unused=[0x3, 0x5, 0xeb3, 0x4], @name="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"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000480)={{}, r3, 0xc, @unused=[0x20, 0x3, 0x1, 0x9f8], @subvolid=0xe7b}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000140)=r3) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) 17:14:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r3, 0x0, r4, 0x0, 0x10973, 0x0) dup(r4) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 17:14:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xf0ffffff}, 0x0) 17:14:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000030000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1469.606244][T29499] usb 4-1: new high-speed USB device number 28 using dummy_hcd 17:14:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "830e5dd2995997f62a35369634a172e86b7aa3"}) [ 1469.847628][T29499] usb 4-1: Using ep0 maxpacket: 32 17:14:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xc4) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'os2.', '\x00'}) sendmmsg(r3, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) [ 1469.968489][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1469.977282][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.990006][T29499] usb 4-1: config 6 has no interface number 0 [ 1469.996812][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 [ 1470.342923][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1470.352244][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.360563][T29499] usb 4-1: Product: syz [ 1470.364874][T29499] usb 4-1: Manufacturer: syz [ 1470.369934][T29499] usb 4-1: SerialNumber: syz [ 1470.771836][ T2466] fuse: Bad value for 'user_id' [ 1470.785641][T29499] usb 4-1: USB disconnect, device number 28 [ 1471.586010][ T9358] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1471.830392][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1471.956113][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1471.965035][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.975962][ T9358] usb 4-1: config 6 has no interface number 0 [ 1471.982180][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:05 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x5408, 0x0) 17:14:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xf5020000}, 0x0) 17:14:05 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000040000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x3, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:14:05 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x9900, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:14:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) r5 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r3, 0x21}, {r4, 0x10}, {r0, 0x8440}, {r5, 0x4004}, {r7, 0x4004}, {r1, 0x8191}, {r1, 0x8119}, {r1, 0x4}, {r1, 0x1412}], 0x9, 0x20) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) [ 1472.306155][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1472.315388][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.446752][ T9358] usb 4-1: can't set config #6, error -71 [ 1472.494412][ T9358] usb 4-1: USB disconnect, device number 29 17:14:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10}, {0x90, 0x0, 0x0, "0faf669a999610de66c29643b56f7ae2b6d89ddb376343faf8ae06f63e987f68e77fed017aae6fdc508d9bd960d774ff9bfa7e1ec3e54ce57a6145cb7bd7652400ce79efc573b52a4b1d19adefce46b698344db6256ca11261957a602b043542226c68f45fdba10859876aceadab1b0c5c56a50c35a835411085395a"}], 0xa0}}], 0x1, 0x0) 17:14:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xfcffffff}, 0x0) 17:14:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000050000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x4b4d, &(0x7f0000000040)) [ 1472.937866][ T9358] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1473.186416][ T9358] usb 4-1: Using ep0 maxpacket: 32 [ 1473.308181][ T9358] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1473.317008][ T9358] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.327408][ T9358] usb 4-1: config 6 has no interface number 0 [ 1473.333619][ T9358] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000060000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:07 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x5425, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, "bdf208d8889010562d2b269daad6fa79c40f7c"}) 17:14:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xffffa888}, 0x0) [ 1473.697455][ T9358] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1473.707177][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.715285][ T9358] usb 4-1: Product: syz [ 1473.719731][ T9358] usb 4-1: Manufacturer: syz [ 1473.724457][ T9358] usb 4-1: SerialNumber: syz [ 1474.126051][ T2542] fuse: Bad value for 'user_id' 17:14:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x4, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:14:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 1474.211294][T29499] usb 4-1: USB disconnect, device number 30 17:14:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000070000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1475.002869][T29499] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1475.246042][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1475.367812][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1475.376339][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.386735][T29499] usb 4-1: config 6 has no interface number 0 [ 1475.392987][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:09 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xedc0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:14:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000080000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000019180)='./file0\x00', 0xc1001) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000019200)='IPVS\x00') r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x20000, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000019340)={&(0x7f00000191c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000019300)={&(0x7f00000190c0)={0x60, r5, 0xb5791e9f010f370f, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x60}}, 0xdbc17ca1f5d47742) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xed3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffeffff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x70}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x17}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xe1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffff000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9e}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x75a}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9a7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x40) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r7, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 17:14:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xffffff9e}, 0x0) 17:14:09 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x5425, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, "bdf208d8889010562d2b269daad6fa79c40f7c"}) 17:14:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x5, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1475.666335][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1475.675525][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.685284][T29499] usb 4-1: Product: syz [ 1475.849834][T29499] usb 4-1: can't set config #6, error -71 [ 1475.883112][T29499] usb 4-1: USB disconnect, device number 31 17:14:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xfffffff0}, 0x0) 17:14:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) connect$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x24) close(r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r1, 0x0, r2, 0x0, 0x10973, 0x0) getsockname$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) r3 = socket$caif_stream(0x25, 0x1, 0x0) r4 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) tee(r3, r4, 0x200, 0x2) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r6, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000020000000000000001000"/32], 0x20}}], 0x1, 0x0) 17:14:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000090000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1476.407534][T29499] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1476.646048][T29499] usb 4-1: Using ep0 maxpacket: 32 17:14:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xfffffffc}, 0x0) [ 1476.767562][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1476.776057][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.786450][T29499] usb 4-1: config 6 has no interface number 0 [ 1476.793156][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:10 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x5425, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, "bdf208d8889010562d2b269daad6fa79c40f7c"}) 17:14:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000000a0000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1477.157313][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1477.167022][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.175129][T29499] usb 4-1: Product: syz [ 1477.179608][T29499] usb 4-1: Manufacturer: syz [ 1477.184355][T29499] usb 4-1: SerialNumber: syz [ 1477.544039][ T2636] fuse: Bad value for 'user_id' [ 1477.584342][T29499] usb 4-1: USB disconnect, device number 32 [ 1478.365963][T29499] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1478.626113][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1478.796125][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1478.804572][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.815079][T29499] usb 4-1: config 6 has no interface number 0 [ 1478.821482][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:12 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xff00, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:14:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x40030000000000}, 0x0) 17:14:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x6, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:14:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) r4 = getegid() syz_usb_connect$cdc_ncm(0x5, 0x123, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x111, 0x2, 0x1, 0xe0, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3ba76be4"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xa, 0x1000, 0x81, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0xa}, [@dmm={0x7, 0x24, 0x14, 0x9c77, 0xff}, @acm={0x4, 0x24, 0x2, 0x3}, @mdlm_detail={0xa2, 0x24, 0x13, 0x7f, "4a4b40811d928d4d2de87f0af183cc426d58032a273e0a310b0037fe0f1093254f6164ad5bba72e6c9e6f1ce72e8b721666391b357923559b3a699e3e1d679f051cf9c31d972f3c6271d770e0335e2199c608327d110d84aa8092292ea52e55414b7740e367afb30a13bdbe166d347aefa9a077ed7d6f701357d6c65483be8d43f77c7ec8f551cbbaf23a2330f5d9e2c9a982a9697686f1a76902a1f778e"}, @acm={0x4, 0x24, 0x2, 0xc}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x4, 0x2d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1f, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1f, 0x20, 0x2}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x1, 0x4, 0x0, 0x30, 0x8}, 0x1c, &(0x7f0000000500)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "dbb04b16e4b9138fb6e549c160d636fe"}]}, 0x4, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x40d}}, {0xe7, &(0x7f0000000600)=@string={0xe7, 0x3, "6a221bb232ddbfd005121c5e584c4c92d27f97f9183bef8f45d87ce5e72b138c38b772c84905c019db060b252717399aad7e32c6b625fbeb0235bccc7679e3538e7d4cf05b550f821cc515c8e7d0a792ae03d54698250ab7dae2a641601e66bc8bd9fb9f72bd296fe7938fa56fbf0546f5c4228b6f541b8a5830e57349ac505a53125648841cfe9c268b0575ab7de492c916a36fb0e6a76a19a427c3865e212238c624073936ec4f91aa09800c8737cb918a671f9130a09bda23e2c3376b30f5c07cb1c19e64a4b7a6e4b3dc1f1059bae476bed0e23adb0ff943eef2ad85f03ee6ff2d0879"}}]}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2367726f75705f69d21d0000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x280820c}}, 0x50) write$FUSE_ENTRY(r1, &(0x7f0000000280)={0x90, 0x0, r6, {0x3, 0x1, 0x8000fff, 0x1, 0x4, 0x6, {0x3, 0x1, 0x4c64f97d, 0x4b5f, 0x401, 0x8, 0x1, 0xfffffffb, 0x1c00000, 0x8000, 0x80000000, r3, r4, 0x0, 0xf1}}}, 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r8, 0x10, &(0x7f0000000200)={&(0x7f0000000100)=""/218, 0xda}}, 0x10) sendmmsg(r7, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000000000000010000000000000000000000000000037f9ffffffd8150000000000cb37aa7b1e055419d664b5506b34c569eff7c257"], 0x20}}], 0x1, 0x0) 17:14:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000000b0000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:12 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x5425, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, "bdf208d8889010562d2b269daad6fa79c40f7c"}) [ 1479.066693][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1479.076070][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.211933][T29499] usb 4-1: can't set config #6, error -71 [ 1479.261406][T29499] usb 4-1: USB disconnect, device number 33 [ 1479.416852][ T8510] usb 2-1: new high-speed USB device number 76 using dummy_hcd 17:14:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000000c0000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002c40)={0x0, 0x40000000, &(0x7f0000002c00)={&(0x7f0000001000)=ANY=[@ANYBLOB="aa0900000001c5"], 0xec4}}, 0x0) 17:14:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 1479.665995][ T8510] usb 2-1: Using ep0 maxpacket: 16 [ 1479.706788][T29499] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1479.877423][ T8510] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1479.888661][ T8510] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1479.898988][ T8510] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1479.956303][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1480.080978][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1480.090538][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.101072][T29499] usb 4-1: config 6 has no interface number 0 [ 1480.107637][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000030c0000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) [ 1480.207206][ T8510] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1480.216693][ T8510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.226953][ T8510] usb 2-1: Product: Ѝ [ 1480.231136][ T8510] usb 2-1: Manufacturer: ᰊ 17:14:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 1480.236778][ T8510] usb 2-1: SerialNumber: ≪눛킿ህ帜䱘鉌習聯㬘迯⯧谓뜸졲Չᧀۛ┋ᜧ騹纭옲▶㔂첼祶口綎啛舏씜정탧銧ή䛕▘뜊䆦Ṡ뱦鿻뵲漩鏧ꖏ뽯䘅쓵謢呯訛じ珥걉婐ቓ䡖ᲄ鳾謦甅綫鋤ᛉ澣檧ꐙ쌧庆∡옸ܤ㘹俬ꪑ耉蜌쬷誑ὧゑ鮠⏚쏢欷糀솱撞랤ဟ멙盤킾㫢࿛䏹薭㻰￦࠭ [ 1480.442450][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1480.451805][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.460220][T29499] usb 4-1: Product: syz [ 1480.464491][T29499] usb 4-1: Manufacturer: syz [ 1480.469405][T29499] usb 4-1: SerialNumber: syz [ 1480.872754][ T2707] fuse: Bad value for 'user_id' [ 1480.896503][ T8510] cdc_ncm 2-1:1.0: bind() failure [ 1480.910513][ T8510] cdc_ncm 2-1:1.1: bind() failure [ 1481.048099][T29499] usb 4-1: USB disconnect, device number 34 [ 1481.071560][ T8510] usb 2-1: USB disconnect, device number 76 [ 1481.696135][ T8510] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1481.836085][T29499] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1481.936067][ T8510] usb 2-1: Using ep0 maxpacket: 16 [ 1482.076765][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1482.138172][ T8510] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1482.148562][ T8510] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1482.158895][ T8510] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1482.210181][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1482.218742][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.229295][T29499] usb 4-1: config 6 has no interface number 0 [ 1482.235535][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:15 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xff03, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:14:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x400000000000000}, 0x0) 17:14:16 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ttyS3\x00', 0x80043, 0x0) ioctl$TCSETS2(r0, 0x5450, 0x0) 17:14:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x7, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:14:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000000d0000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000000000000000000000000000107000"/32], 0x20}}], 0x1, 0x0) [ 1482.556713][ T8510] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1482.566322][ T8510] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.574652][ T8510] usb 2-1: Product: Ѝ [ 1482.608616][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1482.617979][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.626252][T29499] usb 4-1: Product: syz [ 1482.737744][T29499] usb 4-1: can't set config #6, error -71 [ 1482.751543][ T8510] usb 2-1: can't set config #1, error -71 [ 1482.792485][T29499] usb 4-1: USB disconnect, device number 35 [ 1482.822062][ T8510] usb 2-1: USB disconnect, device number 77 17:14:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x500000000000000}, 0x0) 17:14:16 executing program 5: io_setup(0xfe07, &(0x7f0000001140)) io_setup(0x893e, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:14:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000000e0000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1483.465931][T29499] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1483.707919][T29499] usb 4-1: Using ep0 maxpacket: 32 17:14:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00000000000f0000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1483.841134][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1483.849675][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.860328][T29499] usb 4-1: config 6 has no interface number 0 [ 1483.866720][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x600000000000000}, 0x0) [ 1484.067654][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1484.076994][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.085093][T29499] usb 4-1: Product: syz [ 1484.089558][T29499] usb 4-1: Manufacturer: syz [ 1484.094259][T29499] usb 4-1: SerialNumber: syz 17:14:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000100000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1484.503854][ T2811] fuse: Bad value for 'user_id' [ 1484.557038][T29499] usb 4-1: USB disconnect, device number 36 [ 1485.336194][T29499] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1485.585973][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1485.707356][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1485.715973][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.726445][T29499] usb 4-1: config 6 has no interface number 0 [ 1485.732743][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:19 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xff0f, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:14:19 executing program 5: io_setup(0xfe07, &(0x7f0000001140)) io_setup(0x893e, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:14:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x800000000000000}, 0x0) 17:14:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x8, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:14:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000110000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') writev(r2, &(0x7f0000000380)=[{&(0x7f0000000100)='T', 0x1}], 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/376], 0x178}}], 0x1, 0x0) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10973, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x501082, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000100)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x0, @mcast1, 0xfffffffe}, 0x1c, 0x0}}], 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYRESDEC=r6], 0x1d4}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c014) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000480)={{r4}, 0x0, 0xe, @inherit={0x70, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000001000005000000000000000100000000000000a8e7000000000000a9000081800000000000000200000000000000050000000000000007000000000000000800000000000000fcff1aed6b68a37015c95d8c43ffffffffff080000000000"]}, @devid=r6}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000003c0)={0x1, 0x1, @start={r6, 0x0, "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", "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"}, [0x3, 0x4, 0x57ffe058, 0x80, 0xffffffffffffffff, 0x2, 0x4, 0x800, 0x6, 0x6, 0xa4, 0x9, 0x16cf, 0x9, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x9, 0x1, 0x3, 0x5, 0x1186, 0x10000, 0x2c42, 0x3f97, 0x5, 0x3, 0x7, 0x8, 0x1000, 0x12, 0xfffffffffffffff8, 0x4, 0x4, 0x8, 0x200, 0x100000001, 0x9, 0x80000001, 0x6, 0xe12, 0x9, 0x7f, 0x4, 0x40, 0x7, 0x10000, 0xf19a00, 0x8001, 0x32, 0x9, 0x8, 0x100, 0xadd, 0x0, 0x7a, 0x1f8, 0x736, 0x7, 0x0, 0xe6b, 0x8001, 0x3f]}) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.origin\x00', &(0x7f0000001480)=""/136, 0x88) [ 1485.996377][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1486.005587][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.014226][T29499] usb 4-1: Product: syz [ 1486.199923][T29499] usb 4-1: can't set config #6, error -71 [ 1486.264964][T29499] usb 4-1: USB disconnect, device number 37 17:14:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000120000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x280820c}}, 0x50) write$FUSE_OPEN(r2, &(0x7f0000000080)={0x20, 0xfffffffffffffffe, r4, {0x0, 0x8}}, 0x20) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r5, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) [ 1486.746892][T29499] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1486.986917][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1487.107718][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1487.116462][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.126887][T29499] usb 4-1: config 6 has no interface number 0 [ 1487.133179][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xa00000000000000}, 0x0) 17:14:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r2, 0x0, r3, 0x0, 0x10973, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x29}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008904}, 0x40c5) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r5, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 17:14:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000250000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1487.507331][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1487.516711][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.524814][T29499] usb 4-1: Product: syz [ 1487.529399][T29499] usb 4-1: Manufacturer: syz [ 1487.534114][T29499] usb 4-1: SerialNumber: syz 17:14:21 executing program 5: io_setup(0xfe07, &(0x7f0000001140)) io_setup(0x893e, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1487.933829][ T2890] fuse: Bad value for 'user_id' [ 1487.986452][T29499] usb 4-1: USB disconnect, device number 38 [ 1488.765966][T29499] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1489.006055][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1489.127399][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1489.137949][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.148752][T29499] usb 4-1: config 6 has no interface number 0 [ 1489.155220][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:22 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x20000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:14:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r3, 0x0, r4, 0x0, 0x10973, 0x0) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0xfffffffffffffd0f, &(0x7f0000000080)=[{0x10, 0x0, 0x0, "d9017759369c4b5776a0f15d67b29df2d58225b88e0118b005000000f50f0090a34a4cb1e9ce74e618451d8812b32cd9e4b29dce75387d29cf341a07ef21ddbab1d2ed0a4aa59078296ef83c94f0dd7dd70751fe8f68127ce5cc1aad5a3b40"}, {0x10}], 0x20}}], 0x1, 0x44080) 17:14:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xc00000000000000}, 0x0) 17:14:22 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000600000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:22 executing program 5: io_setup(0xfe07, &(0x7f0000001140)) io_setup(0x893e, &(0x7f0000000000)) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17:14:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x9, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1489.426174][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1489.437706][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.446702][T29499] usb 4-1: Product: syz [ 1489.450977][T29499] usb 4-1: Manufacturer: syz [ 1489.611810][T29499] usb 4-1: can't set config #6, error -71 [ 1489.674553][T29499] usb 4-1: USB disconnect, device number 39 17:14:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000058650000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:23 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r3, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 17:14:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 1490.117402][T29499] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1490.367269][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1490.487668][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1490.496106][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1490.506476][T29499] usb 4-1: config 6 has no interface number 0 [ 1490.512679][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 17:14:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x1000000000000000}, 0x0) 17:14:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r2, 0x0, r3, 0x0, 0x10973, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000080)={0x7fffffff, 0x0, &(0x7f0000000000)=[r4, r0]}, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r5, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x10}, {0x10}, {0x20, 0xff, 0x3, "2aab407164246b62ebe4fd922e"}, {0xe0, 0x119, 0x2, "256c745b17658562ca6f35cfb0196e9610b2ce21f31fa40a9f355a909bc09649a4de66f48bea10eafb8a4bf7ea465369c9ab55673a70a2756e6087905516ef848f248c28fe364b0498037a20e9535972720f96453c4b73f644ca60b36af13275ab3207555448936b363d158c92698daddf74253849b1e078416c97da4657f6ce7808540d770bca245f33df48e0ffe628f4037079b95683053cfb39bccab7394683bffbd85a64333c2958c2ebe5416503f6e1bbbfca4211ee33b56c33236811ee3610c327b5a7cfa82a"}, {0x68, 0x107, 0x7, "741428d9b94ba2d6af86f2c1a034bf0b81ee558f848f68787e62ed00e9bdeb317259f080e72cbddcb8d03bdc37c8dc3d74c4f7161920b44acbaf86d9546e4536fa3f79b8a1df256e9dc5733d1aafd40d7f"}, {0x40, 0x109, 0x8001, "f275b585b5ac2d32e689e5a51b9dd77ac176f0175c2353ea21708322c09ad24caf583dc2610491d04cad03"}, {0x70, 0x111, 0x9, "c6bf716090f98d2435f312ade14f5f2095ba4c3da998447a958cc0fdbe2628b43ba51058a50706e374535417b00a32c7d92d7b0dc84474c69f5278f21bc8cf04853f85ae1a096881e26f1c3b2f54c7524b05c0af64d249133cd41db7b6"}, {0x88, 0x1, 0x8, "51788704298823cd9af8fab78a2a52e308f8264975c4f58d31ab87465e11e36d8ca1b8cb7f9c3a5c92ca560a3f093966a57482457c3672f4d0b847840c63f8b924b45528e7675c40827cb4add54c10f05718a8da07d15fa7bb20954eba7f98f114d5db4a3080b6d689a0838acdfe556b52"}, {0x30, 0x105, 0x0, "8b0ecc669d73aa8d5fcffde2658d2b19019c43238726d7905183ce176c2cb7"}], 0x2f0}}], 0x1, 0x0) [ 1490.869289][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1490.878644][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.886910][T29499] usb 4-1: Product: syz [ 1490.891294][T29499] usb 4-1: Manufacturer: syz [ 1490.896142][T29499] usb 4-1: SerialNumber: syz [ 1491.273744][ T2974] fuse: Bad value for 'user_id' [ 1491.334469][T29499] usb 4-1: USB disconnect, device number 40 [ 1492.116251][T29499] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1492.355981][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1492.476180][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1492.484680][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.498809][T29499] usb 4-1: config 6 has no interface number 0 [ 1492.505029][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:26 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x40000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:14:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0xc0, 0x24, 0x8, 0x7}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x0, 0x7fff) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x80, 0x80000200, @mcast1, 0x7}, 0x1c) sendmmsg(r4, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) 17:14:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000000810000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x4b4d, &(0x7f0000000040)={0x0, 0x0, 0xff02}) 17:14:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x4800000000000000}, 0x0) 17:14:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0xa, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1492.756002][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1492.765181][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.773634][T29499] usb 4-1: Product: syz [ 1492.778041][T29499] usb 4-1: Manufacturer: syz [ 1492.946412][T29499] usb 4-1: can't set config #6, error -71 [ 1493.027877][T29499] usb 4-1: USB disconnect, device number 41 17:14:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r1, &(0x7f0000005940), 0x17, 0x0) 17:14:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000ffffff810000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x6000000000000000}, 0x0) 17:14:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)="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"}) [ 1493.486487][T29499] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1493.726162][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1493.856681][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1493.865004][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.875470][T29499] usb 4-1: config 6 has no interface number 0 [ 1493.881912][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x6558000000000000}, 0x0) 17:14:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0xe0, 0x116, 0x5c9, "ad91638c1ec7c060956bfa206f0d4fc2f7183adeffa51162dbaabc5847cd11cac647c08b9769318f1405e82f0645f42cb8162289e3f473310e2614a1d96d2de06c673f3fa623d9cd628b6b74e3a5a94dd82ffc9bf17bc02d02ffb409cb3b8849dbfed4c8463bb1547be3f4249d433d7491f184f07bf500ddfba13d288aa73e49b05d1f628364f99e7a46ee100cd945f2f33eebc48429e8609158aaa5496b02087175152809ae46c69396585083ab33da26a24342c39a4558335c17bdaa8c27358c502d7e27c309de692ed2e34cf64d"}, {0xe0, 0x101, 0x7c2, "9ddc6560d87508970510bfedc3da8502f6027ae8aeef6b807ce231776ba2dda77a6435cf82b89723400e9866fb65d959779f7f85cd4161c0483732194285f7aee6bbd320eb09d0fe5d62cb1846b8ffda750e2ba7fd0f6c0097a70a1a56c9f3a27e2c5a44ba3152416de2ee17782ef77e9c9b5144548f71df4a08224bf9cfb0c2569a199e99da6626836e2fe4504263ebae6fc93d04d33a975fb0bae1f667be4d554b3356a22d1cab3c6589354fcba3e7b446694fac9ae7fe2a1d2daa4dc255166d5866199c073fc69a3c452faeaef1"}, {0x100, 0x112, 0x3f, "a66117298fab5d704977ebec8324e6ecb7dad7f2d4a39263d9af0b4a367904f939483331306ebbbe09cbd94815219be461dd737e79e0a323f49ff79e6d1723bf58ecbae726f6add74fa140195edea3baf04f14a48d153011c42b22fd857a1870e18d962e828a72dec4502c80fa8096b9e7fe0afdeaf85f952939dc1a70fea5d0d355d91e623104d43b18a9a373d7479b5d409ea3cffb53ee091cba0184f6310af8ec4d01c4c7ca6afed5b71b8fa60b69b8b7f3ef1fcfa55d11b6d3b965cb94d00b8e0c9aabb8c0399085c45fd101903fcfe6de96c5924978ec6dc4b600a0b097985b646d7d54e127d5b6ecda8d22"}, {0xd0, 0x104, 0x9, "3e4898a331425b69482e63b8bcae5608eb9244bcbc12d7c46a89553bc7d3e9d2023afcdc677824c3e85818007d7ce1db1436cf6dce9a72a2737f36433d0ab4aeb148b69ecd3e0afb76b98818c7e5e2ac946ab420a81c5de952ef440a6bd12a87fdf2e482dcf823fcee4d67d14e1a3c659d1559a1244984f6d90f5f7a7b79d86687f4831f28c43ceed142bcd99bc65ebf6e9f41742081be9394addbdb1465acec822b84291f5509bf06001e451e33302270c1b3dd42928e97065d"}, {0x1010, 0x29, 0x7, "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"}], 0x13a0}}], 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x6c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f00000014c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x20, r5, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6f000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) [ 1494.219243][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1494.229808][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.238136][T29499] usb 4-1: Product: syz [ 1494.242450][T29499] usb 4-1: Manufacturer: syz [ 1494.247289][T29499] usb 4-1: SerialNumber: syz [ 1494.299368][ T3092] tipc: Enabling of bearer rejected, failed to enable media [ 1494.348799][ T3094] tipc: Enabling of bearer rejected, failed to enable media [ 1494.696114][ T3057] fuse: Bad value for 'user_id' [ 1494.713783][T29499] usb 4-1: USB disconnect, device number 42 [ 1495.506062][T29499] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1495.746001][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1495.866828][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1495.875342][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.885832][T29499] usb 4-1: config 6 has no interface number 0 [ 1495.893684][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:29 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x44000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:14:29 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x545d, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, "bdf208d8889010562d2b269daad6fa79c40f7c"}) 17:14:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x8000000000000000}, 0x0) 17:14:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000047880000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0xb, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:14:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1000000000000000000000000000000010000000000000000000000000800000"], 0x20}}], 0x1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r3, 0x0, r4, 0x0, 0x10973, 0x0) splice(r3, &(0x7f0000000080)=0x6c8, r1, &(0x7f00000000c0)=0x4, 0xfff, 0x4) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x800, 0x40) [ 1496.106577][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1496.115970][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.124239][T29499] usb 4-1: Product: syz [ 1496.128819][T29499] usb 4-1: Manufacturer: syz [ 1496.289738][T29499] usb 4-1: can't set config #6, error -71 [ 1496.375267][T29499] usb 4-1: USB disconnect, device number 43 17:14:30 executing program 5: clone(0x2082b000, 0x0, 0x0, &(0x7f0000000380), 0x0) 17:14:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x8100000000000000}, 0x0) [ 1496.896112][T29499] usb 4-1: new high-speed USB device number 44 using dummy_hcd 17:14:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000048880000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r2, 0x0, r3, 0x0, 0x10973, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000000000000100000000000000000000000800000003000000000000003f000000000000001f0000000000000001000000000000000000000000000000000000000000000092300000000000000000000000000000400000000000000080000000000000000000280600000000000000000000000000000000000000000001000000000000000000000000000009000000000000000100000001000000ff00000000000000000000000000000000000000fcffffff00"/200]) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmmsg(r4, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000017000000000000000000001000"/32], 0x20}}], 0x1, 0x0) r5 = openat$incfs(r3, &(0x7f0000000180)='.log\x00', 0x400000, 0x9) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000001c0), 0x8) [ 1497.156026][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1497.280686][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1497.289953][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.300538][T29499] usb 4-1: config 6 has no interface number 0 [ 1497.307317][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x8847000000000000}, 0x0) [ 1497.617730][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1497.629405][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.638172][T29499] usb 4-1: Product: syz [ 1497.642461][T29499] usb 4-1: Manufacturer: syz [ 1497.647516][T29499] usb 4-1: SerialNumber: syz 17:14:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r2, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10}, {0x10}], 0x20}}], 0x1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="18", 0x1}, {&(0x7f0000000000)="e5", 0xfffffe6d}], 0x2, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00'}) splice(r3, 0x0, r4, 0x0, 0x10973, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048004}, 0x4000) [ 1498.123808][ T3143] fuse: Bad value for 'user_id' [ 1498.173318][T29499] usb 4-1: USB disconnect, device number 44 [ 1498.956212][ T8510] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1499.206159][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1499.327478][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1499.336271][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.347253][ T8510] usb 4-1: config 6 has no interface number 0 [ 1499.353882][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:33 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0xfffff, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:14:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000ffffa8880000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x8848000000000000}, 0x0) 17:14:33 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, &(0x7f0000000540)}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x0, &(0x7f00000001c0)=""/234, 0xea) 17:14:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0xc, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:14:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg(r4, &(0x7f0000005940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000000000000000000000000000b400000000e709560000000000000000575b2594427d0b33bb0d6af3841a7e93c7ad3753c5d04a93c91361ba18f68ca4d77a5b8613e1356dbea1"], 0x20}}], 0x1, 0x0) [ 1499.620959][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1499.630859][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.639349][ T8510] usb 4-1: Product: syz [ 1499.786489][ T8510] usb 4-1: can't set config #6, error -71 [ 1499.836715][ T8510] usb 4-1: USB disconnect, device number 45 17:14:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x4b65, &(0x7f0000000040)) 17:14:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0) 17:14:33 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000ffffff9e0000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1500.359269][ T8510] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1500.607708][ T8510] usb 4-1: Using ep0 maxpacket: 32 17:14:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000fffffff00000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1500.728463][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1500.737786][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.748289][ T8510] usb 4-1: config 6 has no interface number 0 [ 1500.754510][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x541e, 0x0) [ 1500.977452][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1500.987510][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.996154][ T8510] usb 4-1: Product: syz [ 1501.000514][ T8510] usb 4-1: Manufacturer: syz [ 1501.005470][ T8510] usb 4-1: SerialNumber: syz 17:14:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x9effffff00000000}, 0x0) [ 1501.502800][ T3221] fuse: Bad value for 'user_id' [ 1501.536492][ T8510] usb 4-1: USB disconnect, device number 46 [ 1502.316265][ T8510] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1502.558238][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1502.679649][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1502.688442][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.699080][ T8510] usb 4-1: config 6 has no interface number 0 [ 1502.706070][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:36 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x100000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:14:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000000000fff0000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={0x0, 0xec4}, 0x1, 0x11a0000, 0xdc6}, 0x0) 17:14:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 17:14:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0xf, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1503.076319][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1503.086150][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.216805][ T8510] usb 4-1: can't set config #6, error -71 [ 1503.283157][ T8510] usb 4-1: USB disconnect, device number 47 17:14:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000088a8ffff0000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xf502000000000000}, 0x0) 17:14:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fadvise64(r0, 0x0, 0x0, 0x0) [ 1503.706274][ T8510] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1503.948397][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1504.069515][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1504.083096][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.094568][ T8510] usb 4-1: config 6 has no interface number 0 [ 1504.101247][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00007fffffff0000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:37 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x20}]}) 17:14:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xfcffffff00000000}, 0x0) [ 1504.419436][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1504.434119][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.446052][ T8510] usb 4-1: Product: syz [ 1504.450917][ T8510] usb 4-1: Manufacturer: syz [ 1504.458310][ T8510] usb 4-1: SerialNumber: syz 17:14:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff000081ffffff0000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1505.046278][ T3288] fuse: Bad value for 'user_id' [ 1505.092494][T29499] usb 4-1: USB disconnect, device number 48 [ 1505.896054][T29499] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1506.136020][T29499] usb 4-1: Using ep0 maxpacket: 32 [ 1506.257412][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1506.266650][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.277572][T29499] usb 4-1: config 6 has no interface number 0 [ 1506.283940][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:40 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x1fffff, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 1506.526089][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1506.537925][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.546940][T29499] usb 4-1: Product: syz [ 1506.551588][T29499] usb 4-1: Manufacturer: syz 17:14:40 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x560c, 0x0) 17:14:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 17:14:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x10, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:14:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff00009effffff0000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1506.866314][T29499] usb 4-1: can't set config #6, error -71 [ 1506.915284][T29499] usb 4-1: USB disconnect, device number 49 17:14:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 17:14:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}}, 0x0) 17:14:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000f0ffffff0000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1507.406319][T29499] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1507.646178][T29499] usb 4-1: Using ep0 maxpacket: 32 17:14:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x0) 17:14:41 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0xc0045878, 0x0) [ 1507.769144][T29499] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1507.777913][T29499] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.788291][T29499] usb 4-1: config 6 has no interface number 0 [ 1507.794501][T29499] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:41 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000200000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1508.172250][T29499] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1508.183715][T29499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.192378][T29499] usb 4-1: Product: syz [ 1508.196780][T29499] usb 4-1: Manufacturer: syz [ 1508.201567][T29499] usb 4-1: SerialNumber: syz 17:14:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r0) fsetxattr$security_ima(r3, 0x0, 0x0, 0x0, 0x0) [ 1508.671585][ T3361] fuse: Bad value for 'user_id' [ 1508.745268][T29499] usb 4-1: USB disconnect, device number 50 [ 1509.528515][ T8510] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1509.777117][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1509.899491][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1509.908038][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.920518][ T8510] usb 4-1: config 6 has no interface number 0 [ 1509.927254][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000300000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1510.296110][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1510.305362][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.313982][ T8510] usb 4-1: Product: syz [ 1510.318389][ T8510] usb 4-1: Manufacturer: syz 17:14:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 17:14:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x11, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:14:43 executing program 5: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) 17:14:43 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x400000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 1510.526551][ T8510] usb 4-1: can't set config #6, error -71 [ 1510.625974][ T8510] usb 4-1: USB disconnect, device number 51 17:14:44 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000400000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1511.108682][ T8510] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1511.356016][ T8510] usb 4-1: Using ep0 maxpacket: 32 17:14:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x0) 17:14:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000140)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) [ 1511.477454][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1511.486044][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.496601][ T8510] usb 4-1: config 6 has no interface number 0 [ 1511.502813][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000500000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1511.800183][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1511.809637][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.818004][ T8510] usb 4-1: Product: syz [ 1511.822363][ T8510] usb 4-1: Manufacturer: syz [ 1511.827726][ T8510] usb 4-1: SerialNumber: syz 17:14:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) 17:14:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x0, 0x6}, 0x0) 17:14:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000600000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1512.319708][ T3432] fuse: Bad value for 'user_id' [ 1512.405552][ T8510] usb 4-1: USB disconnect, device number 52 17:14:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x5451, 0x0) 17:14:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x0) 17:14:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x14, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:14:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000700000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1513.195943][ T8510] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1513.438266][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1513.557602][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1513.566340][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.576731][ T8510] usb 4-1: config 6 has no interface number 0 [ 1513.582936][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:47 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x400400, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:14:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r0, 0x560e, 0x0) 17:14:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x0, 0xa}, 0x0) 17:14:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000800000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x15, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) [ 1513.946409][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1513.956053][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.060369][ T8510] usb 4-1: can't set config #6, error -71 [ 1514.106593][ T8510] usb 4-1: USB disconnect, device number 53 17:14:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x0, 0xc}, 0x0) 17:14:48 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x1]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) dup(r0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:14:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000900000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1514.566384][ T8510] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1514.807957][ T8510] usb 4-1: Using ep0 maxpacket: 32 [ 1514.927769][ T8510] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1514.938316][ T8510] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.949121][ T8510] usb 4-1: config 6 has no interface number 0 [ 1514.955341][ T8510] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x0, 0xf}, 0x0) 17:14:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b48, &(0x7f0000000180)) [ 1515.349827][ T8510] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1515.359337][ T8510] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 17:14:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000a00000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1515.359399][ T8510] usb 4-1: Product: syz [ 1515.359458][ T8510] usb 4-1: Manufacturer: syz [ 1515.359516][ T8510] usb 4-1: SerialNumber: syz 17:14:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 1515.666336][ T3520] fuse: Bad value for 'user_id' [ 1515.701519][ T8511] usb 4-1: USB disconnect, device number 54 [ 1516.487580][ T8511] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1516.731139][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1516.859051][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1516.867764][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.880252][ T8511] usb 4-1: config 6 has no interface number 0 [ 1516.886954][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:50 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x1000000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) [ 1517.215935][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1517.225116][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.233548][ T8511] usb 4-1: Product: syz [ 1517.237943][ T8511] usb 4-1: Manufacturer: syz 17:14:50 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000b00000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x18, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:14:50 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$BLKSECTGET(r1, 0x1267, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @local}, {0x2, 0x0, 0xfff7fdc0, @loopback}, r3}}, 0x48) 17:14:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x0, 0x48}, 0x0) [ 1517.356223][ T8511] usb 4-1: can't set config #6, error -71 [ 1517.414912][ T8511] usb 4-1: USB disconnect, device number 55 [ 1517.958793][ T8511] usb 4-1: new high-speed USB device number 56 using dummy_hcd 17:14:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000c00000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 17:14:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x0, 0x60}, 0x0) [ 1518.252030][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1518.379030][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1518.387535][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.398141][ T8511] usb 4-1: config 6 has no interface number 0 [ 1518.404356][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000d00000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1518.730725][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1518.740564][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.748868][ T8511] usb 4-1: Product: syz [ 1518.753146][ T8511] usb 4-1: Manufacturer: syz [ 1518.757997][ T8511] usb 4-1: SerialNumber: syz 17:14:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0x75, &(0x7f0000000080), 0x8e00) [ 1519.159341][ T3598] fuse: Bad value for 'user_id' [ 1519.226321][ T3598] fuse: Bad value for 'source' [ 1519.280920][ T8511] usb 4-1: USB disconnect, device number 56 17:14:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x62}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 17:14:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000e00000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1519.892012][ T3649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1520.077675][ T8511] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1520.336627][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1520.457336][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1520.467961][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1520.478710][ T8511] usb 4-1: config 6 has no interface number 0 [ 1520.484919][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:54 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024bc5b200a1a03019f430102030109021b0001060000000904f0ff"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7f6fd79f84dde7c1a01088ade0962e255d2dda773d", @ANYRES64]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x2000000, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 17:14:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='user.incfs.metadata\x00') sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x121, 0x0, 0x0, {0xa, 0x18, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x3f, 0x60, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) 17:14:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000000f00000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x0, 0x2f5}, 0x0) 17:14:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x62}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) [ 1520.758709][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1520.768050][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.776337][ T8511] usb 4-1: Product: syz [ 1520.813291][ T3664] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1520.877804][ T8511] usb 4-1: can't set config #6, error -71 [ 1520.953593][ T8511] usb 4-1: USB disconnect, device number 57 17:14:54 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000001000000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1521.366257][ T8511] usb 4-1: new high-speed USB device number 58 using dummy_hcd 17:14:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x0, 0x500}, 0x0) 17:14:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000001100000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:55 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004acb5b10402001931d76000000010902120001000000000904"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1521.606437][ T8511] usb 4-1: Using ep0 maxpacket: 32 [ 1521.730554][ T8511] usb 4-1: config 6 has an invalid interface number: 240 but max is 0 [ 1521.739129][ T8511] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.750002][ T8511] usb 4-1: config 6 has no interface number 0 [ 1521.756358][ T8511] usb 4-1: config 6 interface 240 has no altsetting 0 17:14:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000001200000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) 17:14:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1000000010001f"], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 1522.030349][ T8511] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=43.9f [ 1522.040005][ T8511] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.048371][ T8511] usb 4-1: Product: syz [ 1522.052848][ T8511] usb 4-1: Manufacturer: syz [ 1522.057685][ T8511] usb 4-1: SerialNumber: syz [ 1522.156218][T26743] usb 6-1: new high-speed USB device number 56 using dummy_hcd 17:14:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000040)) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, 0x0, 0x20004080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0000, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000004c0)=""/172) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c0) getsockname(r3, &(0x7f0000000140)=@xdp, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010001fff0000002500000000002c0000", @ANYRES32=0x0, @ANYBLOB="ed11060000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32, @ANYBLOB="08001f000200000008000500", @ANYRES32=0x0, @ANYBLOB="080028008ceb0000"], 0x58}}, 0x4040) [ 1522.426071][T26743] usb 6-1: Using ep0 maxpacket: 16 [ 1522.462673][ T3678] fuse: Bad value for 'user_id' [ 1522.530039][ T8511] usb 4-1: USB disconnect, device number 58 [ 1522.567085][T26743] usb 6-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=76.1d [ 1522.576749][T26743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.739236][T26743] usb 6-1: config 0 descriptor?? [ 1522.782210][T26743] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1522.790161][T26743] dvb-usb: bulk message failed: -22 (3/0) [ 1522.867848][T26743] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1522.912529][T26743] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1522.921880][T26743] usb 6-1: media controller created [ 1522.927662][T26743] dvb-usb: bulk message failed: -22 (5/0) [ 1522.933747][T26743] dvb-usb: bulk message failed: -22 (5/0) [ 1522.939956][T26743] dvb-usb: bulk message failed: -22 (5/0) [ 1522.950780][T26743] ===================================================== [ 1522.950788][T26743] BUG: KMSAN: uninit-value in mac_address_string+0x1040/0x1170 [ 1522.950794][T26743] CPU: 1 PID: 26743 Comm: kworker/1:2 Not tainted 5.10.0-rc4-syzkaller #0 [ 1522.950801][T26743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1522.950805][T26743] Workqueue: usb_hub_wq hub_event [ 1522.950813][T26743] Call Trace: [ 1522.950817][T26743] dump_stack+0x21c/0x280 [ 1522.950821][T26743] kmsan_report+0xf7/0x1e0 [ 1522.950824][T26743] __msan_warning+0x5f/0xa0 [ 1522.950829][T26743] mac_address_string+0x1040/0x1170 [ 1522.950833][T26743] ? kmsan_get_metadata+0xda/0x180 [ 1522.950837][T26743] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1522.950841][T26743] pointer+0x9fe/0x1ca0 [ 1522.950845][T26743] ? kmsan_get_metadata+0x116/0x180 [ 1522.950850][T26743] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1522.950853][T26743] vsnprintf+0x1a4f/0x3610 [ 1522.950857][T26743] vscnprintf+0xbe/0x1c0 [ 1522.950861][T26743] vprintk_store+0xff/0x14a0 [ 1522.950865][T26743] ? kmsan_internal_set_origin+0x85/0xc0 [ 1522.950870][T26743] vprintk_emit+0x2ae/0x820 [ 1522.950873][T26743] ? __device_attach+0x538/0x860 [ 1522.950877][T26743] ? device_initial_probe+0x4a/0x60 [ 1522.950882][T26743] ? bus_probe_device+0x177/0x3d0 [ 1522.950885][T26743] vprintk_default+0x86/0xa0 [ 1522.950888][T26743] vprintk_func+0x2ed/0x2f0 [ 1522.950891][T26743] printk+0x180/0x1cd [ 1522.950897][T26743] ? dvb_usb_adapter_dvb_init+0x79f/0x1300 [ 1522.950901][T26743] dvb_usb_adapter_dvb_init+0x818/0x1300 [ 1522.950905][T26743] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1522.950910][T26743] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1522.950914][T26743] dvb_usb_device_init+0x27fd/0x3350 [ 1522.950918][T26743] nova_t_probe+0x73/0x80 [ 1522.950922][T26743] ? dibusb_mc_probe+0x80/0x80 [ 1522.950925][T26743] usb_probe_interface+0xfcc/0x1520 [ 1522.950930][T26743] ? usb_register_driver+0x900/0x900 [ 1522.950934][T26743] really_probe+0xebd/0x2420 [ 1522.950937][T26743] driver_probe_device+0x293/0x390 [ 1522.950941][T26743] __device_attach_driver+0x63f/0x830 [ 1522.950946][T26743] bus_for_each_drv+0x2ca/0x3f0 [ 1522.950950][T26743] ? state_synced_show+0x130/0x130 [ 1522.950953][T26743] __device_attach+0x538/0x860 [ 1522.950958][T26743] device_initial_probe+0x4a/0x60 [ 1522.950962][T26743] bus_probe_device+0x177/0x3d0 [ 1522.950966][T26743] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1522.950970][T26743] device_add+0x399e/0x3f20 [ 1522.950974][T26743] usb_set_configuration+0x39cf/0x4010 [ 1522.950978][T26743] ? kmsan_get_metadata+0x116/0x180 [ 1522.950983][T26743] ? usb_set_configuration+0xa61/0x4010 [ 1522.950987][T26743] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1522.950991][T26743] ? usb_choose_configuration+0xc72/0xf00 [ 1522.950996][T26743] usb_generic_driver_probe+0x138/0x300 [ 1522.951000][T26743] ? usb_choose_configuration+0xf00/0xf00 [ 1522.951003][T26743] usb_probe_device+0x317/0x570 [ 1522.951009][T26743] ? usb_register_device_driver+0x590/0x590 [ 1522.951012][T26743] really_probe+0xebd/0x2420 [ 1522.951016][T26743] driver_probe_device+0x293/0x390 [ 1522.951021][T26743] __device_attach_driver+0x63f/0x830 [ 1522.951025][T26743] bus_for_each_drv+0x2ca/0x3f0 [ 1522.951029][T26743] ? state_synced_show+0x130/0x130 [ 1522.951033][T26743] __device_attach+0x538/0x860 [ 1522.951037][T26743] device_initial_probe+0x4a/0x60 [ 1522.951040][T26743] bus_probe_device+0x177/0x3d0 [ 1522.951045][T26743] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1522.951048][T26743] device_add+0x399e/0x3f20 [ 1522.951052][T26743] usb_new_device+0x1bd6/0x2a30 [ 1522.951056][T26743] hub_event+0x5bc9/0x8890 [ 1522.951060][T26743] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1522.951064][T26743] ? kmsan_get_metadata+0x116/0x180 [ 1522.951069][T26743] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1522.951072][T26743] ? led_work+0x780/0x780 [ 1522.951076][T26743] process_one_work+0x121c/0x1fc0 [ 1522.951080][T26743] worker_thread+0x10cc/0x2740 [ 1522.951084][T26743] ? kmsan_get_metadata+0x116/0x180 [ 1522.951088][T26743] ? kmsan_get_metadata+0x116/0x180 [ 1522.951091][T26743] kthread+0x51c/0x560 [ 1522.951096][T26743] ? process_one_work+0x1fc0/0x1fc0 [ 1522.951099][T26743] ? kthread_blkcg+0x110/0x110 [ 1522.951103][T26743] ret_from_fork+0x1f/0x30 [ 1522.951105][T26743] [ 1522.951110][T26743] Uninit was stored to memory at: [ 1522.951114][T26743] kmsan_internal_chain_origin+0xad/0x130 [ 1522.951118][T26743] __msan_chain_origin+0x57/0xa0 [ 1522.951122][T26743] nova_t_read_mac_address+0x2d4/0x2f0 [ 1522.951126][T26743] dvb_usb_adapter_dvb_init+0x774/0x1300 [ 1522.951131][T26743] dvb_usb_device_init+0x27fd/0x3350 [ 1522.951135][T26743] nova_t_probe+0x73/0x80 [ 1522.951138][T26743] usb_probe_interface+0xfcc/0x1520 [ 1522.951142][T26743] really_probe+0xebd/0x2420 [ 1522.951146][T26743] driver_probe_device+0x293/0x390 [ 1522.951150][T26743] __device_attach_driver+0x63f/0x830 [ 1522.951153][T26743] bus_for_each_drv+0x2ca/0x3f0 [ 1522.951157][T26743] __device_attach+0x538/0x860 [ 1522.951160][T26743] device_initial_probe+0x4a/0x60 [ 1522.951164][T26743] bus_probe_device+0x177/0x3d0 [ 1522.951167][T26743] device_add+0x399e/0x3f20 [ 1522.951171][T26743] usb_set_configuration+0x39cf/0x4010 [ 1522.951175][T26743] usb_generic_driver_probe+0x138/0x300 [ 1522.951179][T26743] usb_probe_device+0x317/0x570 [ 1522.951183][T26743] really_probe+0xebd/0x2420 [ 1522.951186][T26743] driver_probe_device+0x293/0x390 [ 1522.951190][T26743] __device_attach_driver+0x63f/0x830 [ 1522.951194][T26743] bus_for_each_drv+0x2ca/0x3f0 [ 1522.951197][T26743] __device_attach+0x538/0x860 [ 1522.951201][T26743] device_initial_probe+0x4a/0x60 [ 1522.951205][T26743] bus_probe_device+0x177/0x3d0 [ 1522.951208][T26743] device_add+0x399e/0x3f20 [ 1522.951211][T26743] usb_new_device+0x1bd6/0x2a30 [ 1522.951215][T26743] hub_event+0x5bc9/0x8890 [ 1522.951219][T26743] process_one_work+0x121c/0x1fc0 [ 1522.951222][T26743] worker_thread+0x10cc/0x2740 [ 1522.951226][T26743] kthread+0x51c/0x560 [ 1522.951229][T26743] ret_from_fork+0x1f/0x30 [ 1522.951231][T26743] [ 1522.951235][T26743] Uninit was stored to memory at: [ 1522.951239][T26743] kmsan_internal_chain_origin+0xad/0x130 [ 1522.951243][T26743] __msan_chain_origin+0x57/0xa0 [ 1522.951247][T26743] dibusb_read_eeprom_byte+0x513/0x540 [ 1522.951251][T26743] nova_t_read_mac_address+0x1e3/0x2f0 [ 1522.951255][T26743] dvb_usb_adapter_dvb_init+0x774/0x1300 [ 1522.951259][T26743] dvb_usb_device_init+0x27fd/0x3350 [ 1522.951262][T26743] nova_t_probe+0x73/0x80 [ 1522.951266][T26743] usb_probe_interface+0xfcc/0x1520 [ 1522.951269][T26743] really_probe+0xebd/0x2420 [ 1522.951273][T26743] driver_probe_device+0x293/0x390 [ 1522.951277][T26743] __device_attach_driver+0x63f/0x830 [ 1522.951281][T26743] bus_for_each_drv+0x2ca/0x3f0 [ 1522.951284][T26743] __device_attach+0x538/0x860 [ 1522.951288][T26743] device_initial_probe+0x4a/0x60 [ 1522.951291][T26743] bus_probe_device+0x177/0x3d0 [ 1522.951295][T26743] device_add+0x399e/0x3f20 [ 1522.951299][T26743] usb_set_configuration+0x39cf/0x4010 [ 1522.951302][T26743] usb_generic_driver_probe+0x138/0x300 [ 1522.951306][T26743] usb_probe_device+0x317/0x570 [ 1522.951310][T26743] really_probe+0xebd/0x2420 [ 1522.951313][T26743] driver_probe_device+0x293/0x390 [ 1522.951317][T26743] __device_attach_driver+0x63f/0x830 [ 1522.951321][T26743] bus_for_each_drv+0x2ca/0x3f0 [ 1522.951324][T26743] __device_attach+0x538/0x860 [ 1522.951328][T26743] device_initial_probe+0x4a/0x60 [ 1522.951332][T26743] bus_probe_device+0x177/0x3d0 [ 1522.951335][T26743] device_add+0x399e/0x3f20 [ 1522.951339][T26743] usb_new_device+0x1bd6/0x2a30 [ 1522.951342][T26743] hub_event+0x5bc9/0x8890 [ 1522.951346][T26743] process_one_work+0x121c/0x1fc0 [ 1522.951350][T26743] worker_thread+0x10cc/0x2740 [ 1522.951353][T26743] kthread+0x51c/0x560 [ 1522.951356][T26743] ret_from_fork+0x1f/0x30 [ 1522.951359][T26743] [ 1522.951362][T26743] Uninit was created at: [ 1522.951366][T26743] kmsan_internal_poison_shadow+0x5c/0xf0 [ 1522.951370][T26743] kmsan_slab_alloc+0x8d/0xe0 [ 1522.951374][T26743] kmem_cache_alloc_trace+0x869/0x1020 [ 1522.951377][T26743] dibusb_read_eeprom_byte+0xad/0x540 [ 1522.951381][T26743] nova_t_read_mac_address+0x1e3/0x2f0 [ 1522.951385][T26743] dvb_usb_adapter_dvb_init+0x774/0x1300 [ 1522.951389][T26743] dvb_usb_device_init+0x27fd/0x3350 [ 1522.951392][T26743] nova_t_probe+0x73/0x80 [ 1522.951396][T26743] usb_probe_interface+0xfcc/0x1520 [ 1522.951400][T26743] really_probe+0xebd/0x2420 [ 1522.951403][T26743] driver_probe_device+0x293/0x390 [ 1522.951407][T26743] __device_attach_driver+0x63f/0x830 [ 1522.951411][T26743] bus_for_each_drv+0x2ca/0x3f0 [ 1522.951414][T26743] __device_attach+0x538/0x860 [ 1522.951418][T26743] device_initial_probe+0x4a/0x60 [ 1522.951422][T26743] bus_probe_device+0x177/0x3d0 [ 1522.951425][T26743] device_add+0x399e/0x3f20 [ 1522.951429][T26743] usb_set_configuration+0x39cf/0x4010 [ 1522.951433][T26743] usb_generic_driver_probe+0x138/0x300 [ 1522.951437][T26743] usb_probe_device+0x317/0x570 [ 1522.951440][T26743] really_probe+0xebd/0x2420 [ 1522.951444][T26743] driver_probe_device+0x293/0x390 [ 1522.951447][T26743] __device_attach_driver+0x63f/0x830 [ 1522.951451][T26743] bus_for_each_drv+0x2ca/0x3f0 [ 1522.951455][T26743] __device_attach+0x538/0x860 [ 1522.951458][T26743] device_initial_probe+0x4a/0x60 [ 1522.951462][T26743] bus_probe_device+0x177/0x3d0 [ 1522.951465][T26743] device_add+0x399e/0x3f20 [ 1522.951469][T26743] usb_new_device+0x1bd6/0x2a30 [ 1522.951472][T26743] hub_event+0x5bc9/0x8890 [ 1522.951476][T26743] process_one_work+0x121c/0x1fc0 [ 1522.951480][T26743] worker_thread+0x10cc/0x2740 [ 1522.951483][T26743] kthread+0x51c/0x560 [ 1522.951486][T26743] ret_from_fork+0x1f/0x30 [ 1522.951491][T26743] ===================================================== [ 1522.951495][T26743] Disabling lock debugging due to kernel taint [ 1522.951500][T26743] Kernel panic - not syncing: panic_on_warn set ... [ 1522.951507][T26743] CPU: 1 PID: 26743 Comm: kworker/1:2 Tainted: G B 5.10.0-rc4-syzkaller #0 [ 1522.951513][T26743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1522.951517][T26743] Workqueue: usb_hub_wq hub_event [ 1522.951522][T26743] Call Trace: [ 1522.951525][T26743] dump_stack+0x21c/0x280 [ 1522.951528][T26743] panic+0x4c8/0xea7 [ 1522.951532][T26743] ? add_taint+0x17c/0x210 [ 1522.951535][T26743] ? vsnprintf+0x325/0x3610 [ 1522.951539][T26743] kmsan_report+0x1da/0x1e0 [ 1522.951547][T26743] __msan_warning+0x5f/0xa0 [ 1522.951550][T26743] mac_address_string+0x1040/0x1170 [ 1522.951554][T26743] ? kmsan_get_metadata+0xda/0x180 [ 1522.951558][T26743] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1522.951562][T26743] pointer+0x9fe/0x1ca0 [ 1522.951565][T26743] ? kmsan_get_metadata+0x116/0x180 [ 1522.951570][T26743] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1522.951573][T26743] vsnprintf+0x1a4f/0x3610 [ 1522.951576][T26743] vscnprintf+0xbe/0x1c0 [ 1522.951580][T26743] vprintk_store+0xff/0x14a0 [ 1522.951584][T26743] ? kmsan_internal_set_origin+0x85/0xc0 [ 1522.951587][T26743] vprintk_emit+0x2ae/0x820 [ 1522.951591][T26743] ? __device_attach+0x538/0x860 [ 1522.951595][T26743] ? device_initial_probe+0x4a/0x60 [ 1522.951598][T26743] ? bus_probe_device+0x177/0x3d0 [ 1522.951602][T26743] vprintk_default+0x86/0xa0 [ 1522.951605][T26743] vprintk_func+0x2ed/0x2f0 [ 1522.951608][T26743] printk+0x180/0x1cd [ 1522.951613][T26743] ? dvb_usb_adapter_dvb_init+0x79f/0x1300 [ 1522.951617][T26743] dvb_usb_adapter_dvb_init+0x818/0x1300 [ 1522.951621][T26743] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1522.951625][T26743] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1522.951629][T26743] dvb_usb_device_init+0x27fd/0x3350 [ 1522.951632][T26743] nova_t_probe+0x73/0x80 [ 1522.951636][T26743] ? dibusb_mc_probe+0x80/0x80 [ 1522.951640][T26743] usb_probe_interface+0xfcc/0x1520 [ 1522.951644][T26743] ? usb_register_driver+0x900/0x900 [ 1522.951647][T26743] really_probe+0xebd/0x2420 [ 1522.951651][T26743] driver_probe_device+0x293/0x390 [ 1522.951657][T26743] __device_attach_driver+0x63f/0x830 [ 1522.951661][T26743] bus_for_each_drv+0x2ca/0x3f0 [ 1522.951665][T26743] ? state_synced_show+0x130/0x130 [ 1522.951669][T26743] __device_attach+0x538/0x860 [ 1522.951673][T26743] device_initial_probe+0x4a/0x60 [ 1522.951677][T26743] bus_probe_device+0x177/0x3d0 [ 1522.951682][T26743] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1522.951685][T26743] device_add+0x399e/0x3f20 [ 1522.951689][T26743] usb_set_configuration+0x39cf/0x4010 [ 1522.951693][T26743] ? kmsan_get_metadata+0x116/0x180 [ 1522.951697][T26743] ? usb_set_configuration+0xa61/0x4010 [ 1522.951702][T26743] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1522.951706][T26743] ? usb_choose_configuration+0xc72/0xf00 [ 1522.951711][T26743] usb_generic_driver_probe+0x138/0x300 [ 1522.951715][T26743] ? usb_choose_configuration+0xf00/0xf00 [ 1522.951719][T26743] usb_probe_device+0x317/0x570 [ 1522.951724][T26743] ? usb_register_device_driver+0x590/0x590 [ 1522.951727][T26743] really_probe+0xebd/0x2420 [ 1522.951732][T26743] driver_probe_device+0x293/0x390 [ 1522.951736][T26743] __device_attach_driver+0x63f/0x830 [ 1522.951740][T26743] bus_for_each_drv+0x2ca/0x3f0 [ 1522.951744][T26743] ? state_synced_show+0x130/0x130 [ 1522.951748][T26743] __device_attach+0x538/0x860 [ 1522.951752][T26743] device_initial_probe+0x4a/0x60 [ 1522.951756][T26743] bus_probe_device+0x177/0x3d0 [ 1522.951761][T26743] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1522.951763][T26743] device_add+ [ 1522.951770][T26743] Lost 15 message(s)!